Warning: unable to build chain to self-signed root for signer. Certificate is not trusted

Hi.

I manage an automatic server that compiles iOS apps. It worked perfectly until some days ago. It successfully compiled and generated around 500 or 600 ipas maybe, probably with different certificates, not sure. This is the server:
Code Block
OS Catalina 10.15.6
Mac Mini end of 2012
Xcode 12.2

This server receives Xcode projects, and certificates. First It installs certificates, then, generates the xarchive, and finally the IPA. Now there is a problem with certificates in every project I try to compile. This is the problem that is printed into log when I try to compile a project:
Code Block
Warning: unable to build chain to self-signed root for signer "iPhone Distribution: Xxxx Xxxxx (XXXXXX)"

If I open keychain, the certificate has this error red line in the top of the keychain:
Code Block
"iPhone Distribution: Xxxx Xxxxx (XXXXXX)" certificate is not trusted

I read all the related questions openned here with similar titles and none of them gives a solution for this case, remember that I didn't change anything in the server, it worked perfectly until some days ago and stopped worked suddenly. Maybe something has been corrupted?

Now, I will explain how this automatic compiler server works...

This is how I install certificates in the server before compiling the IPA. I execute a procesCerts.sh file which contains these lines:
Code Block
security unlock-keychain -p password ~/Library/Keychains/login.keychain
security import cert.p12 -k ~/Library/Keychains/login.keychain -P '' -A
security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k password ~/Library/Keychains/login.keychain >/dev/null 2>&1
ditto prov.mobileprovision ~/Library/MobileDevice/Provisioning\\ Profiles/

Then, I extract the signIdentity and the provisioningProfileUUID and after that, I generate the Xarchive with this line:
Code Block
xcodebuild -workspace App.xcworkspace -scheme Release -xcconfig Caponate/Custom.xcconfig PROVISIONING_PROFILE_SPECIFIER=xxxxxxx CODE_SIGN_IDENTITY=iPhone Distribution: Xxxx xxxxx CODE_SIGN_ENTITLEMENTS=/Users/user/jobs/83554/project/App/App.entitlements archive

And I generate the Ipa with this line:
Code Block
xcodebuild -exportArchive -archivePath sourceFile -exportPath targetFile -exportOptionsPlist /project/exportOptions.plist

Which is the problem? why certificates are not working anymore?

Thanks
Accepted Answer

why certificates are not working anymore?

Have you seen this Apple Worldwide Developer Relations Intermediate Certificate?

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"
Warning: unable to build chain to self-signed root for signer. Certificate is not trusted
 
 
Q