#!/usr/bin/env bash# Setup stable development code signing to reduce keychain promptsset -euo pipefail echo "🔐 Setting up stable development code signing..."echo ""echo "This will create a self-signed certificate that stays consistent across rebuilds,"echo "reducing keychain permission prompts."echo "" # Check if we already have a CodexBar development certificateCERT_NAME="CodexBar Development"if security find-certificate -c "$CERT_NAME" >/dev/null 2>&1; then echo "✅ Certificate '$CERT_NAME' already exists!" echo "" echo "To use it, add this to your shell profile (~/.zshrc or ~/.bashrc):" echo "" echo " export APP_IDENTITY='$CERT_NAME'" echo "" echo "Then restart your terminal and rebuild with ./Scripts/compile_and_run.sh" exit 0fi echo "Creating self-signed certificate '$CERT_NAME'..."echo "" # Create a temporary config file for the certificateTEMP_CONFIG=$(mktemp)trap "rm -f $TEMP_CONFIG" EXIT cat > "$TEMP_CONFIG" <<EOF[ req ]distinguished_name = req_distinguished_namex509_extensions = v3_reqprompt = no [ req_distinguished_name ]CN = $CERT_NAMEO = CodexBar DevelopmentC = US [ v3_req ]keyUsage = critical,digitalSignatureextendedKeyUsage = codeSigningEOF # Generate the certificateopenssl req -x509 -newkey rsa:4096 -sha256 -days 3650 \ -nodes -keyout /tmp/codexbar-dev.key -out /tmp/codexbar-dev.crt \ -config "$TEMP_CONFIG" 2>/dev/null # Convert to PKCS12 formatopenssl pkcs12 -export -out /tmp/codexbar-dev.p12 \ -inkey /tmp/codexbar-dev.key -in /tmp/codexbar-dev.crt \ -passout pass: 2>/dev/null # Import into keychainsecurity import /tmp/codexbar-dev.p12 -k ~/Library/Keychains/login.keychain-db -T /usr/bin/codesign -T /usr/bin/security # Clean up temporary filesrm -f /tmp/codexbar-dev.{key,crt,p12} echo ""echo "✅ Certificate created successfully!"echo ""echo "⚠️ IMPORTANT: You need to trust this certificate for code signing:"echo ""echo "1. Open Keychain Access.app"echo "2. Find '$CERT_NAME' in the 'login' keychain"echo "3. Double-click it"echo "4. Expand 'Trust' section"echo "5. Set 'Code Signing' to 'Always Trust'"echo "6. Close the window (enter your password when prompted)"echo ""echo "Then add this to your shell profile (~/.zshrc or ~/.bashrc):"echo ""echo " export APP_IDENTITY='$CERT_NAME'"echo ""echo "Restart your terminal and rebuild with ./Scripts/compile_and_run.sh"
#!/usr/bin/env bash
# Setup stable development code signing to reduce keychain prompts
set -euo pipefail
echo "🔐 Setting up stable development code signing..."
echo ""
echo "This will create a self-signed certificate that stays consistent across rebuilds,"
echo "reducing keychain permission prompts."
echo ""
# Check if we already have a CodexBar development certificate
CERT_NAME="CodexBar Development"
if security find-certificate -c "$CERT_NAME" >/dev/null 2>&1; then
echo "✅ Certificate '$CERT_NAME' already exists!"
echo ""
echo "To use it, add this to your shell profile (~/.zshrc or ~/.bashrc):"
echo ""
echo " export APP_IDENTITY='$CERT_NAME'"
echo ""
echo "Then restart your terminal and rebuild with ./Scripts/compile_and_run.sh"
exit 0
fi
echo "Creating self-signed certificate '$CERT_NAME'..."
echo ""
# Create a temporary config file for the certificate
TEMP_CONFIG=$(mktemp)
trap "rm -f $TEMP_CONFIG" EXIT
cat > "$TEMP_CONFIG" <<EOF
[ req ]
distinguished_name = req_distinguished_name
x509_extensions = v3_req
prompt = no
[ req_distinguished_name ]
CN = $CERT_NAME
O = CodexBar Development
C = US
[ v3_req ]
keyUsage = critical,digitalSignature
extendedKeyUsage = codeSigning
EOF
# Generate the certificate
openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 \
-nodes -keyout /tmp/codexbar-dev.key -out /tmp/codexbar-dev.crt \
-config "$TEMP_CONFIG" 2>/dev/null
# Convert to PKCS12 format
openssl pkcs12 -export -out /tmp/codexbar-dev.p12 \
-inkey /tmp/codexbar-dev.key -in /tmp/codexbar-dev.crt \
-passout pass: 2>/dev/null
# Import into keychain
security import /tmp/codexbar-dev.p12 -k ~/Library/Keychains/login.keychain-db -T /usr/bin/codesign -T /usr/bin/security
# Clean up temporary files
rm -f /tmp/codexbar-dev.{key,crt,p12}
echo ""
echo "✅ Certificate created successfully!"
echo ""
echo "⚠️ IMPORTANT: You need to trust this certificate for code signing:"
echo ""
echo "1. Open Keychain Access.app"
echo "2. Find '$CERT_NAME' in the 'login' keychain"
echo "3. Double-click it"
echo "4. Expand 'Trust' section"
echo "5. Set 'Code Signing' to 'Always Trust'"
echo "6. Close the window (enter your password when prompted)"
echo ""
echo "Then add this to your shell profile (~/.zshrc or ~/.bashrc):"
echo ""
echo " export APP_IDENTITY='$CERT_NAME'"
echo ""
echo "Restart your terminal and rebuild with ./Scripts/compile_and_run.sh"