[match] Download Apple's new Developer ID intermediate certificates#29890
Merged
AliSoftware merged 2 commits intoFeb 6, 2026
Merged
Conversation
iBotPeaches
approved these changes
Feb 6, 2026
iBotPeaches
left a comment
iBotPeaches
left a comment
Member
There was a problem hiding this comment.
Confirmed certs and hashes.
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Hey @iangmaia 👋
Thank you for your contribution to fastlane and congrats on getting this pull request merged 🎉
The code change now lives in the master branch, however it wasn't released to RubyGems yet.
We usually ship about once a month, and your PR will be included in the next one.
Please let us know if this change requires an immediate release by adding a comment here 👍
We'll notify you once we shipped a new release with your changes 🚀"
5 tasks
Contributor
There was a problem hiding this comment.
Congratulations! 🎉 This was released as part of fastlane 2.232.0 🚀
github-actions
Bot
added
status: released
and removed
status: included-in-next-release
labels
4 tasks
6 tasks
mokagio
added a commit
to Automattic/simplenote-macos
that referenced
this pull request
Feb 9, 2026
New Developer ID Application certificate (ZZAF7GPC73) requires Fastlane >= 2.232.0 for the G2 intermediate CA chain. See fastlane/fastlane#29890 --- Generate with the help of Claude Code, https://code.claude.com Co-Authored-By: Claude Opus 4.5 <[email protected]>
mokagio
added a commit
to Automattic/simplenote-electron
that referenced
this pull request
Feb 9, 2026
New Developer ID Application certificate (ZZAF7GPC73) requires Fastlane >= 2.232.0 for the G2 intermediate CA chain. See fastlane/fastlane#29890 --- Generate with the help of Claude Code, https://code.claude.com Co-Authored-By: Claude Opus 4.5 <[email protected]>
This was referenced Feb 9, 2026
mokagio
added a commit
to Automattic/download
that referenced
this pull request
Feb 9, 2026
New Developer ID Application certificate (ZZAF7GPC73) requires Fastlane >= 2.232.0 for the G2 intermediate CA chain. See fastlane/fastlane#29890 --- Generate with the help of Claude Code, https://code.claude.com Co-Authored-By: Claude Opus 4.5 <[email protected]>
1 task
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Checklist
bundle exec rspecfrom the root directory to see all new and existing tests passbundle exec rubocop -ato ensure the code style is validci/circlecibuilds in the "All checks have passed" section of my PR (connect CircleCI to GitHub if not)Motivation and Context
When using match to sign a Mac app with a Developer ID certificate (e.g. for notarized dmg distribution), the Developer ID Certification Authority intermediate certificates must be present in the keychain to validate the certificate chain, just like WWDR intermediates are needed for App Store distribution certificates.
After moving to a recently generated certificate, intermediates were missing on CI, causing
security find-identityto return 0 valid identities even though the Developer ID certificate itself is installed.Description
Added Apple's two Developer ID Certification Authority intermediate certificates (G1 and G2) from https://www.apple.com/certificateauthority/ to the existing
WWDRCA_CERTIFICATESlist incert_checker.rb. This will make sure they are downloaded and installed alongside the WWDR intermediates when missing from the keychain.Based on #21364 by @iOSGeekster, rebased onto current
master.Closes #21364