CLI command
weles developer-certificate
Issue one developer certificate at the certificate authority --provider names (apple is the one Weles implements) for a private key generated on this machine under the distinguished name --subject gives, which is required; with --run, read the issued certificate back and, with --private-key and --store-host together, store the signing identity in the named host's vault instead of leaving it in files.
Purpose#
Issue one developer certificate at the certificate authority --provider names (apple is the one Weles implements) for a private key generated on this machine under the distinguished name --subject gives, which is required; with --run, read the issued certificate back and, with --private-key and --store-host together, store the signing identity in the named host's vault instead of leaving it in files.
Invocation#
weles developer-certificate --provider apple --subject <dn> [--account-role <role>] --confirm "AUTHORIZE ONE APPLE DEVELOPER ID" --execution-host <host> --private-key-out <abs> --expires-in-minutes <n> [--execution-agent <agent>] [--json]
weles developer-certificate --run <run-id> --certificate-out <abs> [--private-key <abs> --store-host <host>] [--json]Options#
| Option | Effect |
|---|---|
--provider | The provider a login, developer certificate, app password or account-security read goes through: apple for login and developer-certificate, google for app-password and account-security; none is assumed. |
--subject | Stable operator/device scope for durable onboarding progress. |
--account-role | weles --help names this option in the usage line and gives it no description. |
--confirm | weles --help names this option in the usage line and gives it no description. |
--execution-host | weles --help names this option in the usage line and gives it no description. |
--private-key-out | weles --help names this option in the usage line and gives it no description. |
--expires-in-minutes | weles --help names this option in the usage line and gives it no description. |
--execution-agent | weles --help names this option in the usage line and gives it no description. |
--json | Print the answer as one JSON document instead of key: value lines. release surface always prints its JSON document: it is the file a release carries. |
--run | weles --help names this option in the usage line and gives it no description. |
--certificate-out | weles --help names this option in the usage line and gives it no description. |
--private-key | weles --help names this option in the usage line and gives it no description. |
--store-host | weles --help names this option in the usage line and gives it no description. |
Help#
`weles developer-certificate --help` prints these usage lines and never runs the command.