fastlane icon indicating copy to clipboard operation
fastlane copied to clipboard

Systematic fail on the creation of a development certificate on an enterprise account

Open ThomasHezard opened this issue 3 years ago • 7 comments

New Issue Checklist

Issue Description

I want to integrate a development certificate associated to an enterprise account in my match repository to build debug targets. However, match systematically fails with the same error:

[!] Could not create another Development certificate, reached the maximum number of available Development certificates.

even though there is no development certificate for the match user in my account.

Command executed

Below is the failing code from my certificate generation lane. Global variables are set before the lane is called and keychain is managed manually.
NB: I added the MATCH_FORCE_ENTERPRISE env variable following this issue but it did not help (same result with or without).

Failing fastlane code
ENV["MATCH_FORCE_ENTERPRISE"] = "1"
match(
  type: "development", 
  username: $match_username,
  team_id: $match_enterprise_team_id,
  git_branch: $match_enterprise_git_branch,
  keychain_name: $match_keychain_name,
  keychain_password: $match_keychain_password,
  platform: "ios",
  readonly: false
)
ENV.delete("MATCH_FORCE_ENTERPRISE")

Complete output when running fastlane, including the stack trace and command used

NB: I replaced confidential information with XXX

Command output
[13:16:50]: -------------------
[13:16:50]: --- Step: match ---
[13:16:50]: -------------------
[13:16:50]: Successfully loaded 'XXX/fastlane/Matchfile' 📄

+----------------+-------------------------------------------------------------------+
|                    Detected Values from './fastlane/Matchfile'                     |
+----------------+-------------------------------------------------------------------+
| storage_mode   | git                                                               |
| git_url        | XXX                                                               |
| git_full_name  | XXX                                                               |
| git_user_email | XXX                                                               |
| type           | development                                                       |
| app_identifier | []                                                                |
+----------------+-------------------------------------------------------------------+

+----------------------------------------+-------------------------------------------------------------------+
|                                         Summary for match 2.208.0                                          |
+----------------------------------------+-------------------------------------------------------------------+
| type                                   | development                                                       |
| username                               | XXX                                                               |
| team_id                                | XXX                                                               |
| git_branch                             | enterprise                                                        |
| keychain_name                          | tmp_match_keychain                                                |
| keychain_password                      | ********                                                          |
| platform                               | ios                                                               |
| readonly                               | false                                                             |
| generate_apple_certs                   | true                                                              |
| skip_provisioning_profiles             | false                                                             |
| app_identifier                         | []                                                                |
| storage_mode                           | git                                                               |
| git_url                                | XXX                                                               |
| git_full_name                          | XXX                                                               |
| git_user_email                         | XXX                                                               |
| shallow_clone                          | false                                                             |
| clone_branch_directly                  | false                                                             |
| skip_google_cloud_account_confirmation | false                                                             |
| force                                  | false                                                             |
| force_for_new_devices                  | false                                                             |
| include_all_certificates               | false                                                             |
| force_for_new_certificates             | false                                                             |
| skip_confirmation                      | false                                                             |
| safe_remove_certs                      | false                                                             |
| skip_docs                              | false                                                             |
| derive_catalyst_app_identifier         | false                                                             |
| fail_on_name_taken                     | false                                                             |
| skip_certificate_matching              | false                                                             |
| skip_set_partition_list                | false                                                             |
| verbose                                | false                                                             |
+----------------------------------------+-------------------------------------------------------------------+

[13:16:50]: Cloning remote git repo...
[13:16:50]: If cloning the repo takes too long, you can use the `clone_branch_directly` option in match.
[13:16:51]: Add git user config to local git repo...
[13:16:51]: Checking out branch enterprise...
[13:16:51]: 🔓  Successfully decrypted certificates repo
[13:16:51]: Verifying that the certificate and profile are still valid on the Dev Portal...
[13:16:51]: Using existing authorization token for App Store Connect API
[13:16:51]: Couldn't find a valid code signing identity for development... creating one for you now

+-------------------------+-------------------------------------------------------------+
|                               Summary for cert 2.208.0                                |
+-------------------------+-------------------------------------------------------------+
| platform                | ios                                                         |
| development             | true                                                        |
| generate_apple_certs    | true                                                        |
| force                   | true                                                        |
| username                | XXX                                                         |
| team_id                 | XXX                                                         |
| keychain_path           | /Users/thomashezard/Library/Keychains/tmp_match_keychain-db |
| keychain_password       | ********                                                    |
| skip_set_partition_list | false                                                       |
+-------------------------+-------------------------------------------------------------+

[13:16:51]: Using existing authorization token for App Store Connect API

[!] Could not create another Development certificate, reached the maximum number of available Development certificates.

What I tried / Other info

  • Using env variable MATCH_FORCE_ENTERPRISE env variable following this issue => same error with or without the variable set
  • In the same lane, I call match for a development certificate on a standard (not enterprise) account with a API key, no issue for the certificate generation, which is now in my match repo.

Environment

✅ fastlane environment ✅

Stack

Key Value
OS 12.5
Ruby 2.7.6
Bundler? true
Git git version 2.37.1
Installation Source ~/.rbenv/versions/2.7.6/bin/fastlane
Host macOS 12.5 (21G72)
Ruby Lib Dir ~/.rbenv/versions/2.7.6/lib
OpenSSL Version OpenSSL 1.1.1q 5 Jul 2022
Is contained false
Is homebrew false
Is installed via Fabric.app false
Xcode Path /Applications/Xcode.app/Contents/Developer/
Xcode Version 13.4.1
Swift Version 5.6.1

System Locale

Variable Value
LANG en_US.UTF-8 ✅
LC_ALL
LANGUAGE

fastlane files:

`./fastlane/Fastfile` CONFIDENTIAL, see details below for the failing piece of code.
`./fastlane/Appfile`
# app_identifier("[[APP_IDENTIFIER]]") # The bundle identifier of your app
# apple_id("[[APPLE_ID]]") # Your Apple email address


# For more information about the Appfile, see:
#     https://docs.fastlane.tools/advanced/#appfile

fastlane gems

Gem Version Update-Status
fastlane 2.208.0 ✅ Up-To-Date

Loaded fastlane plugins:

No plugins Loaded

Loaded gems
Gem Version
did_you_mean 1.6.1
bundler 2.3.19
rake 13.0.6
rexml 3.2.5
CFPropertyList 3.0.5
concurrent-ruby 1.1.10
i18n 1.12.0
minitest 5.16.2
tzinfo 2.0.5
zeitwerk 2.6.0
activesupport 6.1.6.1
public_suffix 4.0.7
addressable 2.8.0
httpclient 2.8.3
json 2.6.2
algoliasearch 1.27.5
artifactory 3.0.15
atomos 0.1.3
aws-eventstream 1.2.0
aws-partitions 1.615.0
aws-sigv4 1.5.1
jmespath 1.6.1
aws-sdk-core 3.131.6
aws-sdk-kms 1.58.0
aws-sdk-s3 1.114.0
babosa 1.0.4
claide 1.1.0
fuzzy_match 2.0.4
nap 1.1.0
netrc 0.11.0
ffi 1.15.5
ethon 0.15.0
typhoeus 1.4.0
cocoapods-core 1.11.3
cocoapods-deintegrate 1.0.5
cocoapods-downloader 1.6.3
cocoapods-plugins 1.0.0
cocoapods-search 1.0.1
cocoapods-trunk 1.6.0
cocoapods-try 1.2.0
colored2 3.1.2
escape 0.0.4
fourflusher 2.3.1
gh_inspector 1.1.3
molinillo 0.8.0
ruby-macho 2.5.1
nanaimo 0.3.0
xcodeproj 1.22.0
cocoapods 1.11.3
colored 1.2
highline 2.0.3
commander 4.6.0
declarative 0.0.20
digest-crc 0.6.4
unf_ext 0.0.8.2
unf 0.1.4
domain_name 0.5.20190701
dotenv 2.8.1
emoji_regex 3.2.3
excon 0.92.4
faraday-em_http 1.0.0
faraday-em_synchrony 1.0.0
faraday-excon 1.1.0
faraday-httpclient 1.0.1
multipart-post 2.0.0
faraday-multipart 1.0.4
faraday-net_http 1.0.1
faraday-net_http_persistent 1.2.0
faraday-patron 1.0.0
faraday-rack 1.0.0
faraday-retry 1.0.3
ruby2_keywords 0.0.5
faraday 1.10.1
http-cookie 1.0.5
faraday-cookie_jar 0.0.7
faraday_middleware 1.2.0
fastimage 2.2.6
jwt 2.4.1
memoist 0.16.2
multi_json 1.15.0
os 1.1.4
signet 0.17.0
googleauth 1.2.0
mini_mime 1.1.2
trailblazer-option 0.1.2
uber 0.1.0
representable 3.2.0
retriable 3.1.2
webrick 1.7.0
google-apis-core 0.7.0
google-apis-androidpublisher_v3 0.25.0
google-apis-playcustomapp_v1 0.10.0
google-apis-iamcredentials_v1 0.13.0
google-apis-storage_v1 0.18.0
google-cloud-env 1.6.0
google-cloud-errors 1.2.0
google-cloud-core 1.6.0
google-cloud-storage 1.37.0
mini_magick 4.11.0
naturally 2.2.1
optparse 0.1.1
plist 3.6.0
rubyzip 2.3.2
security 0.1.3
simctl 1.6.8
terminal-notifier 2.0.0
unicode-display_width 1.8.0
terminal-table 1.8.0
tty-screen 0.8.1
tty-cursor 0.7.1
tty-spinner 0.9.3
word_wrap 1.0.0
rouge 2.0.7
xcpretty 0.3.0
xcpretty-travis-formatter 1.0.1
fileutils 1.6.0
mime-types-data 3.2022.0105
mime-types 3.4.1
multi_xml 0.6.0
httparty 0.20.0
mustache 1.1.1
open4 1.3.4
redcarpet 3.5.1
sassc 2.4.0
sqlite3 1.4.4
liferaft 0.0.6
xcinvoke 0.3.0
jazzy 0.14.2

generated on: 2022-08-08

ThomasHezard avatar Aug 08 '22 12:08 ThomasHezard

And one day later without any modification on the code or the account... it juste worked.
No idea what happened here 🤷

ThomasHezard avatar Aug 09 '22 17:08 ThomasHezard

There hasn't been any activity on this issue recently. Due to the high number of incoming GitHub notifications, we have to clean some of the old issues, as many of them have already been resolved with the latest updates.

Please make sure to update to the latest fastlane version and check if that solves the issue. Let us know if that works for you by adding a comment :+1:

Friendly reminder: contributions are always welcome! Check out CONTRIBUTING.md for more information on how to help with fastlane and feel free to tackle this issue yourself :muscle:

This issue will be auto-closed if there is no reply within 1 month.

fastlane-bot avatar Sep 09 '22 17:09 fastlane-bot

I'm also seeing this. Maybe it will also go away?

cowboyd avatar Sep 21 '22 16:09 cowboyd

There hasn't been any activity on this issue recently. Due to the high number of incoming GitHub notifications, we have to clean some of the old issues, as many of them have already been resolved with the latest updates.

Please make sure to update to the latest fastlane version and check if that solves the issue. Let us know if that works for you by adding a comment :+1:

Friendly reminder: contributions are always welcome! Check out CONTRIBUTING.md for more information on how to help with fastlane and feel free to tackle this issue yourself :muscle:

This issue will be auto-closed if there is no reply within 1 month.

fastlane-bot avatar Nov 20 '22 17:11 fastlane-bot

Same error, 0 active developers certs but we got this error.

bimawa avatar Nov 24 '23 13:11 bimawa

Same error. Were you guys able to solve this?

Edit: Got it working by creating a new Apple user

asharghi avatar Jan 06 '24 03:01 asharghi