test ssl

Author: makemesteaks

.github/actions/configure-keystore/action.yml

@@ -140,23 +140,29 @@ runs:
         ### DEBUGGING
         # Fingerprint of cert from provisioning profile
         TMP_PROFILE_PLIST="$RUNNER_TEMP/profile.plist"
-        security cms -D -i "$PROFILE_PATH" -o "$TMP_PROFILE_PLIST"
-
-        PROFILE_FP=$(plutil -extract DeveloperCertificates.0 raw -o - "$TMP_PROFILE_PLIST" \
-          | base64 -D \
-          | openssl x509 -inform DER -noout -fingerprint -sha1 | cut -d'=' -f2)
-
-        # Fingerprint of cert from .p12
-        P12_FP=$(openssl pkcs12 -in "$CERT_PATH" -nokeys -passin pass:"$CERT_PW" \
-          | openssl x509 -noout -fingerprint -sha1 | cut -d'=' -f2)
-
-        echo "📄 Provisioning profile fingerprint: $PROFILE_FP"
-        echo "🔑 Imported .p12 fingerprint:        $P12_FP"
-
-        if [[ "$PROFILE_FP" == "$P12_FP" ]]; then
-          echo "✅ Certificates match"
+        if security cms -D -i "$PROFILE_PATH" -o "$TMP_PROFILE_PLIST" 2>/dev/null; then
+          PROFILE_FP=$(plutil -extract DeveloperCertificates.0 raw -o - "$TMP_PROFILE_PLIST" \
+            | base64 -D \
+            | openssl x509 -inform DER -noout -fingerprint -sha1 2>/dev/null | cut -d'=' -f2)
+
+          # Fingerprint of cert from .p12 (use -legacy flag for OpenSSL 3.0 compatibility)
+          P12_FP=$(openssl pkcs12 -legacy -in "$CERT_PATH" -nokeys -passin pass:"$CERT_PW" 2>/dev/null \
+            | openssl x509 -noout -fingerprint -sha1 2>/dev/null | cut -d'=' -f2)
+
+          if [[ -n "$PROFILE_FP" && -n "$P12_FP" ]]; then
+            echo "📄 Provisioning profile fingerprint: $PROFILE_FP"
+            echo "🔑 Imported .p12 fingerprint:        $P12_FP"
+
+            if [[ "$PROFILE_FP" == "$P12_FP" ]]; then
+              echo "✅ Certificates match"
+            else
+              echo "❌ Certificates do not match"
+            fi
+          else
+            echo "⚠️ Could not extract certificate fingerprints for comparison"
+          fi
         else
-          echo "❌ Certificates do not match"
+          echo "⚠️ Could not decode provisioning profile for certificate verification"
         fi
 
 

.github/actions/setup-e2e-env/action.yml

@@ -328,4 +328,4 @@ runs:
     - name: Check simutils
       if: ${{ inputs.platform == 'ios' }}
       run: xcrun simctl list devices
-      shell: bash
+      shell: bash