You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cordova.apache.org by Filip Maj <fi...@adobe.com> on 2012/09/04 20:48:11 UTC
Sign/Release app via CLI tools (was [jira] [Created] (CB-1369) CLI
- add instructions and/or feature to sign an app)
Definitely should bring up a common discussion about this!
+1 !
People using the tools are already asking for it. Android's equivalent is
cd into project and run "ant release".
BlackBerry already has these bits in place.
Not sure about Windows Phone.
On 9/4/12 11:45 AM, "Shazron Abdullah (JIRA)" <ji...@apache.org> wrote:
>Shazron Abdullah created CB-1369:
>------------------------------------
>
> Summary: CLI - add instructions and/or feature to sign an app
> Key: CB-1369
> URL: https://issues.apache.org/jira/browse/CB-1369
> Project: Apache Cordova
> Issue Type: Bug
> Components: iOS
> Reporter: Shazron Abdullah
> Assignee: Shazron Abdullah
> Priority: Minor
> Fix For: 3.0.0
>
>
>This possibly needs a cross-platform discussion (common interface), but
>for now we can provide docs on how to do this only for iOS which will
>help ease writing this feature.
>
>Requirements for code signing:
>- Distribution/Developer cert (cert + private key)
>- Dist/Dev provisioning profile
>- codesign tool (included in OS X)
>- security tool (included in OS X)
>- zip tool (included in OS X)
>
>OR (RECOMMENDED)
>
> we can just document xcrun. xcrun should be included in Xcode already:
>
>{code}
>/usr/bin/xcrun -sdk iphoneos PackageApplication -v
>"${RELEASE_BUILDDIR}/${APPLICATION_NAME}.app" -o
>"${BUILD_HISTORY_DIR}/${APPLICATION_NAME}.ipa" --sign "${DEVELOPER_NAME}"
>--embed "${PROVISONING_PROFILE}²
>{code}
>
>I don't see any reason we shouldn't just use xcrun. xcodebuild is just an
>alias to xcrun, and we need xcodebuild to build the app.
>
>
>
>--
>This message is automatically generated by JIRA.
>If you think it was sent incorrectly, please contact your JIRA
>administrators
>For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: Sign/Release app via CLI tools (was [jira] [Created] (CB-1369)
CLI - add instructions and/or feature to sign an app)
Posted by Andrew Grieve <ag...@chromium.org>.
Yeah, I somehow didn't read your bug description until after I wrote that
reply. I think you know more than me about what's involved here :).
On Tue, Sep 4, 2012 at 5:08 PM, Shazron <sh...@gmail.com> wrote:
> Thanks Andrew,
> In any case, it's quite involved :)
>
> This still requires the dev to pass in these parameters (if we are
> trying to match the Android/BB CLI experience), unless we can
> "discover" these parameters ourselves (fixed names and locations? or
> assume the settings as set in the .pbxproj).
>
> On Tue, Sep 4, 2012 at 12:28 PM, Andrew Grieve <ag...@chromium.org>
> wrote:
> > If we tell people to drop their cert/profile into a certain directory,
> then
> > we could use the "security" command-line tool to import their key:
> >
> > security create-keychain Cordova
> > security set-keychain-settings -u -t 9999 Cordova
> > security import $P12_FILE -k Cordova -A
> >
> >
> >
> > And then xcodebuild to set the relevant signing variables:
> >
> > xcodebuild -project Foo.xcodeproj -target "MyApp" -configuration Release
> > -sdk iphoneos build PROVISIONING_PROFILE=foo "CODE_SIGN_IDENTITY=bar"
> > "OTHER_CODE_SIGN_FLAGS=--keychain
> > Cordova.keychain"
> >
> >
> >
> > On Tue, Sep 4, 2012 at 3:03 PM, Shazron <sh...@gmail.com> wrote:
> >
> >> Great! Android's procedure seems like a dream compared to iOS'. To
> >> make it similar to Android/BB, the tool will need to parse the
> >> .pbxproj and read what is set for it to code sign (prov profile,
> >> cert).
> >>
> >>
> >> On Tue, Sep 4, 2012 at 11:48 AM, Filip Maj <fi...@adobe.com> wrote:
> >> > Definitely should bring up a common discussion about this!
> >> >
> >> > +1 !
> >> >
> >> > People using the tools are already asking for it. Android's
> equivalent is
> >> > cd into project and run "ant release".
> >> >
> >> > BlackBerry already has these bits in place.
> >> >
> >> > Not sure about Windows Phone.
> >> >
> >> > On 9/4/12 11:45 AM, "Shazron Abdullah (JIRA)" <ji...@apache.org>
> wrote:
> >> >
> >> >>Shazron Abdullah created CB-1369:
> >> >>------------------------------------
> >> >>
> >> >> Summary: CLI - add instructions and/or feature to sign an
> >> app
> >> >> Key: CB-1369
> >> >> URL: https://issues.apache.org/jira/browse/CB-1369
> >> >> Project: Apache Cordova
> >> >> Issue Type: Bug
> >> >> Components: iOS
> >> >> Reporter: Shazron Abdullah
> >> >> Assignee: Shazron Abdullah
> >> >> Priority: Minor
> >> >> Fix For: 3.0.0
> >> >>
> >> >>
> >> >>This possibly needs a cross-platform discussion (common interface),
> but
> >> >>for now we can provide docs on how to do this only for iOS which will
> >> >>help ease writing this feature.
> >> >>
> >> >>Requirements for code signing:
> >> >>- Distribution/Developer cert (cert + private key)
> >> >>- Dist/Dev provisioning profile
> >> >>- codesign tool (included in OS X)
> >> >>- security tool (included in OS X)
> >> >>- zip tool (included in OS X)
> >> >>
> >> >>OR (RECOMMENDED)
> >> >>
> >> >> we can just document xcrun. xcrun should be included in Xcode
> >> already:
> >> >>
> >> >>{code}
> >> >>/usr/bin/xcrun -sdk iphoneos PackageApplication -v
> >> >>"${RELEASE_BUILDDIR}/${APPLICATION_NAME}.app" -o
> >> >>"${BUILD_HISTORY_DIR}/${APPLICATION_NAME}.ipa" --sign
> "${DEVELOPER_NAME}"
> >> >>--embed "${PROVISONING_PROFILE}²
> >> >>{code}
> >> >>
> >> >>I don't see any reason we shouldn't just use xcrun. xcodebuild is
> just an
> >> >>alias to xcrun, and we need xcodebuild to build the app.
> >> >>
> >> >>
> >> >>
> >> >>--
> >> >>This message is automatically generated by JIRA.
> >> >>If you think it was sent incorrectly, please contact your JIRA
> >> >>administrators
> >> >>For more information on JIRA, see:
> >> http://www.atlassian.com/software/jira
> >> >
> >>
>
Re: Sign/Release app via CLI tools (was [jira] [Created] (CB-1369)
CLI - add instructions and/or feature to sign an app)
Posted by Shazron <sh...@gmail.com>.
Thanks Andrew,
In any case, it's quite involved :)
This still requires the dev to pass in these parameters (if we are
trying to match the Android/BB CLI experience), unless we can
"discover" these parameters ourselves (fixed names and locations? or
assume the settings as set in the .pbxproj).
On Tue, Sep 4, 2012 at 12:28 PM, Andrew Grieve <ag...@chromium.org> wrote:
> If we tell people to drop their cert/profile into a certain directory, then
> we could use the "security" command-line tool to import their key:
>
> security create-keychain Cordova
> security set-keychain-settings -u -t 9999 Cordova
> security import $P12_FILE -k Cordova -A
>
>
>
> And then xcodebuild to set the relevant signing variables:
>
> xcodebuild -project Foo.xcodeproj -target "MyApp" -configuration Release
> -sdk iphoneos build PROVISIONING_PROFILE=foo "CODE_SIGN_IDENTITY=bar"
> "OTHER_CODE_SIGN_FLAGS=--keychain
> Cordova.keychain"
>
>
>
> On Tue, Sep 4, 2012 at 3:03 PM, Shazron <sh...@gmail.com> wrote:
>
>> Great! Android's procedure seems like a dream compared to iOS'. To
>> make it similar to Android/BB, the tool will need to parse the
>> .pbxproj and read what is set for it to code sign (prov profile,
>> cert).
>>
>>
>> On Tue, Sep 4, 2012 at 11:48 AM, Filip Maj <fi...@adobe.com> wrote:
>> > Definitely should bring up a common discussion about this!
>> >
>> > +1 !
>> >
>> > People using the tools are already asking for it. Android's equivalent is
>> > cd into project and run "ant release".
>> >
>> > BlackBerry already has these bits in place.
>> >
>> > Not sure about Windows Phone.
>> >
>> > On 9/4/12 11:45 AM, "Shazron Abdullah (JIRA)" <ji...@apache.org> wrote:
>> >
>> >>Shazron Abdullah created CB-1369:
>> >>------------------------------------
>> >>
>> >> Summary: CLI - add instructions and/or feature to sign an
>> app
>> >> Key: CB-1369
>> >> URL: https://issues.apache.org/jira/browse/CB-1369
>> >> Project: Apache Cordova
>> >> Issue Type: Bug
>> >> Components: iOS
>> >> Reporter: Shazron Abdullah
>> >> Assignee: Shazron Abdullah
>> >> Priority: Minor
>> >> Fix For: 3.0.0
>> >>
>> >>
>> >>This possibly needs a cross-platform discussion (common interface), but
>> >>for now we can provide docs on how to do this only for iOS which will
>> >>help ease writing this feature.
>> >>
>> >>Requirements for code signing:
>> >>- Distribution/Developer cert (cert + private key)
>> >>- Dist/Dev provisioning profile
>> >>- codesign tool (included in OS X)
>> >>- security tool (included in OS X)
>> >>- zip tool (included in OS X)
>> >>
>> >>OR (RECOMMENDED)
>> >>
>> >> we can just document xcrun. xcrun should be included in Xcode
>> already:
>> >>
>> >>{code}
>> >>/usr/bin/xcrun -sdk iphoneos PackageApplication -v
>> >>"${RELEASE_BUILDDIR}/${APPLICATION_NAME}.app" -o
>> >>"${BUILD_HISTORY_DIR}/${APPLICATION_NAME}.ipa" --sign "${DEVELOPER_NAME}"
>> >>--embed "${PROVISONING_PROFILE}²
>> >>{code}
>> >>
>> >>I don't see any reason we shouldn't just use xcrun. xcodebuild is just an
>> >>alias to xcrun, and we need xcodebuild to build the app.
>> >>
>> >>
>> >>
>> >>--
>> >>This message is automatically generated by JIRA.
>> >>If you think it was sent incorrectly, please contact your JIRA
>> >>administrators
>> >>For more information on JIRA, see:
>> http://www.atlassian.com/software/jira
>> >
>>
Re: Sign/Release app via CLI tools (was [jira] [Created] (CB-1369)
CLI - add instructions and/or feature to sign an app)
Posted by Michael Brooks <mi...@michaelbrooks.ca>.
Awesome suggestion Andrew!
On Tue, Sep 4, 2012 at 12:28 PM, Andrew Grieve <ag...@chromium.org> wrote:
> If we tell people to drop their cert/profile into a certain directory, then
> we could use the "security" command-line tool to import their key:
>
> security create-keychain Cordova
> security set-keychain-settings -u -t 9999 Cordova
> security import $P12_FILE -k Cordova -A
>
>
>
> And then xcodebuild to set the relevant signing variables:
>
> xcodebuild -project Foo.xcodeproj -target "MyApp" -configuration Release
> -sdk iphoneos build PROVISIONING_PROFILE=foo "CODE_SIGN_IDENTITY=bar"
> "OTHER_CODE_SIGN_FLAGS=--keychain
> Cordova.keychain"
>
>
>
> On Tue, Sep 4, 2012 at 3:03 PM, Shazron <sh...@gmail.com> wrote:
>
> > Great! Android's procedure seems like a dream compared to iOS'. To
> > make it similar to Android/BB, the tool will need to parse the
> > .pbxproj and read what is set for it to code sign (prov profile,
> > cert).
> >
> >
> > On Tue, Sep 4, 2012 at 11:48 AM, Filip Maj <fi...@adobe.com> wrote:
> > > Definitely should bring up a common discussion about this!
> > >
> > > +1 !
> > >
> > > People using the tools are already asking for it. Android's equivalent
> is
> > > cd into project and run "ant release".
> > >
> > > BlackBerry already has these bits in place.
> > >
> > > Not sure about Windows Phone.
> > >
> > > On 9/4/12 11:45 AM, "Shazron Abdullah (JIRA)" <ji...@apache.org> wrote:
> > >
> > >>Shazron Abdullah created CB-1369:
> > >>------------------------------------
> > >>
> > >> Summary: CLI - add instructions and/or feature to sign an
> > app
> > >> Key: CB-1369
> > >> URL: https://issues.apache.org/jira/browse/CB-1369
> > >> Project: Apache Cordova
> > >> Issue Type: Bug
> > >> Components: iOS
> > >> Reporter: Shazron Abdullah
> > >> Assignee: Shazron Abdullah
> > >> Priority: Minor
> > >> Fix For: 3.0.0
> > >>
> > >>
> > >>This possibly needs a cross-platform discussion (common interface), but
> > >>for now we can provide docs on how to do this only for iOS which will
> > >>help ease writing this feature.
> > >>
> > >>Requirements for code signing:
> > >>- Distribution/Developer cert (cert + private key)
> > >>- Dist/Dev provisioning profile
> > >>- codesign tool (included in OS X)
> > >>- security tool (included in OS X)
> > >>- zip tool (included in OS X)
> > >>
> > >>OR (RECOMMENDED)
> > >>
> > >> we can just document xcrun. xcrun should be included in Xcode
> > already:
> > >>
> > >>{code}
> > >>/usr/bin/xcrun -sdk iphoneos PackageApplication -v
> > >>"${RELEASE_BUILDDIR}/${APPLICATION_NAME}.app" -o
> > >>"${BUILD_HISTORY_DIR}/${APPLICATION_NAME}.ipa" --sign
> "${DEVELOPER_NAME}"
> > >>--embed "${PROVISONING_PROFILE}²
> > >>{code}
> > >>
> > >>I don't see any reason we shouldn't just use xcrun. xcodebuild is just
> an
> > >>alias to xcrun, and we need xcodebuild to build the app.
> > >>
> > >>
> > >>
> > >>--
> > >>This message is automatically generated by JIRA.
> > >>If you think it was sent incorrectly, please contact your JIRA
> > >>administrators
> > >>For more information on JIRA, see:
> > http://www.atlassian.com/software/jira
> > >
> >
>
Re: Sign/Release app via CLI tools (was [jira] [Created] (CB-1369)
CLI - add instructions and/or feature to sign an app)
Posted by Andrew Grieve <ag...@chromium.org>.
If we tell people to drop their cert/profile into a certain directory, then
we could use the "security" command-line tool to import their key:
security create-keychain Cordova
security set-keychain-settings -u -t 9999 Cordova
security import $P12_FILE -k Cordova -A
And then xcodebuild to set the relevant signing variables:
xcodebuild -project Foo.xcodeproj -target "MyApp" -configuration Release
-sdk iphoneos build PROVISIONING_PROFILE=foo "CODE_SIGN_IDENTITY=bar"
"OTHER_CODE_SIGN_FLAGS=--keychain
Cordova.keychain"
On Tue, Sep 4, 2012 at 3:03 PM, Shazron <sh...@gmail.com> wrote:
> Great! Android's procedure seems like a dream compared to iOS'. To
> make it similar to Android/BB, the tool will need to parse the
> .pbxproj and read what is set for it to code sign (prov profile,
> cert).
>
>
> On Tue, Sep 4, 2012 at 11:48 AM, Filip Maj <fi...@adobe.com> wrote:
> > Definitely should bring up a common discussion about this!
> >
> > +1 !
> >
> > People using the tools are already asking for it. Android's equivalent is
> > cd into project and run "ant release".
> >
> > BlackBerry already has these bits in place.
> >
> > Not sure about Windows Phone.
> >
> > On 9/4/12 11:45 AM, "Shazron Abdullah (JIRA)" <ji...@apache.org> wrote:
> >
> >>Shazron Abdullah created CB-1369:
> >>------------------------------------
> >>
> >> Summary: CLI - add instructions and/or feature to sign an
> app
> >> Key: CB-1369
> >> URL: https://issues.apache.org/jira/browse/CB-1369
> >> Project: Apache Cordova
> >> Issue Type: Bug
> >> Components: iOS
> >> Reporter: Shazron Abdullah
> >> Assignee: Shazron Abdullah
> >> Priority: Minor
> >> Fix For: 3.0.0
> >>
> >>
> >>This possibly needs a cross-platform discussion (common interface), but
> >>for now we can provide docs on how to do this only for iOS which will
> >>help ease writing this feature.
> >>
> >>Requirements for code signing:
> >>- Distribution/Developer cert (cert + private key)
> >>- Dist/Dev provisioning profile
> >>- codesign tool (included in OS X)
> >>- security tool (included in OS X)
> >>- zip tool (included in OS X)
> >>
> >>OR (RECOMMENDED)
> >>
> >> we can just document xcrun. xcrun should be included in Xcode
> already:
> >>
> >>{code}
> >>/usr/bin/xcrun -sdk iphoneos PackageApplication -v
> >>"${RELEASE_BUILDDIR}/${APPLICATION_NAME}.app" -o
> >>"${BUILD_HISTORY_DIR}/${APPLICATION_NAME}.ipa" --sign "${DEVELOPER_NAME}"
> >>--embed "${PROVISONING_PROFILE}²
> >>{code}
> >>
> >>I don't see any reason we shouldn't just use xcrun. xcodebuild is just an
> >>alias to xcrun, and we need xcodebuild to build the app.
> >>
> >>
> >>
> >>--
> >>This message is automatically generated by JIRA.
> >>If you think it was sent incorrectly, please contact your JIRA
> >>administrators
> >>For more information on JIRA, see:
> http://www.atlassian.com/software/jira
> >
>
Re: Sign/Release app via CLI tools (was [jira] [Created] (CB-1369)
CLI - add instructions and/or feature to sign an app)
Posted by Shazron <sh...@gmail.com>.
Great! Android's procedure seems like a dream compared to iOS'. To
make it similar to Android/BB, the tool will need to parse the
.pbxproj and read what is set for it to code sign (prov profile,
cert).
On Tue, Sep 4, 2012 at 11:48 AM, Filip Maj <fi...@adobe.com> wrote:
> Definitely should bring up a common discussion about this!
>
> +1 !
>
> People using the tools are already asking for it. Android's equivalent is
> cd into project and run "ant release".
>
> BlackBerry already has these bits in place.
>
> Not sure about Windows Phone.
>
> On 9/4/12 11:45 AM, "Shazron Abdullah (JIRA)" <ji...@apache.org> wrote:
>
>>Shazron Abdullah created CB-1369:
>>------------------------------------
>>
>> Summary: CLI - add instructions and/or feature to sign an app
>> Key: CB-1369
>> URL: https://issues.apache.org/jira/browse/CB-1369
>> Project: Apache Cordova
>> Issue Type: Bug
>> Components: iOS
>> Reporter: Shazron Abdullah
>> Assignee: Shazron Abdullah
>> Priority: Minor
>> Fix For: 3.0.0
>>
>>
>>This possibly needs a cross-platform discussion (common interface), but
>>for now we can provide docs on how to do this only for iOS which will
>>help ease writing this feature.
>>
>>Requirements for code signing:
>>- Distribution/Developer cert (cert + private key)
>>- Dist/Dev provisioning profile
>>- codesign tool (included in OS X)
>>- security tool (included in OS X)
>>- zip tool (included in OS X)
>>
>>OR (RECOMMENDED)
>>
>> we can just document xcrun. xcrun should be included in Xcode already:
>>
>>{code}
>>/usr/bin/xcrun -sdk iphoneos PackageApplication -v
>>"${RELEASE_BUILDDIR}/${APPLICATION_NAME}.app" -o
>>"${BUILD_HISTORY_DIR}/${APPLICATION_NAME}.ipa" --sign "${DEVELOPER_NAME}"
>>--embed "${PROVISONING_PROFILE}²
>>{code}
>>
>>I don't see any reason we shouldn't just use xcrun. xcodebuild is just an
>>alias to xcrun, and we need xcodebuild to build the app.
>>
>>
>>
>>--
>>This message is automatically generated by JIRA.
>>If you think it was sent incorrectly, please contact your JIRA
>>administrators
>>For more information on JIRA, see: http://www.atlassian.com/software/jira
>