New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use match for enterprise codesigning #2007

Closed
fastlanebot opened this Issue Dec 31, 2015 · 16 comments

Comments

Projects
None yet
7 participants
@fastlanebot

fastlanebot commented Dec 31, 2015

Original issue by @nicolasbraun - Imported from fastlane/match#57

Hi,

I am trying to use Match to share and Entreprise In House certificat.
The enterprise type is not officially supported but using type appstore the following command works

match appstore

to generate a distribution certificate and inHouse mobileprovision (even though it is called Match AppStore) http://i.imgur.com/IauNTHg.png

Sadly the following commands fail afterwards to retrieve the assets.

match appstore --readonly

Is there any solution int he current state of match?

Regards,

Nicolas

@fastlanebot

This comment has been minimized.

Show comment
Hide comment
@fastlanebot

fastlanebot Dec 31, 2015

@JaviSoto commented

Match won't use your existing profiles, only the profiles it created it self. For this, I believe you'd have to use nuke to delete that one, and then allow Match to generate a new one that it will manage from then on.

fastlanebot commented Dec 31, 2015

@JaviSoto commented

Match won't use your existing profiles, only the profiles it created it self. For this, I believe you'd have to use nuke to delete that one, and then allow Match to generate a new one that it will manage from then on.

@fastlanebot

This comment has been minimized.

Show comment
Hide comment
@fastlanebot

fastlanebot Dec 31, 2015

@nicolasbraun commented

I did create a profile using the match appstorecommand and it worked (even if it is named App Store). Only the retrieval on another computer with the --readonlyoption fails

fastlanebot commented Dec 31, 2015

@nicolasbraun commented

I did create a profile using the match appstorecommand and it worked (even if it is named App Store). Only the retrieval on another computer with the --readonlyoption fails

@fastlanebot

This comment has been minimized.

Show comment
Hide comment
@fastlanebot

fastlanebot Jan 2, 2016

@KrauseFx commented

@nicolasbraun The screenshot looks good. Can you share the complete output when running match appstore --readonly so that I can see the error message and stack trace?

fastlanebot commented Jan 2, 2016

@KrauseFx commented

@nicolasbraun The screenshot looks good. Can you share the complete output when running match appstore --readonly so that I can see the error message and stack trace?

@fastlanebot

This comment has been minimized.

Show comment
Hide comment
@fastlanebot

fastlanebot Jan 4, 2016

@nicolasbraun commented

Hi here are the complete logs.
I upgraded to match 0.2.4 meanwhile

NICOLAS-3:ADSigningAssets nicolasbraun$ match appstore --team_id '####' --team_name '####' --verbose --readonly

+----------------+---------------------------------------------+
|                   Summary for match 0.2.4                    |
+----------------+---------------------------------------------+
| git_url        | ssh://### |
| type           | appstore                                    |
| app_identifier | *                                           |
| username       | user@domain.com                       |
| keychain_name  | login.keychain                              |
| readonly       | true                                        |
| team_id        | #####                                  |
| team_name      | #####                             |
| verbose        | true                                        |
| force          | false                                       |
| shallow_clone  | false                                       |
+----------------+---------------------------------------------+

INFO [2016-01-04 17:09:37.23]: Cloning remote git repo...
INFO [2016-01-04 17:09:37.23]: $ git clone '########' '/var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32386-18q55vu'
INFO [2016-01-04 17:09:37.26]: > Cloning into '/var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32386-18q55vu'...
INFO [2016-01-04 17:09:37.97]: > remote: Counting objects: 98, done.
INFO [2016-01-04 17:09:38.01]: > remote: Compressing objects: 100% (82/82), done.
INFO [2016-01-04 17:09:38.08]: > remote: Total 98 (delta 12), reused 0 (delta 0
INFO [2016-01-04 17:09:38.08]: > Receiving objects: 100% (98/98), 268.41 KiB | 0 bytes/s, done.
INFO [2016-01-04 17:09:38.08]: > Resolving deltas: 100% (12/12), done.
INFO [2016-01-04 17:09:38.09]: > Checking connectivity... done.
INFO [2016-01-04 17:09:38.18]: 🔓  Decrypted 'J5FFU7896S.cer'
INFO [2016-01-04 17:09:38.21]: 🔓  Decrypted 'GZ45U2Q3Z7.cer'
INFO [2016-01-04 17:09:38.26]: 🔓  Decrypted 'J5FFU7896S.p12'
INFO [2016-01-04 17:09:38.30]: 🔓  Decrypted 'GZ45U2Q3Z7.p12'
INFO [2016-01-04 17:09:38.33]: 🔓  Decrypted 'InHouse_*.mobileprovision'
INFO [2016-01-04 17:09:38.39]: 🔓  Decrypted 'Development_*.mobileprovision'
INFO [2016-01-04 17:09:38.43]: 🔓  Decrypted 'Development_com.applidium.test.mobileprovision'
INFO [2016-01-04 17:09:38.48]: 🔓  Decrypted 'Development_com.applidium.test.watchkitapp.mobileprovision'
INFO [2016-01-04 17:09:38.51]: 🔓  Decrypted 'Development_com.applidium.test.watchkitextension.mobileprovision'
INFO [2016-01-04 17:09:38.55]: 🔓  Decrypted 'Development_com.applidium.tvostest.mobileprovision'
INFO [2016-01-04 17:09:38.55]: 🔓  Successfully decrypted certificates repo
INFO [2016-01-04 17:09:38.55]: Installing certificate...
DEBUG [2016-01-04 17:09:40.22]: Certificate 'GZ45U2Q3Z7.cer' is already installed on this machine
INFO [2016-01-04 17:09:40.22]: $ security import /var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32386-18q55vu/certs/distribution/GZ45U2Q3Z7.p12 -k ~/Library/Keychains/login.keychain -T /usr/bin/codesign -T /usr/bin/security&> /dev/null
INFO [2016-01-04 17:09:40.32]: 🔒  Successfully encrypted certificates repo
/Users/nicolasbraun/.rbenv/versions/2.2.3/lib/ruby/gems/2.2.0/gems/fastlane_core-0.31.0/lib/fastlane_core/ui/implementations/shell.rb:110:in `crash!': No matching provisioning profiles found and can not create a new one because you enabled `readonly` (RuntimeError)

Here are also the logs when creating the assets
Assets creation using type=appstore since enterprise is not supported

NICOLAS-3:ADSigningAssets nicolasbraun$ match appstore --team_id '####' --team_name '####' --verbose

+----------------+---------------------------------------------+
|                   Summary for match 0.2.4                    |
+----------------+---------------------------------------------+
| git_url        | ssh://#### |
| type           | appstore                                    |
| app_identifier | *                                           |
| username       | ###@applidium.com                       |
| keychain_name  | login.keychain                              |
| readonly       | false                                       |
| team_id        | ###                                |
| team_name      | ####                           |
| verbose        | true                                        |
| force          | false                                       |
| shallow_clone  | false                                       |
+----------------+---------------------------------------------+

INFO [2016-01-04 17:07:15.89]: Cloning remote git repo...
INFO [2016-01-04 17:07:15.89]: $ git clone 'ssh://####' '/var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32193-1vp6yx7'
INFO [2016-01-04 17:07:15.89]: > Cloning into '/var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32193-1vp6yx7'...
INFO [2016-01-04 17:07:16.17]: > remote: Counting objects: 79, done.
INFO [2016-01-04 17:07:16.21]: > remote: Compressing objects: 100% (64/64), done.
INFO [2016-01-04 17:07:16.24]: > remote: Total 79 (delta 10), reused 0 (delta 0
INFO [2016-01-04 17:07:16.24]: > Receiving objects: 100% (79/79), 199.53 KiB | 0 bytes/s, done.
INFO [2016-01-04 17:07:16.24]: > Resolving deltas: 100% (10/10), done.
INFO [2016-01-04 17:07:16.25]: > Checking connectivity... done.
INFO [2016-01-04 17:07:16.31]: 🔓  Decrypted 'J5FFU7896S.cer'
INFO [2016-01-04 17:07:16.34]: 🔓  Decrypted 'J5FFU7896S.p12'
INFO [2016-01-04 17:07:16.39]: 🔓  Decrypted 'Development_*.mobileprovision'
INFO [2016-01-04 17:07:16.44]: 🔓  Decrypted 'Development_com.applidium.test.mobileprovision'
INFO [2016-01-04 17:07:16.48]: 🔓  Decrypted 'Development_com.applidium.test.watchkitapp.mobileprovision'
INFO [2016-01-04 17:07:16.52]: 🔓  Decrypted 'Development_com.applidium.test.watchkitextension.mobileprovision'
INFO [2016-01-04 17:07:16.58]: 🔓  Decrypted 'Development_com.applidium.tvostest.mobileprovision'
INFO [2016-01-04 17:07:16.58]: 🔓  Successfully decrypted certificates repo
INFO [2016-01-04 17:07:16.61]: Verifying that the certificate and profile are still valid on the Dev Portal...
WARN [2016-01-04 17:07:18.97]: Couldn't find a valid code signing identity in the git repo for distribution... creating one for you now

+-------------+---------------------------------------------------------------------------------------------+
|                                          Summary for cert 1.2.7                                           |
+-------------+---------------------------------------------------------------------------------------------+
| development | false                                                                                       |
| force       | true                                                                                        |
| username    | ###@applidium.com                                                                       |
| output_path | /var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32193-1vp6yx7/certs/distribution |
+-------------+---------------------------------------------------------------------------------------------+

INFO [2016-01-04 17:07:18.98]: Starting login with user '###@applidium.com'
INFO [2016-01-04 17:07:20.20]: Successfully logged in
INFO [2016-01-04 17:07:23.23]: security import /var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32193-1vp6yx7/certs/distribution/GZ45U2Q3Z7.p12 -k '/Users/nicolasbraun/Library/Keychains/login.keychain' -T /usr/bin/codesign -T /usr/bin/security
INFO [2016-01-04 17:07:23.39]: 1 key imported.

INFO [2016-01-04 17:07:23.39]: security import /var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32193-1vp6yx7/certs/distribution/GZ45U2Q3Z7.cer -k '/Users/nicolasbraun/Library/Keychains/login.keychain' -T /usr/bin/codesign -T /usr/bin/security
INFO [2016-01-04 17:07:23.43]: 1 certificate imported.

INFO [2016-01-04 17:07:23.43]: Successfully generated GZ45U2Q3Z7 which was imported to the local machine.

+-------------------------------------+-----------------------+
|                   Summary for sigh 1.2.1                    |
+-------------------------------------+-----------------------+
| adhoc                               | false                 |
| skip_install                        | false                 |
| development                         | false                 |
| force                               | true                  |
| app_identifier                      | *                     |
| username                            | ####@applidium.com |
| provisioning_name                   | match AppStore *      |
| ignore_profiles_with_different_name | true                  |
| cert_id                             | GZ45U2Q3Z7            |
| skip_fetch_profiles                 | false                 |
| skip_certificate_verification       | false                 |
+-------------------------------------+-----------------------+

INFO [2016-01-04 17:07:26.17]: Starting login with user '####@applidium.com'
INFO [2016-01-04 17:07:27.38]: Successfully logged in
INFO [2016-01-04 17:07:27.38]: Fetching profiles...
INFO [2016-01-04 17:07:29.42]: No existing profiles, creating a new one for you
INFO [2016-01-04 17:07:31.50]: Creating new provisioning profile for '*' with name 'match AppStore *'
INFO [2016-01-04 17:07:32.91]: Downloading provisioning profile...
INFO [2016-01-04 17:07:33.79]: Successfully downloaded provisioning profile...
INFO [2016-01-04 17:07:33.87]: Installing provisioning profile...
/var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32193-1vp6yx7/profiles/appstore/InHouse_*.mobileprovision
INFO [2016-01-04 17:07:33.93]: Installing provisioning profile...
WARN [2016-01-04 17:07:34.06]: Setting environment variable 'sigh_*_appstore' to 'bd9ff9d4-5889-45b2-ae7b-c68a342fdfea'
INFO [2016-01-04 17:07:34.81]: 🔒  Encrypted 'J5FFU7896S.cer'
INFO [2016-01-04 17:07:34.85]: 🔒  Encrypted 'GZ45U2Q3Z7.cer'
INFO [2016-01-04 17:07:34.90]: 🔒  Encrypted 'J5FFU7896S.p12'
INFO [2016-01-04 17:07:34.95]: 🔒  Encrypted 'GZ45U2Q3Z7.p12'
INFO [2016-01-04 17:07:35.00]: 🔒  Encrypted 'InHouse_*.mobileprovision'
INFO [2016-01-04 17:07:35.05]: 🔒  Encrypted 'Development_*.mobileprovision'
INFO [2016-01-04 17:07:35.10]: 🔒  Encrypted 'Development_com.applidium.test.mobileprovision'
INFO [2016-01-04 17:07:35.14]: 🔒  Encrypted 'Development_com.applidium.test.watchkitapp.mobileprovision'
INFO [2016-01-04 17:07:35.20]: 🔒  Encrypted 'Development_com.applidium.test.watchkitextension.mobileprovision'
INFO [2016-01-04 17:07:35.25]: 🔒  Encrypted 'Development_com.applidium.tvostest.mobileprovision'
INFO [2016-01-04 17:07:35.25]: 🔒  Successfully encrypted certificates repo
INFO [2016-01-04 17:07:35.25]: Pushing changes to remote git repo...
INFO [2016-01-04 17:07:35.25]: $ git add -A
INFO [2016-01-04 17:07:35.27]: $ git commit -m '[fastlane] Updated * for appstore'
INFO [2016-01-04 17:07:35.30]: > [master 5202cea] [fastlane] Updated * for appstore
INFO [2016-01-04 17:07:35.30]: > 11 files changed, 1412 insertions(+), 1192 deletions(-)
INFO [2016-01-04 17:07:35.30]: > rewrite certs/development/J5FFU7896S.cer (98%)
INFO [2016-01-04 17:07:35.30]: > rewrite certs/development/J5FFU7896S.p12 (98%)
INFO [2016-01-04 17:07:35.30]: > create mode 100644 certs/distribution/GZ45U2Q3Z7.cer
INFO [2016-01-04 17:07:35.30]: > create mode 100644 certs/distribution/GZ45U2Q3Z7.p12
INFO [2016-01-04 17:07:35.30]: > create mode 100644 profiles/appstore/InHouse_*.mobileprovision
INFO [2016-01-04 17:07:35.30]: > rewrite profiles/development/Development_*.mobileprovision (98%)
INFO [2016-01-04 17:07:35.30]: > rewrite profiles/development/Development_com.applidium.test.mobileprovision (97%)
INFO [2016-01-04 17:07:35.30]: > rewrite profiles/development/Development_com.applidium.test.watchkitapp.mobileprovision (98%)
INFO [2016-01-04 17:07:35.31]: > rewrite profiles/development/Development_com.applidium.test.watchkitextension.mobileprovision (98%)
INFO [2016-01-04 17:07:35.31]: > rewrite profiles/development/Development_com.applidium.tvostest.mobileprovision (98%)
INFO [2016-01-04 17:07:35.31]: $ git push origin master
INFO [2016-01-04 17:07:35.61]: > Counting objects: 19, done.
INFO [2016-01-04 17:07:35.61]: > Delta compression using up to 4 threads.
INFO [2016-01-04 17:07:35.61]: > Compressing objects: 100% (18/18), done.
INFO [2016-01-04 17:07:35.62]: > Writing objects: 100% (19/19), 68.95 KiB | 0 bytes/s, done.
INFO [2016-01-04 17:07:35.62]: > Total 19 (delta 2), reused 0 (delta 0)
INFO [2016-01-04 17:07:38.58]: > To ssh:/#####
INFO [2016-01-04 17:07:38.59]: > dbdb9bb..5202cea  master -> master

+----------------------+--------------------------------------+
|               Installed Provisioning Profile                |
+----------------------+--------------------------------------+
| App Identifier       | *                                    |
| Type                 | appstore                             |
| UUID                 | bd9ff9d4-5889-45b2-ae7b-c68a342fdfea |
| Environment Variable | sigh_*_appstore                      |
+----------------------+--------------------------------------+

INFO [2016-01-04 17:07:38.60]: All required keys, certificates and provisioning profiles are installed 🙌

fastlanebot commented Jan 4, 2016

@nicolasbraun commented

Hi here are the complete logs.
I upgraded to match 0.2.4 meanwhile

NICOLAS-3:ADSigningAssets nicolasbraun$ match appstore --team_id '####' --team_name '####' --verbose --readonly

+----------------+---------------------------------------------+
|                   Summary for match 0.2.4                    |
+----------------+---------------------------------------------+
| git_url        | ssh://### |
| type           | appstore                                    |
| app_identifier | *                                           |
| username       | user@domain.com                       |
| keychain_name  | login.keychain                              |
| readonly       | true                                        |
| team_id        | #####                                  |
| team_name      | #####                             |
| verbose        | true                                        |
| force          | false                                       |
| shallow_clone  | false                                       |
+----------------+---------------------------------------------+

INFO [2016-01-04 17:09:37.23]: Cloning remote git repo...
INFO [2016-01-04 17:09:37.23]: $ git clone '########' '/var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32386-18q55vu'
INFO [2016-01-04 17:09:37.26]: > Cloning into '/var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32386-18q55vu'...
INFO [2016-01-04 17:09:37.97]: > remote: Counting objects: 98, done.
INFO [2016-01-04 17:09:38.01]: > remote: Compressing objects: 100% (82/82), done.
INFO [2016-01-04 17:09:38.08]: > remote: Total 98 (delta 12), reused 0 (delta 0
INFO [2016-01-04 17:09:38.08]: > Receiving objects: 100% (98/98), 268.41 KiB | 0 bytes/s, done.
INFO [2016-01-04 17:09:38.08]: > Resolving deltas: 100% (12/12), done.
INFO [2016-01-04 17:09:38.09]: > Checking connectivity... done.
INFO [2016-01-04 17:09:38.18]: 🔓  Decrypted 'J5FFU7896S.cer'
INFO [2016-01-04 17:09:38.21]: 🔓  Decrypted 'GZ45U2Q3Z7.cer'
INFO [2016-01-04 17:09:38.26]: 🔓  Decrypted 'J5FFU7896S.p12'
INFO [2016-01-04 17:09:38.30]: 🔓  Decrypted 'GZ45U2Q3Z7.p12'
INFO [2016-01-04 17:09:38.33]: 🔓  Decrypted 'InHouse_*.mobileprovision'
INFO [2016-01-04 17:09:38.39]: 🔓  Decrypted 'Development_*.mobileprovision'
INFO [2016-01-04 17:09:38.43]: 🔓  Decrypted 'Development_com.applidium.test.mobileprovision'
INFO [2016-01-04 17:09:38.48]: 🔓  Decrypted 'Development_com.applidium.test.watchkitapp.mobileprovision'
INFO [2016-01-04 17:09:38.51]: 🔓  Decrypted 'Development_com.applidium.test.watchkitextension.mobileprovision'
INFO [2016-01-04 17:09:38.55]: 🔓  Decrypted 'Development_com.applidium.tvostest.mobileprovision'
INFO [2016-01-04 17:09:38.55]: 🔓  Successfully decrypted certificates repo
INFO [2016-01-04 17:09:38.55]: Installing certificate...
DEBUG [2016-01-04 17:09:40.22]: Certificate 'GZ45U2Q3Z7.cer' is already installed on this machine
INFO [2016-01-04 17:09:40.22]: $ security import /var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32386-18q55vu/certs/distribution/GZ45U2Q3Z7.p12 -k ~/Library/Keychains/login.keychain -T /usr/bin/codesign -T /usr/bin/security&> /dev/null
INFO [2016-01-04 17:09:40.32]: 🔒  Successfully encrypted certificates repo
/Users/nicolasbraun/.rbenv/versions/2.2.3/lib/ruby/gems/2.2.0/gems/fastlane_core-0.31.0/lib/fastlane_core/ui/implementations/shell.rb:110:in `crash!': No matching provisioning profiles found and can not create a new one because you enabled `readonly` (RuntimeError)

Here are also the logs when creating the assets
Assets creation using type=appstore since enterprise is not supported

NICOLAS-3:ADSigningAssets nicolasbraun$ match appstore --team_id '####' --team_name '####' --verbose

+----------------+---------------------------------------------+
|                   Summary for match 0.2.4                    |
+----------------+---------------------------------------------+
| git_url        | ssh://#### |
| type           | appstore                                    |
| app_identifier | *                                           |
| username       | ###@applidium.com                       |
| keychain_name  | login.keychain                              |
| readonly       | false                                       |
| team_id        | ###                                |
| team_name      | ####                           |
| verbose        | true                                        |
| force          | false                                       |
| shallow_clone  | false                                       |
+----------------+---------------------------------------------+

INFO [2016-01-04 17:07:15.89]: Cloning remote git repo...
INFO [2016-01-04 17:07:15.89]: $ git clone 'ssh://####' '/var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32193-1vp6yx7'
INFO [2016-01-04 17:07:15.89]: > Cloning into '/var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32193-1vp6yx7'...
INFO [2016-01-04 17:07:16.17]: > remote: Counting objects: 79, done.
INFO [2016-01-04 17:07:16.21]: > remote: Compressing objects: 100% (64/64), done.
INFO [2016-01-04 17:07:16.24]: > remote: Total 79 (delta 10), reused 0 (delta 0
INFO [2016-01-04 17:07:16.24]: > Receiving objects: 100% (79/79), 199.53 KiB | 0 bytes/s, done.
INFO [2016-01-04 17:07:16.24]: > Resolving deltas: 100% (10/10), done.
INFO [2016-01-04 17:07:16.25]: > Checking connectivity... done.
INFO [2016-01-04 17:07:16.31]: 🔓  Decrypted 'J5FFU7896S.cer'
INFO [2016-01-04 17:07:16.34]: 🔓  Decrypted 'J5FFU7896S.p12'
INFO [2016-01-04 17:07:16.39]: 🔓  Decrypted 'Development_*.mobileprovision'
INFO [2016-01-04 17:07:16.44]: 🔓  Decrypted 'Development_com.applidium.test.mobileprovision'
INFO [2016-01-04 17:07:16.48]: 🔓  Decrypted 'Development_com.applidium.test.watchkitapp.mobileprovision'
INFO [2016-01-04 17:07:16.52]: 🔓  Decrypted 'Development_com.applidium.test.watchkitextension.mobileprovision'
INFO [2016-01-04 17:07:16.58]: 🔓  Decrypted 'Development_com.applidium.tvostest.mobileprovision'
INFO [2016-01-04 17:07:16.58]: 🔓  Successfully decrypted certificates repo
INFO [2016-01-04 17:07:16.61]: Verifying that the certificate and profile are still valid on the Dev Portal...
WARN [2016-01-04 17:07:18.97]: Couldn't find a valid code signing identity in the git repo for distribution... creating one for you now

+-------------+---------------------------------------------------------------------------------------------+
|                                          Summary for cert 1.2.7                                           |
+-------------+---------------------------------------------------------------------------------------------+
| development | false                                                                                       |
| force       | true                                                                                        |
| username    | ###@applidium.com                                                                       |
| output_path | /var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32193-1vp6yx7/certs/distribution |
+-------------+---------------------------------------------------------------------------------------------+

INFO [2016-01-04 17:07:18.98]: Starting login with user '###@applidium.com'
INFO [2016-01-04 17:07:20.20]: Successfully logged in
INFO [2016-01-04 17:07:23.23]: security import /var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32193-1vp6yx7/certs/distribution/GZ45U2Q3Z7.p12 -k '/Users/nicolasbraun/Library/Keychains/login.keychain' -T /usr/bin/codesign -T /usr/bin/security
INFO [2016-01-04 17:07:23.39]: 1 key imported.

INFO [2016-01-04 17:07:23.39]: security import /var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32193-1vp6yx7/certs/distribution/GZ45U2Q3Z7.cer -k '/Users/nicolasbraun/Library/Keychains/login.keychain' -T /usr/bin/codesign -T /usr/bin/security
INFO [2016-01-04 17:07:23.43]: 1 certificate imported.

INFO [2016-01-04 17:07:23.43]: Successfully generated GZ45U2Q3Z7 which was imported to the local machine.

+-------------------------------------+-----------------------+
|                   Summary for sigh 1.2.1                    |
+-------------------------------------+-----------------------+
| adhoc                               | false                 |
| skip_install                        | false                 |
| development                         | false                 |
| force                               | true                  |
| app_identifier                      | *                     |
| username                            | ####@applidium.com |
| provisioning_name                   | match AppStore *      |
| ignore_profiles_with_different_name | true                  |
| cert_id                             | GZ45U2Q3Z7            |
| skip_fetch_profiles                 | false                 |
| skip_certificate_verification       | false                 |
+-------------------------------------+-----------------------+

INFO [2016-01-04 17:07:26.17]: Starting login with user '####@applidium.com'
INFO [2016-01-04 17:07:27.38]: Successfully logged in
INFO [2016-01-04 17:07:27.38]: Fetching profiles...
INFO [2016-01-04 17:07:29.42]: No existing profiles, creating a new one for you
INFO [2016-01-04 17:07:31.50]: Creating new provisioning profile for '*' with name 'match AppStore *'
INFO [2016-01-04 17:07:32.91]: Downloading provisioning profile...
INFO [2016-01-04 17:07:33.79]: Successfully downloaded provisioning profile...
INFO [2016-01-04 17:07:33.87]: Installing provisioning profile...
/var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160104-32193-1vp6yx7/profiles/appstore/InHouse_*.mobileprovision
INFO [2016-01-04 17:07:33.93]: Installing provisioning profile...
WARN [2016-01-04 17:07:34.06]: Setting environment variable 'sigh_*_appstore' to 'bd9ff9d4-5889-45b2-ae7b-c68a342fdfea'
INFO [2016-01-04 17:07:34.81]: 🔒  Encrypted 'J5FFU7896S.cer'
INFO [2016-01-04 17:07:34.85]: 🔒  Encrypted 'GZ45U2Q3Z7.cer'
INFO [2016-01-04 17:07:34.90]: 🔒  Encrypted 'J5FFU7896S.p12'
INFO [2016-01-04 17:07:34.95]: 🔒  Encrypted 'GZ45U2Q3Z7.p12'
INFO [2016-01-04 17:07:35.00]: 🔒  Encrypted 'InHouse_*.mobileprovision'
INFO [2016-01-04 17:07:35.05]: 🔒  Encrypted 'Development_*.mobileprovision'
INFO [2016-01-04 17:07:35.10]: 🔒  Encrypted 'Development_com.applidium.test.mobileprovision'
INFO [2016-01-04 17:07:35.14]: 🔒  Encrypted 'Development_com.applidium.test.watchkitapp.mobileprovision'
INFO [2016-01-04 17:07:35.20]: 🔒  Encrypted 'Development_com.applidium.test.watchkitextension.mobileprovision'
INFO [2016-01-04 17:07:35.25]: 🔒  Encrypted 'Development_com.applidium.tvostest.mobileprovision'
INFO [2016-01-04 17:07:35.25]: 🔒  Successfully encrypted certificates repo
INFO [2016-01-04 17:07:35.25]: Pushing changes to remote git repo...
INFO [2016-01-04 17:07:35.25]: $ git add -A
INFO [2016-01-04 17:07:35.27]: $ git commit -m '[fastlane] Updated * for appstore'
INFO [2016-01-04 17:07:35.30]: > [master 5202cea] [fastlane] Updated * for appstore
INFO [2016-01-04 17:07:35.30]: > 11 files changed, 1412 insertions(+), 1192 deletions(-)
INFO [2016-01-04 17:07:35.30]: > rewrite certs/development/J5FFU7896S.cer (98%)
INFO [2016-01-04 17:07:35.30]: > rewrite certs/development/J5FFU7896S.p12 (98%)
INFO [2016-01-04 17:07:35.30]: > create mode 100644 certs/distribution/GZ45U2Q3Z7.cer
INFO [2016-01-04 17:07:35.30]: > create mode 100644 certs/distribution/GZ45U2Q3Z7.p12
INFO [2016-01-04 17:07:35.30]: > create mode 100644 profiles/appstore/InHouse_*.mobileprovision
INFO [2016-01-04 17:07:35.30]: > rewrite profiles/development/Development_*.mobileprovision (98%)
INFO [2016-01-04 17:07:35.30]: > rewrite profiles/development/Development_com.applidium.test.mobileprovision (97%)
INFO [2016-01-04 17:07:35.30]: > rewrite profiles/development/Development_com.applidium.test.watchkitapp.mobileprovision (98%)
INFO [2016-01-04 17:07:35.31]: > rewrite profiles/development/Development_com.applidium.test.watchkitextension.mobileprovision (98%)
INFO [2016-01-04 17:07:35.31]: > rewrite profiles/development/Development_com.applidium.tvostest.mobileprovision (98%)
INFO [2016-01-04 17:07:35.31]: $ git push origin master
INFO [2016-01-04 17:07:35.61]: > Counting objects: 19, done.
INFO [2016-01-04 17:07:35.61]: > Delta compression using up to 4 threads.
INFO [2016-01-04 17:07:35.61]: > Compressing objects: 100% (18/18), done.
INFO [2016-01-04 17:07:35.62]: > Writing objects: 100% (19/19), 68.95 KiB | 0 bytes/s, done.
INFO [2016-01-04 17:07:35.62]: > Total 19 (delta 2), reused 0 (delta 0)
INFO [2016-01-04 17:07:38.58]: > To ssh:/#####
INFO [2016-01-04 17:07:38.59]: > dbdb9bb..5202cea  master -> master

+----------------------+--------------------------------------+
|               Installed Provisioning Profile                |
+----------------------+--------------------------------------+
| App Identifier       | *                                    |
| Type                 | appstore                             |
| UUID                 | bd9ff9d4-5889-45b2-ae7b-c68a342fdfea |
| Environment Variable | sigh_*_appstore                      |
+----------------------+--------------------------------------+

INFO [2016-01-04 17:07:38.60]: All required keys, certificates and provisioning profiles are installed 🙌
@fastlanebot

This comment has been minimized.

Show comment
Hide comment
@fastlanebot

fastlanebot Jan 5, 2016

@KrauseFx commented

Ah, sorry, somehow I missed that you're using an Enterprise account.

If you want to use match for enterprise accounts on your own risk you can run

MATCH_FORCE_ENTERPRISE="1" match enterprise

Let me know if that works for you 🚀

fastlanebot commented Jan 5, 2016

@KrauseFx commented

Ah, sorry, somehow I missed that you're using an Enterprise account.

If you want to use match for enterprise accounts on your own risk you can run

MATCH_FORCE_ENTERPRISE="1" match enterprise

Let me know if that works for you 🚀

@fastlanebot

This comment has been minimized.

Show comment
Hide comment
@fastlanebot

fastlanebot Jan 5, 2016

@nicolasbraun commented

Hello,

I suspected you missed it :)
I tried and it works like a charm and generates a Distribution cert and the matching InHouse mobileprovision.

It will not work to use development (and I suspect Ad-hoc) profiles though as noticed in #8

MATCH_FORCE_ENTERPRISE="1" match development

will not work and cause the following error

Could not create another certificate, reached the maximum number of available certificates.

I suspect Match will try to generate a Distribution cert no matter what. (I have no development one on the account)

You can close this one I will follow #8 if you want to clean up Issues a bit

The full log

NICOLAS-3:CISandbox nicolasbraun$ MATCH_FORCE_ENTERPRISE="1" match development --verbose

+----------------+---------------------------------------+
|                Summary for match 0.2.4                 |
+----------------+---------------------------------------+
| git_url        | ssh://git@ourrepomanager.net/CISandbox |
| type           | development                           |
| app_identifier | *                                     |
| username       | nicolas.braun@applidium.com           |
| keychain_name  | login.keychain                        |
| readonly       | false                                 |
| team_id        | ####                           |
| team_name      | ####                        |
| verbose        | true                                  |
| force          | false                                 |
| shallow_clone  | false                                 |
+----------------+---------------------------------------+

INFO [2016-01-05 09:27:18.81]: Cloning remote git repo...
INFO [2016-01-05 09:27:18.81]: $ git clone 'ssh://git@ourrepo.net/CISandbox' '/var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160105-53389-1c2vdkl'
INFO [2016-01-05 09:27:18.89]: > Cloning into '/var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160105-53389-1c2vdkl'...
INFO [2016-01-05 09:27:19.22]: > remote: Counting objects: 465, done.
INFO [2016-01-05 09:27:19.26]: > remote: Compressing objects: 100% (414/414), done.
INFO [2016-01-05 09:27:19.31]: > remote: Total 465 (delta 188), reused 96 (delta 14)
INFO [2016-01-05 09:27:19.32]: > Receiving objects: 100% (465/465), 233.64 KiB | 0 bytes/s, done.
INFO [2016-01-05 09:27:19.33]: > Resolving deltas: 100% (188/188), done.
INFO [2016-01-05 09:27:19.35]: > Checking connectivity... done.
INFO [2016-01-05 09:27:19.46]: 🔓  Decrypted 'MMQSVWH9UL.cer'
INFO [2016-01-05 09:27:19.52]: 🔓  Decrypted 'MMQSVWH9UL.p12'
INFO [2016-01-05 09:27:19.57]: 🔓  Decrypted 'InHouse_*.mobileprovision'
INFO [2016-01-05 09:27:19.57]: 🔓  Successfully decrypted certificates repo
INFO [2016-01-05 09:27:19.60]: Verifying that the certificate and profile are still valid on the Dev Portal...
WARN [2016-01-05 09:27:21.63]: Couldn't find a valid code signing identity in the git repo for development... creating one for you now

+-------------+--------------------------------------------------------------------------------------------+
|                                          Summary for cert 1.2.7                                          |
+-------------+--------------------------------------------------------------------------------------------+
| development | true                                                                                       |
| force       | true                                                                                       |
| username    | nicolas.braun@applidium.com                                                                |
| output_path | /var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160105-53389-1c2vdkl/certs/development |
+-------------+--------------------------------------------------------------------------------------------+

INFO [2016-01-05 09:27:21.64]: Starting login with user 'nicolas.braun@applidium.com'
INFO [2016-01-05 09:27:22.91]: Successfully logged in
ERROR [2016-01-05 09:27:25.01]: Could not create another certificate, reached the maximum number of available certificates.
INFO [2016-01-05 09:27:25.02]: 🔒  Successfully encrypted certificates repo
/Users/nicolasbraun/.rbenv/versions/2.2.3/lib/ruby/gems/2.2.0/gems/fastlane_core-0.31.0/lib/fastlane_core/ui/implementations/shell.rb:128:in `user_error!':  (RuntimeError)
[!] Could not create a new certificate as you reached the maximum number of certificates for this account. You can use the `match nuke` command to revoke your existing certificates. More information https://github.com/fastlane/match

fastlanebot commented Jan 5, 2016

@nicolasbraun commented

Hello,

I suspected you missed it :)
I tried and it works like a charm and generates a Distribution cert and the matching InHouse mobileprovision.

It will not work to use development (and I suspect Ad-hoc) profiles though as noticed in #8

MATCH_FORCE_ENTERPRISE="1" match development

will not work and cause the following error

Could not create another certificate, reached the maximum number of available certificates.

I suspect Match will try to generate a Distribution cert no matter what. (I have no development one on the account)

You can close this one I will follow #8 if you want to clean up Issues a bit

The full log

NICOLAS-3:CISandbox nicolasbraun$ MATCH_FORCE_ENTERPRISE="1" match development --verbose

+----------------+---------------------------------------+
|                Summary for match 0.2.4                 |
+----------------+---------------------------------------+
| git_url        | ssh://git@ourrepomanager.net/CISandbox |
| type           | development                           |
| app_identifier | *                                     |
| username       | nicolas.braun@applidium.com           |
| keychain_name  | login.keychain                        |
| readonly       | false                                 |
| team_id        | ####                           |
| team_name      | ####                        |
| verbose        | true                                  |
| force          | false                                 |
| shallow_clone  | false                                 |
+----------------+---------------------------------------+

INFO [2016-01-05 09:27:18.81]: Cloning remote git repo...
INFO [2016-01-05 09:27:18.81]: $ git clone 'ssh://git@ourrepo.net/CISandbox' '/var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160105-53389-1c2vdkl'
INFO [2016-01-05 09:27:18.89]: > Cloning into '/var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160105-53389-1c2vdkl'...
INFO [2016-01-05 09:27:19.22]: > remote: Counting objects: 465, done.
INFO [2016-01-05 09:27:19.26]: > remote: Compressing objects: 100% (414/414), done.
INFO [2016-01-05 09:27:19.31]: > remote: Total 465 (delta 188), reused 96 (delta 14)
INFO [2016-01-05 09:27:19.32]: > Receiving objects: 100% (465/465), 233.64 KiB | 0 bytes/s, done.
INFO [2016-01-05 09:27:19.33]: > Resolving deltas: 100% (188/188), done.
INFO [2016-01-05 09:27:19.35]: > Checking connectivity... done.
INFO [2016-01-05 09:27:19.46]: 🔓  Decrypted 'MMQSVWH9UL.cer'
INFO [2016-01-05 09:27:19.52]: 🔓  Decrypted 'MMQSVWH9UL.p12'
INFO [2016-01-05 09:27:19.57]: 🔓  Decrypted 'InHouse_*.mobileprovision'
INFO [2016-01-05 09:27:19.57]: 🔓  Successfully decrypted certificates repo
INFO [2016-01-05 09:27:19.60]: Verifying that the certificate and profile are still valid on the Dev Portal...
WARN [2016-01-05 09:27:21.63]: Couldn't find a valid code signing identity in the git repo for development... creating one for you now

+-------------+--------------------------------------------------------------------------------------------+
|                                          Summary for cert 1.2.7                                          |
+-------------+--------------------------------------------------------------------------------------------+
| development | true                                                                                       |
| force       | true                                                                                       |
| username    | nicolas.braun@applidium.com                                                                |
| output_path | /var/folders/3t/1rggmx_x3n7d39q66r4v3dzw0000gn/T/d20160105-53389-1c2vdkl/certs/development |
+-------------+--------------------------------------------------------------------------------------------+

INFO [2016-01-05 09:27:21.64]: Starting login with user 'nicolas.braun@applidium.com'
INFO [2016-01-05 09:27:22.91]: Successfully logged in
ERROR [2016-01-05 09:27:25.01]: Could not create another certificate, reached the maximum number of available certificates.
INFO [2016-01-05 09:27:25.02]: 🔒  Successfully encrypted certificates repo
/Users/nicolasbraun/.rbenv/versions/2.2.3/lib/ruby/gems/2.2.0/gems/fastlane_core-0.31.0/lib/fastlane_core/ui/implementations/shell.rb:128:in `user_error!':  (RuntimeError)
[!] Could not create a new certificate as you reached the maximum number of certificates for this account. You can use the `match nuke` command to revoke your existing certificates. More information https://github.com/fastlane/match
@fastlanebot

This comment has been minimized.

Show comment
Hide comment
@fastlanebot

fastlanebot Jan 6, 2016

@nicolasbraun commented

PS:

Running

match development

Without the MATCH_FORCE_ENTERPRISE option result in the same issue

fastlanebot commented Jan 6, 2016

@nicolasbraun commented

PS:

Running

match development

Without the MATCH_FORCE_ENTERPRISE option result in the same issue

@SpacyRicochet

This comment has been minimized.

Show comment
Hide comment
@SpacyRicochet

SpacyRicochet Mar 16, 2016

@KrauseFx How much risk is there in using that option for enterprise accounts? Used it myself, and it works great. What are the risks in using match for enterprise?

I assume it has to do with Enterprise accounts normally being used for actual in-house apps, instead of our method, which is just to avoid having to collect UUIDs when doing QA tests outside of Testflight.

SpacyRicochet commented Mar 16, 2016

@KrauseFx How much risk is there in using that option for enterprise accounts? Used it myself, and it works great. What are the risks in using match for enterprise?

I assume it has to do with Enterprise accounts normally being used for actual in-house apps, instead of our method, which is just to avoid having to collect UUIDs when doing QA tests outside of Testflight.

@KrauseFx

This comment has been minimized.

Show comment
Hide comment
Member

KrauseFx commented Mar 17, 2016

@SpacyRicochet

This comment has been minimized.

Show comment
Hide comment
@SpacyRicochet

SpacyRicochet Mar 18, 2016

Thanks pointing it out.

Interestingly enough, I completely forgot about the 'one certificate repo per dev_account+team combination'. I have a match for an enterprise certificate on repo with the same developer account but with a different team.

Works splendidly, but not sure if that counts as a bug or not. If you try the same certificate repro for the regular distribution and development certs and profiles, match complains.

SpacyRicochet commented Mar 18, 2016

Thanks pointing it out.

Interestingly enough, I completely forgot about the 'one certificate repo per dev_account+team combination'. I have a match for an enterprise certificate on repo with the same developer account but with a different team.

Works splendidly, but not sure if that counts as a bug or not. If you try the same certificate repro for the regular distribution and development certs and profiles, match complains.

@fastlane-bot

This comment has been minimized.

Show comment
Hide comment
@fastlane-bot

fastlane-bot Jun 9, 2016

There hasn't been any activity on this issue recently. Due to the high number of incoming GitHub notifications, we have to clean some of the old issues, as many of them have already been resolved with the latest updates.

Please make sure to update to the latest fastlane version and check if that solves the issue. Let us know if that works for you by adding a comment 👍

fastlane-bot commented Jun 9, 2016

There hasn't been any activity on this issue recently. Due to the high number of incoming GitHub notifications, we have to clean some of the old issues, as many of them have already been resolved with the latest updates.

Please make sure to update to the latest fastlane version and check if that solves the issue. Let us know if that works for you by adding a comment 👍

@nicolasbraun

This comment has been minimized.

Show comment
Hide comment
@nicolasbraun

nicolasbraun Jun 10, 2016

Contributor

I confirm I was able to generate a development cert on an entreprise account using the command

MATCH_PASSSWORD="XXX" MATCH_FORCE_ENTERPRISE="1" match --type development --app_identifier 'com.mycompany' --username 'devices@applidium.com' --team_id 'my_team_id' --team_name 'my_team_name'  --git_url 'ssh://git@repos.mycompany.net/xxxx' 

This issue can be closed

Contributor

nicolasbraun commented Jun 10, 2016

I confirm I was able to generate a development cert on an entreprise account using the command

MATCH_PASSSWORD="XXX" MATCH_FORCE_ENTERPRISE="1" match --type development --app_identifier 'com.mycompany' --username 'devices@applidium.com' --team_id 'my_team_id' --team_name 'my_team_name'  --git_url 'ssh://git@repos.mycompany.net/xxxx' 

This issue can be closed

@TKBurner

This comment has been minimized.

Show comment
Hide comment
@TKBurner

TKBurner Jun 13, 2016

@nicolasbraun Awesome! Thanks for sharing! 👍

TKBurner commented Jun 13, 2016

@nicolasbraun Awesome! Thanks for sharing! 👍

@TKBurner TKBurner closed this Jun 13, 2016

@jlubeck

This comment has been minimized.

Show comment
Hide comment
@jlubeck

jlubeck Sep 1, 2016

how can the MATCH_FORCE_ENTERPRISE="1" be used inside a lane?
Thanks!

jlubeck commented Sep 1, 2016

how can the MATCH_FORCE_ENTERPRISE="1" be used inside a lane?
Thanks!

@KrauseFx

This comment has been minimized.

Show comment
Hide comment
@KrauseFx

KrauseFx Sep 1, 2016

Member

@jlubeck

lane :something do
  ENV["MATCH_FORCE_ENTERPRISE"] = "1"
  match
end
Member

KrauseFx commented Sep 1, 2016

@jlubeck

lane :something do
  ENV["MATCH_FORCE_ENTERPRISE"] = "1"
  match
end
@jlubeck

This comment has been minimized.

Show comment
Hide comment
@jlubeck

jlubeck Sep 2, 2016

Awesome! thanks!

jlubeck commented Sep 2, 2016

Awesome! thanks!

@fastlane fastlane locked and limited conversation to collaborators Dec 6, 2016

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.