Skip to content

InstallAppleCertificate assumes OpenSSL supports algorithm RC2-40-CBC #353

@stevenvergenz

Description

@stevenvergenz

Apple's development certificates are issued using algorithm RC2-40-CBC, which is supported by LibreSSL 3.3 shipped with MacOS Sonoma (the binary confusingly named "openssl"), but is not supported by OpenSSL 3.3 without the -legacy flag. Because this task uses which to find the openssl binary, if OpenSSL 3 is installed on the system (via Homebrew for example), the task will fail without the pipeline definition explicitly providing the -legacy flag.

The task should check whether the algorithm of the provided certificate is supported by OpenSSL, and add that flag automatically if required.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions