xcode-project use-profiles failing due to certificate length

[pstromberg98]

If you are looking for help, please confirm the following...

• I confirm I have searched the Docs, Codemagic Sample Projects, and GitHub Discussions.
• I confirm the software versions on my local computer match the ones in CI environment (e.g. Xcode version, Gradle version). See here
• I confirm I am able to do a fresh clone of the repository and build the project on my local computer.

Which mobile framework are you using?

Flutter (Dart)

Steps to reproduce

Run xcode-project use-profiles with a signing certificate that has a subject name greater than 64 characters.

Expected results

For it to utilize the valid certificate.

Actual results

Our signing action (which just uses xcode-project use-profiles) fails with:

ERROR: /Users/builder/.pyenv/versions/3.8.13/lib/python3.8/site-packages/codemagic/models/certificate.py:88: UserWarning: Attribute's length must be >= 1 and <= 64, but it was 66
  for name_attribute in self.certificate.subject

Build id (optional)

66abcddaf98e86168c45e3b8

[helinanever]

Hi @pstromberg98 , thanks for reporting this. We are looking into it.

[priitlatt]

@pstromberg98, actually there is nothing wrong with the certificate. It is just that RFC-5280 specifies min and max lengths for certificate's common name, which isn't respected/enforced by Apple. Recent version of cryptography reports about such cases as a warning.

The actual failure reason is in your project file ios/Runner.xcodeproj/project.pbxproj, where code signing entitlements are not defined properly. According to our logs the problematic line is 463:

CODE_SIGN_ENTITLEMENTS = CODE_SIGN_ENTITLEMENTS = "Runner/RunnerDebug-production.entitlements";;

which I believe should instead be

CODE_SIGN_ENTITLEMENTS = "Runner/RunnerDebug-production.entitlements";

You can use the switch --code-signing-setup-verbose-logging with xcode-project use-profiles to see more detailed logs, including errors, about actual project updates that are carried out to set provisioning profiles.

[pstromberg98]

@priitlatt Ahh got it. I just tested reverting back to use-profiles in main where I already fixed the malformed pbx. Didn't realize that was the root cause of this problem as well 🤦🏻‍♂️. I might just turn on that verbose logging as the error output there made it seem like the name was the issue. Thanks!