Apple Certificate Subscription Request

Question

I created a dummy application and I want to test it on my iPhone. I know that I need to be registered in the Apple and Im in developers program. I don’t have a MAC, so I had to shoot one of macincloud [dot] com.

At this point, I need to generate a signature certificate request, but I do not have access to the Keychain Access utility. The macincloud guys offer access to the terminal, but not to the Keychain utility. I know that I need to use the security tool from the command line, but that’s it.

After 6 hours on two different days, I did not find a tutorial / description on how to use the security tool to generate a signature certificate request.

Do you have any idea what I need to do on the command line to create a signature certificate request?

Answer 1

Run the following in the terminal:

openssl genrsa -out mykey.key 2048 

Save this private key file as you will use it later.

Run the following command, replacing the email address, CN name (certificate name), and C (country) as follows:

 openssl req -new -key mykey.key -out CertificateSigningRequest.certSigningRequest -subj "/emailAddress=[e-mail], CN=John Doe, C=US" 

Now in iOS Dev Portal just use the generated CertificateSigningRequest.certSigningRequest

Answer 2

If you do this for Apple Push / APNS, you'll also want to know about these two additional commands to generate the required .p12 file:

 openssl x509 -in XXXXX.cer -inform DER -out XXXXX.pem -outform PEM openssl pkcs12 -export -inkey XXXXX.key -in XXXXX.pem -out XXXXX.p12 

where XXXXX is your "mykey" value, and the xxxxx.cer file is what you download from the Apple portal.