Expand description
Apple code signing through App Store Connect.
Three parts. csr generates an RSA key pair and a signing request
locally, certificate asks Apple to certify it, and profile binds
a certificate to an App ID so signing knows which entitlements are
allowed.
The division of labour is the whole point. Apple never receives, and never returns, a private key. You keep it; they vouch for its public half. A certificate whose key file is lost is permanently unusable, and an expired certificate cannot be renewed, only replaced by a new key pair and a new request.
The API calls are an extension trait on
Client, since that type belongs to
the core crate. Import prelude to call them.
Modulesยง
- certificate
- Signing certificates:
/v1/certificates. - csr
- Certificate Signing Requests, and the key pairs behind them.
- prelude
- profile
- Provisioning profiles:
/v1/profiles.