Skip to content

Instantly share code, notes, and snippets.

@boodle

boodle/Making Apple Developer certificates on Linux.md

Last active October 8, 2025 15:31
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save boodle/77436b2d9facb8e938ad to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save boodle/77436b2d9facb8e938ad to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. boodle revised this gist Apr 8, 2024. 1 changed file with 12 additions and 3 deletions.
    15 changes: 12 additions & 3 deletions Making Apple Developer certificates on Linux.md
    View file
    Original file line number Diff line number Diff line change
    @@ -5,29 +5,38 @@ cd Apple\ Enterprise
    ```

    2. Generate a certificate signing request
    ```openssl req -nodes -newkey rsa:2048 -keyout ios_enterprise.key -out CertificateSigningRequest.certSigningRequest```
    ```
    openssl req -nodes -newkey rsa:2048 -keyout ios_enterprise.key -out CertificateSigningRequest.certSigningRequest
    ```

    3. With the information like so (ensure you give it a password):
    ```
    Country Name (2 letter code) [AU]:GB
    State or Province Name (full name) [Some-State]:London
    Locality Name (eg, city) []:
    Organization Name (eg, company) [Internet Widgits Pty Ltd]:Total Onion Ltd
    Organizational Unit Name (eg, section) []:
    Common Name (e.g. server FQDN or YOUR name) []:Total Onion Enterprise
    Email Address []:

    ```
    4. Login to developer.apple.com, go to:
    "Member Center" -> "Manage your certificates, App IDs, devices, and provisioning profiles." -> "Certificates" -> "Add"
    ```
    "Member Center" -> "Manage your certificates, App IDs, devices, and provisioning profiles." -> "Certificates" -> "Add"
    ```

    5. Go through the wizard, selecting the certificate type, and uploading the .csr.

    6. Download the .cer file, saving it to the folder created in step 1

    7. Convert the .cer file to a .pem file:
    ```
    openssl x509 -in ios_enterprise.cer -inform DER -out ios_enterprise.pem -outform PEM
    ```

    8. Convert the .pem to a .p12:
    ```
    openssl pkcs12 -export -inkey ios_enterprise.key -in ios_enterprise.pem -out ios_enterprise.p12
    ```

    9. You can now create a "Provisioning Profile" in the "Member Center" on developer.apple.com using the certificate you made in step 4

  2. boodle revised this gist Apr 8, 2024. 1 changed file with 4 additions and 2 deletions.
    6 changes: 4 additions & 2 deletions Making Apple Developer certificates on Linux.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,6 +1,8 @@
    1. Create a new directory;
    ```mkdir Apple\ Enterprise
    cd Apple\ Enterprise```
    ```
    mkdir Apple\ Enterprise
    cd Apple\ Enterprise
    ```

    2. Generate a certificate signing request
    ```openssl req -nodes -newkey rsa:2048 -keyout ios_enterprise.key -out CertificateSigningRequest.certSigningRequest```
  3. boodle revised this gist Apr 8, 2024. 1 changed file with 3 additions and 3 deletions.
    6 changes: 3 additions & 3 deletions Making Apple Developer certificates on Linux.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,9 +1,9 @@
    1. Create a new directory;
    mkdir Apple\ Enterprise
    cd Apple\ Enterprise
    ```mkdir Apple\ Enterprise
    cd Apple\ Enterprise```

    2. Generate a certificate signing request
    openssl req -nodes -newkey rsa:2048 -keyout ios_enterprise.key -out CertificateSigningRequest.certSigningRequest
    ```openssl req -nodes -newkey rsa:2048 -keyout ios_enterprise.key -out CertificateSigningRequest.certSigningRequest```

    3. With the information like so (ensure you give it a password):
    Country Name (2 letter code) [AU]:GB
  4. boodle renamed this gist Feb 16, 2023. 1 changed file with 12 additions and 1 deletion.
    13 changes: 12 additions & 1 deletion Making Apple Developer certificates on Linux → ... Apple Developer certificates on Linux.md
    View file
    Original file line number Diff line number Diff line change
    @@ -27,4 +27,15 @@
    8. Convert the .pem to a .p12:
    openssl pkcs12 -export -inkey ios_enterprise.key -in ios_enterprise.pem -out ios_enterprise.p12

    9. You can now create a "Provisioning Profile" in the "Member Center" on developer.apple.com using the certificate you made in step 4
    9. You can now create a "Provisioning Profile" in the "Member Center" on developer.apple.com using the certificate you made in step 4

    ## Notes:

    If you are using a build system like Ionic Appflow and receive an error like this one:
    ```
    security: SecKeychainItemImport: MAC verification failed during PKCS12 import (wrong password?)
    ```

    It's because "OpenSSL 3.x changed its default algorithm in pkcs12. Which is not compatible with embedded Security frameworks in macOS/iOS. You could alternatively use OpenSSL 1.x."

    Add the `-legacy` flag in step 8. See [here](https://stackoverflow.com/a/70656724) for more info. Massive thanks to [i_82](https://stackoverflow.com/users/5227717/i-82) and [Jarrod Moldrich](https://stackoverflow.com/users/2064098/jarrod-moldrich).
  5. boodle revised this gist Jul 6, 2015. 1 changed file with 2 additions and 2 deletions.
    4 changes: 2 additions & 2 deletions Making Apple Developer certificates on Linux
    View file
    Original file line number Diff line number Diff line change
    @@ -1,6 +1,6 @@
    1. Create a new directory;
    mkdir Apple\ Enterprise; cd Apple\ Enterprise
    cd Apple\ Enterprise; cd Apple\ Enterprise
    mkdir Apple\ Enterprise
    cd Apple\ Enterprise

    2. Generate a certificate signing request
    openssl req -nodes -newkey rsa:2048 -keyout ios_enterprise.key -out CertificateSigningRequest.certSigningRequest
  6. boodle created this gist Oct 3, 2014.
    30 changes: 30 additions & 0 deletions Making Apple Developer certificates on Linux
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,30 @@
    1. Create a new directory;
    mkdir Apple\ Enterprise; cd Apple\ Enterprise
    cd Apple\ Enterprise; cd Apple\ Enterprise

    2. Generate a certificate signing request
    openssl req -nodes -newkey rsa:2048 -keyout ios_enterprise.key -out CertificateSigningRequest.certSigningRequest

    3. With the information like so (ensure you give it a password):
    Country Name (2 letter code) [AU]:GB
    State or Province Name (full name) [Some-State]:London
    Locality Name (eg, city) []:
    Organization Name (eg, company) [Internet Widgits Pty Ltd]:Total Onion Ltd
    Organizational Unit Name (eg, section) []:
    Common Name (e.g. server FQDN or YOUR name) []:Total Onion Enterprise
    Email Address []:

    4. Login to developer.apple.com, go to:
    "Member Center" -> "Manage your certificates, App IDs, devices, and provisioning profiles." -> "Certificates" -> "Add"

    5. Go through the wizard, selecting the certificate type, and uploading the .csr.

    6. Download the .cer file, saving it to the folder created in step 1

    7. Convert the .cer file to a .pem file:
    openssl x509 -in ios_enterprise.cer -inform DER -out ios_enterprise.pem -outform PEM

    8. Convert the .pem to a .p12:
    openssl pkcs12 -export -inkey ios_enterprise.key -in ios_enterprise.pem -out ios_enterprise.p12

    9. You can now create a "Provisioning Profile" in the "Member Center" on developer.apple.com using the certificate you made in step 4