Match doesn't properly set up the signing certificate "Provisioning Profile doesn't include signing certificate #21739

cadaniel · 2023-12-18T17:05:49Z

New Issue Checklist

Updated fastlane to the latest version
I read the Contribution Guidelines
I read docs.fastlane.tools
I searched for existing GitHub issues

Issue Description

When generating new certificates, match doesn't include the signing certificate.
Provisioning profile "match Development XXX" doesn't include signing certificate "Apple Development: XXXX".

I have:

nuked both distribution and development in match (twice to be sure)
Removing all certificates from my machine (it's also reproducible on CI, so it's not a local cert problem?)
Created certs using the lane below, and manually running fastlane match development to generate certs
Checked that the right certificate is being pointed to in Apple developer (it is)

Command executed

fastlane certs
fastlane beta

Complete output when running fastlane, including the stack trace and command used

caseydaniel@Cates-Mac-mini iOS % fastlane certs

[✔] 🚀
[12:00:41]: fastlane detected a Gemfile in the current directory
[12:00:41]: However, it seems like you didn't use bundle exec
[12:00:41]: To launch fastlane faster, please use
[12:00:41]:
[12:00:41]: $ bundle exec fastlane certs
[12:00:41]:
[12:00:41]: Get started using a Gemfile for fastlane https://docs.fastlane.tools/getting-started/ios/setup/#use-a-gemfile
[12:00:42]: ------------------------------
[12:00:42]: --- Step: default_platform ---
[12:00:42]: ------------------------------
[12:00:42]: Driving the lane 'ios certs' 🚀
[12:00:42]: -------------------------------
[12:00:42]: --- Step: sync_code_signing ---
[12:00:42]: -------------------------------
[12:00:42]: Successfully loaded '/Users/caseydaniel/Work/normative/iOS/fastlane/Matchfile' 📄

[12:00:42]: Cloning remote git repo...
[12:00:44]: Checking out branch master...
[12:00:44]: 🔓 Successfully decrypted certificates repo
[12:00:44]: Verifying that the certificate and profile are still valid on the Dev Portal...
Available session is not valid any more. Continuing with normal login.
[12:00:51]: Installing certificate...

[12:00:51]: Starting login with user 'casey@whitewhiskywolf.com'
Available session is not valid any more. Continuing with normal login.
[12:00:53]: Successfully logged in
[12:00:53]: Fetching profiles...
[12:00:54]: Verifying certificates...
[12:00:54]: Found 1 matching profile(s)
[12:00:54]: Recreating the profile
[12:00:54]: Creating new provisioning profile for 'ca.mynormative.normative.dev' with name 'match AppStore ca.mynormative.normative.dev' for 'ios' platform
[12:00:55]: Downloading provisioning profile...
[12:00:55]: Successfully downloaded provisioning profile...
[12:00:55]: Installing provisioning profile...
/var/folders/jr/2ln0r3694mj0yt45j2z17gfw0000gn/T/d20231218-31056-wbmzgg/profiles/appstore/AppStore_ca.mynormative.normative.dev.mobileprovision
[12:00:55]: Installing provisioning profile...

[12:00:56]: Starting login with user 'casey@whitewhiskywolf.com'
Available session is not valid any more. Continuing with normal login.
[12:01:00]: Successfully logged in
[12:01:00]: Fetching profiles...
[12:01:00]: Verifying certificates...
[12:01:00]: Found 1 matching profile(s)
[12:01:00]: Recreating the profile
[12:01:01]: Creating new provisioning profile for 'ca.mynormative.normative.NormativeTests' with name 'match AppStore ca.mynormative.normative.NormativeTests' for 'ios' platform
[12:01:02]: Downloading provisioning profile...
[12:01:02]: Successfully downloaded provisioning profile...
[12:01:02]: Installing provisioning profile...
/var/folders/jr/2ln0r3694mj0yt45j2z17gfw0000gn/T/d20231218-31056-wbmzgg/profiles/appstore/AppStore_ca.mynormative.normative.NormativeTests.mobileprovision
[12:01:02]: Installing provisioning profile...
[12:01:02]: 🔒 Successfully encrypted certificates repo
[12:01:02]: Pushing changes to remote git repo...
[12:01:03]: Finished uploading files to Git Repo [git@github.com:MyNormativeCa/iOS-Profile.git]

+---------------------------------------------------------------------------------------------------------------------------------------------------+
| Installed Provisioning Profile |
+---------------------+-------------------------------------------------------------+---------------------------------------------------------------+
| Parameter | Environment Variable | Value |
+---------------------+-------------------------------------------------------------+---------------------------------------------------------------+
| App Identifier | | ca.mynormative.normative.dev |
| Type | | appstore |
| Platform | | ios |
| Profile UUID | sigh_ca.mynormative.normative.dev_appstore | 8b9e4f84-c5b7-407d-8994-d8ff4abe6fe9 |
| Profile Name | sigh_ca.mynormative.normative.dev_appstore_profile-name | match AppStore ca.mynormative.normative.dev |
| Profile Path | sigh_ca.mynormative.normative.dev_appstore_profile-path | /Users/caseydaniel/Library/MobileDevice/Provisioning |
| | | Profiles/8b9e4f84-c5b7-407d-8994-d8ff4abe6fe9.mobileprovision |
| Development Team ID | sigh_ca.mynormative.normative.dev_appstore_team-id | P6J37F4KJN |
| Certificate Name | sigh_ca.mynormative.normative.dev_appstore_certificate-name | Apple Distribution: My Normative Inc. (P6J37F4KJN) |
+---------------------+-------------------------------------------------------------+---------------------------------------------------------------+

+-------------------------------------------------------------------------------------------------------------------------------------------------------+
| Installed Provisioning Profile |
+---------------------+-----------------------------------------------------------------+---------------------------------------------------------------+
| Parameter | Environment Variable | Value |
+---------------------+-----------------------------------------------------------------+---------------------------------------------------------------+
| App Identifier | | ca.mynormative.normative.NormativeTests |
| Type | | appstore |
| Platform | | ios |
| Profile UUID | sigh_ca.mynormative.normative.NormativeTests_appstore | 652ec79c-e7e1-4a3d-9e6a-369e738fe361 |
| Profile Name | sigh_ca.mynormative.normative.NormativeTests_appstore_profile- | match AppStore ca.mynormative.normative.NormativeTests |
| | name | |
| Profile Path | sigh_ca.mynormative.normative.NormativeTests_appstore_profile- | /Users/caseydaniel/Library/MobileDevice/Provisioning |
| | path | Profiles/652ec79c-e7e1-4a3d-9e6a-369e738fe361.mobileprovision |
| Development Team ID | sigh_ca.mynormative.normative.NormativeTests_appstore_team-id | P6J37F4KJN |
| Certificate Name | sigh_ca.mynormative.normative.NormativeTests_appstore_certific | Apple Distribution: My Normative Inc. (P6J37F4KJN) |
| | ate-name | |
+---------------------+-----------------------------------------------------------------+---------------------------------------------------------------+

[12:01:03]: All required keys, certificates and provisioning profiles are installed 🙌
[12:01:03]: Setting Provisioning Profile type to 'app-store'
[12:01:03]: -------------------------------
[12:01:03]: --- Step: sync_code_signing ---
[12:01:03]: -------------------------------
[12:01:03]: Successfully loaded '/Users/caseydaniel/Work/normative/iOS/fastlane/Matchfile' 📄

[12:01:03]: Cloning remote git repo...
[12:01:04]: Checking out branch master...
[12:01:04]: 🔓 Successfully decrypted certificates repo
[12:01:04]: Verifying that the certificate and profile are still valid on the Dev Portal...
Available session is not valid any more. Continuing with normal login.
[12:01:07]: Installing certificate...

[12:01:07]: Starting login with user 'casey@whitewhiskywolf.com'
Available session is not valid any more. Continuing with normal login.
[12:01:10]: Successfully logged in
[12:01:10]: Fetching profiles...
[12:01:10]: Verifying certificates...
[12:01:10]: Found 1 matching profile(s)
[12:01:10]: Recreating the profile
[12:01:11]: Creating new provisioning profile for 'ca.mynormative.normative.dev' with name 'match Development ca.mynormative.normative.dev' for 'ios' platform
[12:01:12]: Downloading provisioning profile...
[12:01:12]: Successfully downloaded provisioning profile...
[12:01:12]: Installing provisioning profile...
/var/folders/jr/2ln0r3694mj0yt45j2z17gfw0000gn/T/d20231218-31056-y8cdk6/profiles/development/Development_ca.mynormative.normative.dev.mobileprovision
[12:01:12]: Installing provisioning profile...

[12:01:13]: Starting login with user 'casey@whitewhiskywolf.com'
Available session is not valid any more. Continuing with normal login.
[12:01:18]: Successfully logged in
[12:01:18]: Fetching profiles...
[12:01:19]: Verifying certificates...
[12:01:19]: Found 1 matching profile(s)
[12:01:19]: Recreating the profile
[12:01:19]: Creating new provisioning profile for 'ca.mynormative.normative.NormativeTests' with name 'match Development ca.mynormative.normative.NormativeTests' for 'ios' platform
[12:01:20]: Downloading provisioning profile...
[12:01:20]: Successfully downloaded provisioning profile...
[12:01:20]: Installing provisioning profile...
/var/folders/jr/2ln0r3694mj0yt45j2z17gfw0000gn/T/d20231218-31056-y8cdk6/profiles/development/Development_ca.mynormative.normative.NormativeTests.mobileprovision
[12:01:20]: Installing provisioning profile...
[12:01:21]: 🔒 Successfully encrypted certificates repo
[12:01:21]: Pushing changes to remote git repo...
[12:01:22]: Finished uploading files to Git Repo [git@github.com:MyNormativeCa/iOS-Profile.git]

+------------------------------------------------------------------------------------------------------------------------------------------------------+
| Installed Provisioning Profile |
+---------------------+----------------------------------------------------------------+---------------------------------------------------------------+
| Parameter | Environment Variable | Value |
+---------------------+----------------------------------------------------------------+---------------------------------------------------------------+
| App Identifier | | ca.mynormative.normative.dev |
| Type | | development |
| Platform | | ios |
| Profile UUID | sigh_ca.mynormative.normative.dev_development | 8b812f3b-f3c2-4652-8639-c3b6d3fea90d |
| Profile Name | sigh_ca.mynormative.normative.dev_development_profile-name | match Development ca.mynormative.normative.dev |
| Profile Path | sigh_ca.mynormative.normative.dev_development_profile-path | /Users/caseydaniel/Library/MobileDevice/Provisioning |
| | | Profiles/8b812f3b-f3c2-4652-8639-c3b6d3fea90d.mobileprovision |
| Development Team ID | sigh_ca.mynormative.normative.dev_development_team-id | P6J37F4KJN |
| Certificate Name | sigh_ca.mynormative.normative.dev_development_certificate-name | Apple Development: Casey Daniel (3HB79TCH5P) |
+---------------------+----------------------------------------------------------------+---------------------------------------------------------------+

+-------------------------------------------------------------------------------------------------------------------------------------------------------+
| Installed Provisioning Profile |
+---------------------+-----------------------------------------------------------------+---------------------------------------------------------------+
| Parameter | Environment Variable | Value |
+---------------------+-----------------------------------------------------------------+---------------------------------------------------------------+
| App Identifier | | ca.mynormative.normative.NormativeTests |
| Type | | development |
| Platform | | ios |
| Profile UUID | sigh_ca.mynormative.normative.NormativeTests_development | fac71bda-97c2-4170-9a4c-ac11f682188d |
| Profile Name | sigh_ca.mynormative.normative.NormativeTests_development_profi | match Development ca.mynormative.normative.NormativeTests |
| | le-name | |
| Profile Path | sigh_ca.mynormative.normative.NormativeTests_development_profi | /Users/caseydaniel/Library/MobileDevice/Provisioning |
| | le-path | Profiles/fac71bda-97c2-4170-9a4c-ac11f682188d.mobileprovision |
| Development Team ID | sigh_ca.mynormative.normative.NormativeTests_development_team- | P6J37F4KJN |
| | id | |
| Certificate Name | sigh_ca.mynormative.normative.NormativeTests_development_certi | Apple Development: Casey Daniel (3HB79TCH5P) |
| | ficate-name | |
+---------------------+-----------------------------------------------------------------+---------------------------------------------------------------+

[12:01:22]: All required keys, certificates and provisioning profiles are installed 🙌
[12:01:22]: Setting Provisioning Profile type to 'development'

+----------------------------------------+
| fastlane summary |
+------+-------------------+-------------+
| Step | Action | Time (in s) |
+------+-------------------+-------------+
| 1 | default_platform | 0 |
| 2 | sync_code_signing | 20 |
| 3 | sync_code_signing | 18 |
+------+-------------------+-------------+

[12:01:22]: fastlane.tools finished successfully 🎉

Environment

 ✅ fastlane environment ✅
Stack



Key
Value




OS
14.1.2


Ruby
3.0.1


Bundler?
false


Git
git version 2.42.1


Installation Source
~/.rbenv/versions/3.0.1/bin/fastlane


Host
macOS 14.1.2 (23B92)


Ruby Lib Dir
~/.rbenv/versions/3.0.1/lib


OpenSSL Version
OpenSSL 1.1.1t  7 Feb 2023


Is contained
false


Is homebrew
false


Is installed via Fabric.app
false


Xcode Path
/Applications/Xcode-15.1.0.app/Contents/Developer/


Xcode Version
15.1


Swift Version
5.9.2



System Locale



Variable
Value





LANG
en_US.UTF-8
✅


LC_ALL
en_US.UTF-8
✅


LANGUAGE
en_US.UTF-8
✅



fastlane files:
`./fastlane/Fastfile`
# This file contains the fastlane.tools configuration
# You can find the documentation at https://docs.fastlane.tools
#
# For a list of all available actions, check out
#
#     https://docs.fastlane.tools/actions
#
# For a list of all available plugins, check out
#
#     https://docs.fastlane.tools/plugins/available-plugins
#

# Uncomment the line if you want fastlane to automatically update itself
# update_fastlane

default_platform(:ios)

platform :ios do

  desc "Update Certs"
  lane :certs do
    force = true
    sync_code_signing(
      type: "appstore",
      force: force,
      generate_apple_certs: true,
      app_identifier: ['ca.mynormative.normative.dev', 'ca.mynormative.normative.NormativeTests']
    )
    sync_code_signing(
      type: "development",
      force: force,
      generate_apple_certs: true,
      app_identifier: ['ca.mynormative.normative.dev', 'ca.mynormative.normative.NormativeTests']
    )
  end

  desc "Build and Test"
  lane :build_test do
    setup_ci if ENV['CI']
    sync_code_signing(
      type: "development",
      readonly: true,
      app_identifier: ['ca.mynormative.normative.dev', 'ca.mynormative.normative.NormativeTests']
    ) 
    update_code_signing_settings(
      bundle_identifier: "ca.mynormative.NormativeTests",
      use_automatic_signing: false,
      targets: ["NormativeTests"],
      profile_name: "match Development ca.mynormative.NormativeTests"
    )
    update_code_signing_settings(
      bundle_identifier: "ca.mynormative.normative.dev",
      use_automatic_signing: false,
      targets: ["Normative"],
      profile_name: "match Development ca.mynormative.normative.dev"
    )
    scan(
      project: "Normative.xcodeproj",
      scheme: "NormativeTest"
    )
    swiftlint(
      mode: :lint,
      raise_if_swiftlint_error: setup_ci,
      reporter: setup_ci ? "github-actions-logging" : "xcode",
      strict: true
    )
  end

  desc "Push a new beta build to TestFlight"
  lane :beta do
    setup_ci if ENV['CI']
    api_key = app_store_connect_api_key(
      key_id: ENV["ASCAPI_KEY_ID"],
      issuer_id: ENV["ASCAPI_ISSUER_ID"],
      key_content: ENV["ASCAPI_KEY"],
      is_key_content_base64: true
    )
    increment_build_number(
      xcodeproj: "Normative.xcodeproj",
      build_number: ENV['BUILD_NUMBER']
    )
    sync_code_signing(
      type: "appstore",
      readonly: true,
      app_identifier: ['ca.mynormative.normative.dev', 'ca.mynormative.normative.NormativeTests']
    ) 
    update_code_signing_settings(
      bundle_identifier: "ca.mynormative.normative.dev",
      use_automatic_signing: false,
      team_id: "P6J37F4KJN",
      targets: ["Normative"],
      profile_name: "match AppStore ca.mynormative.normative.dev"
    )
    update_code_signing_settings(
      bundle_identifier: "ca.mynormative.NormativeTests",
      use_automatic_signing: false,
      team_id: "P6J37F4KJN",
      targets: ["NormativeTests"],
      profile_name: "match AppStore ca.mynormative.NormativeTests"
    )
    build_app(
      scheme: "normative",
      export_method: "app-store",
      export_options: {
        provisioningProfiles: { 
          "ca.mynormative.normative.dev" => "match AppStore ca.mynormative.normative.dev",
          "ca.mynormative.NormativeTests" => "match AppStore ca.mynormative.NormativeTests"
        }
      }
    )
    upload_to_testflight(
      api_key: api_key,
      skip_waiting_for_build_processing: true
    )
  end
end

`./fastlane/Appfile`
app_identifier("ca.mynormative.normative") # The bundle identifier of your app
apple_id("casey@whitewhiskywolf.com") # Your Apple Developer Portal username

itc_team_id("121781561") # App Store Connect Team ID
team_id("P6J37F4KJN") # Developer Portal Team ID

# For more information about the Appfile, see:
#     https://docs.fastlane.tools/advanced/#appfile

fastlane gems



Gem
Version
Update-Status




fastlane
2.217.0
✅ Up-To-Date



Loaded fastlane plugins:
No plugins Loaded
Loaded gems



Gem
Version




did_you_mean
1.5.0


artifactory
3.0.15


babosa
1.0.4


CFPropertyList
3.0.6


colored
1.2


highline
2.0.3


commander
4.6.0


dotenv
2.8.1


emoji_regex
3.2.3


faraday-em_http
1.0.0


faraday-em_synchrony
1.0.0


faraday-excon
1.1.0


faraday-httpclient
1.0.1


faraday-multipart
1.0.4


faraday-net_http
1.0.1


faraday-net_http_persistent
1.2.0


faraday-patron
1.0.0


faraday-rack
1.0.0


faraday-retry
1.0.3


ruby2_keywords
0.0.5


faraday
1.10.3


faraday_middleware
1.2.0


http-cookie
1.0.5


faraday-cookie_jar
0.0.7


gh_inspector
1.1.3


google-apis-playcustomapp_v1
0.13.0


mini_magick
4.12.0


naturally
2.2.1


optparse
0.1.1


plist
3.7.0


rubyzip
2.3.2


security
0.1.3


simctl
1.6.10


terminal-notifier
2.0.0


terminal-table
3.0.2


tty-cursor
0.7.1


tty-spinner
0.9.3


word_wrap
1.0.0


rouge
2.0.7


xcpretty
0.3.0


xcpretty-travis-formatter
1.0.1


set
1.0.1


public_suffix
5.0.4


addressable
2.8.6


aws-eventstream
1.3.0


aws-sigv4
1.8.0


aws-partitions
1.868.0


jmespath
1.6.2


aws-sdk-core
3.190.0


aws-sdk-kms
1.75.0


aws-sdk-s3
1.141.0


bundler
2.4.12


rexml
3.2.6


excon
0.108.0


multipart-post
2.3.0


domain_name
0.6.20231109


fastimage
2.2.7


webrick
1.8.1


httpclient
2.8.3


multi_json
1.15.0


jwt
2.7.1


signet
0.18.0


os
1.1.4


google-cloud-env
2.1.0


googleauth
1.9.1


mini_mime
1.1.5


retriable
3.1.2


trailblazer-option
0.1.2


declarative
0.0.20


uber
0.1.0


representable
3.2.0


google-apis-core
0.11.2


google-apis-androidpublisher_v3
0.54.0


rake
13.1.0


digest-crc
0.6.5


google-apis-storage_v1
0.29.0


google-apis-iamcredentials_v1
0.17.0


google-cloud-errors
1.3.1


google-cloud-core
1.6.1


google-cloud-storage
1.45.0


json
2.7.1


unicode-display_width
2.5.0


tty-screen
0.8.2


nanaimo
0.3.0


colored2
3.1.2


claide
1.1.0


atomos
0.1.3


xcodeproj
1.23.0


forwardable
1.3.2


logger
1.4.3


pathname
0.1.0


shellwords
0.1.0


cgi
0.2.0


date
3.1.0


timeout
0.1.1


stringio
3.0.0


securerandom
0.1.0


uri
0.10.1


openssl
2.2.0


io-nonblock
0.1.0


ipaddr
1.2.2


io-wait
0.1.0


zlib
1.1.0


resolv
0.2.0


digest
3.0.0


time
0.1.0


open-uri
0.1.0


mutex_m
0.1.1


net-protocol
0.1.0


net-smtp
0.2.1


rack
2.2.6.4


rack-test
2.1.0


fileutils
1.5.0


tempfile
0.1.1


delegate
0.2.0


tmpdir
0.1.2


ostruct
0.3.1


english
0.7.1


erb
2.2.0


strscan
3.0.0


abbrev
0.1.0


io-console
0.5.7


base64
0.1.0


singleton
0.1.1


open3
0.1.1


nkf
0.1.0


racc
1.5.1


nokogiri
1.14.2


prettyprint
0.1.0


pp
0.1.0


find
0.1.0


yaml
0.1.1


psych
3.3.0




generated on: 2023-12-18

The text was updated successfully, but these errors were encountered:

cadaniel · 2023-12-19T15:03:41Z

Deleting the private keys from my keychain, and running match after seemed to resolve the CI problems, but I still have the error locally, but it doesn't seem to be a blocker.

cadaniel closed this as completed Dec 19, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Match doesn't properly set up the signing certificate "Provisioning Profile doesn't include signing certificate #21739

Match doesn't properly set up the signing certificate "Provisioning Profile doesn't include signing certificate #21739

cadaniel commented Dec 18, 2023

Stack

System Locale

fastlane files:

fastlane gems

Loaded fastlane plugins:

cadaniel commented Dec 19, 2023

Match doesn't properly set up the signing certificate "Provisioning Profile doesn't include signing certificate #21739

Match doesn't properly set up the signing certificate "Provisioning Profile doesn't include signing certificate #21739

Comments

cadaniel commented Dec 18, 2023

New Issue Checklist

Issue Description

Command executed

Complete output when running fastlane, including the stack trace and command used

Environment

Stack

System Locale

fastlane files:

fastlane gems

Loaded fastlane plugins:

cadaniel commented Dec 19, 2023