Using a non-default keychain in Xcode

Question

How can I use a non-default keychain in Xcode iPhone project.

I have already tried '--keychain mycerts.keychain' in 'Other Code Signing Flags' in 'Code signing' build settings.

score 10 · Accepted Answer · answered Nov 19 '09 at 16:03

10

After a long time of research, I concluded that it cannot be done.

answered Nov 19 '09 at 16:03

notnoop

58,763
21
123
144

1

I filed rdar://9273506 for this issue. – amrox Apr 12 '11 at 20:29
I agree, I spent days on it… the only way is to set the temp keychain as default for a while :/ – kubbing Mar 26 '14 at 15:50

Graham Miln · Answer 2 · 2011-12-11T01:08:45.333

8

The codesign tool requires an absolute path to the keychain.

Use an additional "Run Script Build Phase" to call the codesign tool with the custom keychain. The embedded script should look like:

codesign -s 'your-identity' --keychain "${SRCROOT}/path/to/keychain" "${TARGET_BUILD_DIR}/${WRAPPER_NAME}"

enter image description here

edited Dec 11 '11 at 01:08

answered Jul 11 '11 at 05:13

Graham Miln

2,724
3
33
33

A full path is only needed if the keychain is not in the default ~/Library/Keychains path – lkraider Nov 07 '16 at 21:07

score 6 · Answer 3 · answered Aug 16 '10 at 15:37

6

in the Build setting under Code Signing -> Other code signing Flags, create a flag "--keychain keychain-name.keychain"

answered Aug 16 '10 at 15:37

Ash

61
1
1

score 4 · Answer 4 · answered Sep 07 '10 at 15:16

4

While inconvenient, you can temporarily change your "default Keychain" to whichever keychain has your certificate/keys. XCode will then search that keychain during code-signing. You can do this via Keychain Access.app or the security(1) command-line utility. You're responsible for unlocking said keychain yourself, however.

answered Sep 07 '10 at 15:16

gorbster

704
5
6

1

Also, you can create a temporary keychain on the fly from command line, import your certificates/keys, set it as the default during compilation and code signing and then remove it, restoring your previous default keychain. – Shade Apr 05 '11 at 07:20

score 0 · Answer 5 · answered Jun 05 '19 at 16:03

This problem can be solved by setting the keychain search list to include your keychain:

security list-keychains -s login.keychain mycerts.keychain etc.keychain

To view the active keychain search list, use the same command without the -s param:

security list-keychains

A great link for reference is here: https://ss64.com/osx/security-keychain.html

Using a non-default keychain in Xcode

5 Answers5