Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

generate_appcast does not return an error if private key doesn't exist #2314

Closed
mborsten opened this issue Jan 27, 2023 · 1 comment · Fixed by #2322
Closed

generate_appcast does not return an error if private key doesn't exist #2314

mborsten opened this issue Jan 27, 2023 · 1 comment · Fixed by #2322
Milestone

Comments

@mborsten
Copy link

Summary

When running generate_appcas and the private key doesn't exist in the keychain, it does print out a warning, but it still generates an update xml:

Warning: Private key for account ed25519 not found in the Keychain (-25300). Please run the generate_keys tool
Warning: could not sign **** due to lack of private EdDSA key
Wrote 1 new update, updated 0 existing updates, and removed 0 old updates in appcast.xml

The return value of the proces is also 0

Possible Fix

The proces should by default abort and have a non-0 return value. This is especially important when in CI/CD, where you want the deploy to abort if the singing didn't work. There could be an option to skip signing, or make signing optional.

@zorgiepoo
Copy link
Member

If the update has a public EdDSA key, and generate_appcast can't sign the update, this should indeed be a hard error.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants