iOS Question Can't compile B4i-Bridge due to "MAC verification failed during PKCS12 import"

It is not 100% clear what causes this issue. I think that it is related to the PC Java version.

I'm sending you a temporary id for the hosted builder.
Try it with Java 14 or 19.

Thank you, I entered the id and tried using both Java 14 and 19 and neither work - I get the exact same error message.

I can think of three more things to try, to solve this:

1. You could compress your PC Java folder and upload to something like Sprend (https://sprend.com) and then I could try with it - just to exclude the PC java version.
   
   
2. We could do the same for the java you use on your mac - just to exclude that too.
   
   
3. I do it all over once again and screenshot my way through the Apple process, update this thread and hopefully you can see where I made a mistake.

1 and 2 should be fairly quick and simple to test, to once and for all kill the possiblity of bad java versions being the problem. I mean, if it's acceptable to you and you have the outgoing bandwidth to handle that upload (I don't know how broadband works where you live). If I try with your java folders and it works, I'm willing to do the work to diff our installations and see if I can figure out what is different.

But I'm open to whatever you suggest. Desperation is setting in.

Update. I searched online for the error message and found this post on Stack Overflow:

It discusses this exact error message, and the solution they found. I checked my mac and I do have a security command in the terminal, just as the post mentions.

If this command is used by the builder, I could perhaps try to mimic the builder and run some command in the terminal on the mac and see if that works? If we're lucky (so to speak), I would get the error message in the terminal, and then we might have more information on where the issue is. (I would need information on what command to run.)

ADDITION. I should also mention that my password for the private sign key does not contain any characters that would need escaping.

Sandman said:

You could compress your PC Java folder and upload to something like Sprend (https://sprend.com) and then I could try with it - just to exclude the PC java version.

Click to expand...

I use the same Java packages as you are using.

Check the two screenshots here: https://www.b4x.com/android/forum/t...icate-and-provisioning-profile.45880/#content
Are you sure that you creates the correct type of certificate + provision profile?

Another update. I have gone through the whole process in the Apple website again by following this guide:



I documented everything with screenshots. Hopefully somebody can tell me if I've made an error somewhere.

1. I created a brand new private sign key in an empty folder (that I specified in Configure Paths in B4i)


2. This is my keys folder so far


3. I have no new devices to add so that step is skipped

4. Logged in to Apple website

5. I created a new App ID


There's a long list of options here, but I chose App IDs, because that best matched the instructions.



I chose App.



I gave it a description and a wildcard bundle id. The instructions say to just enter * here, but that isn't accepted by Apple, so I prefix it with b4i. I selected no capabilities/app services.



I confirmed the App ID.



6. I created a certificate



The instructions say to create a production certificate, but that phrase isn't used by Apple anymore. (It is used when talking about certificates for push notifications and watchkit services - clearly not what I'm looking for.) But the guide says to pick a certificate of type "App Store and Ad Hoc". I picked "iOS Distribution (App Store Connect and Ad Hoc)" because it matched the guide best.




I uploaded the certSigningRequest.csr that I created just a few minutes before.



I downloaded the generated certificate as default.cer into the keys directory.



This is what the keys folder looks like now.


7. I created a privisioning profile


The guide said to choose "Distribution -> Ad Hoc", and this exact option is available so I picked that.



I picked the App Id created above.



I picked the certificate created above.




I selected all devices.



I named and generated the provisioning file.



I downloaded the provisioning file into the keys folder.




This is what the keys folder looks like now.



After this I followed this guide to build B4i-Bridge.



8. Create a new B4i project for B4i-Bridge


I set the package name identical to the guide, which also matches the b4i.* app id I used above.



Not part of the guide, but I verified that I'm using the hosted builder, using the temporary username I have.


I chose to Build B4i-Bridge App, and failed with the same error message:


I also tested with my local builder, and got the same error message.

Erel said:

Check the two screenshots here: https://www.b4x.com/android/forum/t...icate-and-provisioning-profile.45880/#content
Are you sure that you creates the correct type of certificate + provision profile?

Click to expand...

As far as I can tell, that's exactly what I used above.

I've just made some tests.

I got this error with OpenJdk 19. There is an issue here that needs further investigation.

However it did work with OpenJDK 14.0.1: https://www.b4x.com/b4j/files/java/jdk-14.0.1.zip
Make sure to update Tools - Configure Paths.

Please confirm that it worked and I'll update the instructions.

Erel said:

Please confirm that it worked and I'll update the instructions.

Click to expand...

It did not work.

I have now tested with all of these:


The selected one, the one ending in _fresh, is downloaded just now from the link you posted.

However, I did find something strange that perhaps might be relevant. I started wondering if perhaps the Paths setting had a bug where it didn't use the path if it was pasted instead of Browsed. (I tend to paste the path from Explorer, it's quicker.) To test this I entered a completely fake path:



Then I tried building B4i-Bridge again, and to my surprise the IDE didn't complain. Instead I got the same error again.



After that I created a new folder, named empty_folder:



In it I created a new file, named javac.exe, zero bytes large. Just something so the IDE would let be Browse to it.



In Paths I Browsed to it:




Then I tried to build B4i-Bridge again. No complaints about the java, but the same error message again.

So I'm wondering what java the IDE picks up, and if/how it even uses it..?

Sorry, I wasn't clear before.

The problematic step is the creation of the new signing key. You need to delete all files in the keys folder. Set the javac to Java 14 and start from scratch. It should work.
I recommend revoking existing certificates so you wont choose the wrong one by mistake.

Understood. I'll check and report back in five minutes.

I can confirm that it worked as described in #10.

Thank you for helping me.

I have a lot of built-up frustration from struggling with this for three days. Once I calm down and get some code out the door, I believe I will post a couple of Wishes related to this in the near future.