pindo 4.6.9 → 4.7.1

data/lib/pindo/config/pindoconfig.rb

@@ -281,6 +281,14 @@ module Pindo
       return url
     end
 
+    def cert_key_password
+      cert_key_password = ''
+      if !@pindo_user_config_json.nil? && !@pindo_user_config_json["develop_accout_info"].nil?
+        cert_key_password =  @pindo_user_config_json["develop_accout_info"]["cert_key_password"]
+      end
+      return cert_key_password
+    end
+
     def deploy_cert_giturl
       url = ''
       if !@pindo_user_config_json.nil? && !@pindo_user_config_json["develop_accout_info"].nil?
@@ -288,6 +296,16 @@ module Pindo
       end
       return url
     end
+    
+    def deploy_cert_decrypt_password
+      pass = ''
+      if !@pindo_user_config_json.nil? && !@pindo_user_config_json["develop_accout_info"].nil?
+        pass =  @pindo_user_config_json["develop_accout_info"]["deploy_cert_decrypt_password"]
+      end
+      return pass
+    end
+
+
 
     def dev_cert_giturl
       url = ''
@@ -297,6 +315,15 @@ module Pindo
       return url
     end
 
+
+    def dev_cert_decrypt_password
+      pass = ''
+      if !@pindo_user_config_json.nil? && !@pindo_user_config_json["develop_accout_info"].nil?
+        pass =  @pindo_user_config_json["develop_accout_info"]["dev_cert_decrypt_password"]
+      end
+      return pass
+    end
+
     def demo_apple_id
       url = ''
       if !@pindo_user_config_json.nil? && !@pindo_user_config_json["develop_accout_info"].nil?

data/lib/pindo/module/appselect.rb

@@ -45,7 +45,6 @@ module Pindo
 
         def all_tool_bundleid
           setting_file = File.join(pindo_single_config.pindo_env_configdir,'bundleid_config.json')
-          puts setting_file
           setting_json = load_setting(setting_file:setting_file)
           sub_json = []
           if !setting_json.nil? && !setting_json['all_tool_bundleid'].nil?
@@ -86,10 +85,10 @@ module Pindo
             puts "具体参考文档: https://tower.im/teams/851356/repository_documents/714/"
             puts ""
             puts "App Type:"
-
+            puts 
             cli.choose do |menu|                                  # you can also use constants like :blue
-                menu.header = "选用哪个bundle id?"
-                menu.prompt = "请选择使用的bundle id,请输入选项(1/2/3...):"
+                menu.header = "可用的Bundle Id如下:"
+                menu.prompt = "请选择使用的Bundle Id,请输入选项(1/2/3...):"
                 menu.index_suffix = ") "
                 if !sub_setting_json.nil? 
                   sub_setting_json.each do |key, items|
@@ -115,9 +114,10 @@ module Pindo
                    
           cli = HighLine.new
           menu_choice="None"
+          puts 
           cli.choose do |menu|                                  # you can also use constants like :blue
-              menu.header = "选用哪个bundle id?"
-              menu.prompt = "请选择使用的bundle id,请输入选项(1/2/3...):"
+              menu.header = "可用的Bundle Id如下:"
+              menu.prompt = "请选择使用的Bundle Id,请输入选项(1/2/3...):"
               if !all_bundleid.nil? && all_bundleid.length > 0
                 for bunld_id in all_bundleid do
                   menu.choice(bunld_id) do |details|
@@ -140,10 +140,11 @@ module Pindo
           
           cli = HighLine.new
           menu_choice="None"
+          puts 
           cli.choose do |menu|                                  # you can also use constants like :blue
 
-              menu.header = "选用哪个bundle id?"
-              menu.prompt = "请选择使用的bundle id,请输入选项(1/2/3...):"
+              menu.header = "可用的Bundle Id如下:"
+              menu.prompt = "请选择使用的Bundle Id,请输入选项(1/2/3...):"
               if !all_bundleid.nil? && all_bundleid.length > 0
                 for bunld_id in all_bundleid do
                   menu.choice(bunld_id) do |details|

data/lib/pindo/module/build/swarkhelper.rb

@@ -0,0 +1,95 @@
+require 'highline/import'
+require 'xcodeproj'
+require 'json'
+require 'yaml'
+
+
+module Pindo
+    module SwarkHelper
+    
+                def check_swark_authorize(config_json:nil, buid_type:nil)
+                    if !config_json.nil? && config_json['project_info']['xcode_build_type'] && config_json["project_info"]["xcode_build_type"].include?("swark")
+
+                        app_config_dir = File.join(File::expand_path(pindo_single_config.pindo_dir), @deploy_identifier)
+                        swark_authorize_file = File.join(app_config_dir, "swark_authorize.json")
+                        if File.exist?(swark_authorize_file)
+                            swark_authorize_json=JSON.parse(File.read(swark_authorize_file))
+                            unless swark_authorize_json && swark_authorize_json['swark_authorize_status']
+                                show_swark_authorize_error(swark_authorize_json:swark_authorize_json , buid_type:buid_type)
+                            end
+                        end
+                    end
+                end
+
+                def show_swark_authorize_error(swark_authorize_json:nil, buid_type:nil)
+
+                    puts  "++++ +++ Need authorize !!! ++++"
+                    puts  "+++ Need authorize !!! ++++"
+                    puts  "+++ Need authorize !!! +++++"
+                    puts  " =========================="
+                    puts
+
+                    puts "方法一："
+                    command = "     1. swark authorize "
+                    command = command + swark_authorize_json["swark_authorize_teamid"] + "." + swark_authorize_json["swark_authorize_bundleid"]
+                    puts  command
+                    command = "     2. 修改swark_authorize.json 中的 swark_authorize_status = true 并且提交"
+                    puts
+
+                    puts "方法二："
+                    puts "      pindo deploy quswark"
+                    if buid_type.downcase.to_s.include?("appstore")
+                        raise Informative, "Need  swark authorize !!!"
+                    end
+                end
+
+
+            def add_swark_entitlement(entitlements_plist_path:nil, bundle_id_dict:nil)
+              if @config_json['project_info']['xcode_build_type'] && @config_json["project_info"]["xcode_build_type"].include?("swark")
+                if File.exist?(entitlements_plist_path)
+                  entitlements_plist_dict = Xcodeproj::Plist.read_from_path(entitlements_plist_path)
+
+                  key_value = @team_id_vaule 
+                  key_value = key_value + "." +  @bundle_id
+                  entitlements_plist_dict['keychain-access-groups'] = [key_value]
+
+                  Xcodeproj::Plist.write_to_path(entitlements_plist_dict, entitlements_plist_path)
+                end
+              end
+            end
+
+            def add_swark_authorize_json
+              if @build_type == "appstore" && @config_json['project_info']['xcode_build_type'] && @config_json["project_info"]["xcode_build_type"].include?("swark")
+                      
+                app_config_dir = clong_buildconfig_repo(repo_name: @deploy_repo_name)
+                swark_authorize_file = File.join(app_config_dir, "swark_authorize.json")
+                if File.exist?(swark_authorize_file)
+                    swark_authorize_json=JSON.parse(File.read(swark_authorize_file))
+                    if swark_authorize_json && swark_authorize_json['swark_authorize_status']
+                        puts "swark already authorize success !!! "
+                    else
+                        swark_authorize_json = swark_authorize_json || {}
+                        swark_authorize_json['swark_authorize_teamid'] = @team_id_vaule
+                        swark_authorize_json['swark_authorize_bundleid'] = @bundle_id
+                        swark_authorize_json['swark_authorize_status'] = false
+                        File.open(swark_authorize_file, "w") do |f|
+                          f.write(JSON.pretty_generate(swark_authorize_json))
+                        end
+                        git_addpush_repo(path:app_config_dir, message:"add swark authorize json")
+                    end
+                else
+                  swark_authorize_json = swark_authorize_json || {}
+                  swark_authorize_json['swark_authorize_teamid'] = @team_id_vaule
+                  swark_authorize_json['swark_authorize_bundleid'] = @bundle_id
+                  swark_authorize_json['swark_authorize_status'] = false
+                  File.open(swark_authorize_file, "w") do |f|
+                    f.write(JSON.pretty_generate(swark_authorize_json))
+                  end
+                  git_addpush_repo(path:app_config_dir, message:"add swark authorize json")
+                end
+                
+              end
+            end
+
+    end
+end

data/lib/pindo/module/cert/certhelper.rb

@@ -0,0 +1,187 @@
+
+require 'match'
+require 'openssl'
+require 'pindo/base/aeshelper'
+require 'pindo/module/cert/keychainhelper'
+require 'pindo/module/cert/provisioninghelper'
+
+
+module Pindo
+
+  module CertHelper
+   
+    def get_cert_info(cer_certificate)
+      # can receive a certificate path or the file data
+      begin
+        if File.exist?(cer_certificate)
+          cer_certificate = File.binread(cer_certificate)
+        end
+      rescue ArgumentError
+        # cert strings have null bytes; suppressing output
+      end
+
+      cert = OpenSSL::X509::Certificate.new(cer_certificate)
+
+      # openssl output:
+      # subject= /UID={User ID}/CN={Certificate Name}/OU={Certificate User}/O={Organisation}/C={Country}
+      cert_info = cert.subject.to_s.gsub(/\s*subject=\s*/, "").tr("/", "\n")
+      out_array = cert_info.split("\n")
+      openssl_keys_to_readable_keys = {
+           'UID' => 'User ID',
+           'CN' => 'Common Name',
+           'OU' => 'Organisation Unit',
+           'O' => 'Organisation',
+           'C' => 'Country',
+           'notBefore' => 'Start Datetime',
+           'notAfter' => 'End Datetime'
+       }
+
+      return out_array.map { |x| x.split(/=+/) if x.include?("=") }
+                      .compact
+                      .map { |k, v| [openssl_keys_to_readable_keys.fetch(k, k), v] }
+                      .push([openssl_keys_to_readable_keys.fetch("notBefore"), cert.not_before])
+                      .push([openssl_keys_to_readable_keys.fetch("notAfter"), cert.not_after])
+    rescue => ex
+      raise Informative, "get_cert_info: #{ex}"
+      return {}
+    end
+
+    def select_cert_or_key(paths:)
+      cert_id_path = ENV['MATCH_CERTIFICATE_ID'] ? paths.find { |path| path.include?(ENV['MATCH_CERTIFICATE_ID']) } : nil
+      cert_id_path || paths.last
+    end
+
+    def is_cert_valid?(cer_certificate_path)
+      cert = OpenSSL::X509::Certificate.new(File.binread(cer_certificate_path))
+      now = Time.now.utc
+      return (now <=> cert.not_after) == -1
+    end
+
+    def isMac?
+      (/darwin/ =~ RUBY_PLATFORM) != nil
+    end
+
+    def install_certs(cert_url:nil, certs_dir:nil, cert_type:nil)
+
+      
+      if !cert_type.downcase.include?("development")
+        cert_type = "distribution"
+      end
+
+      certs = Dir[File.join(certs_dir, "certs", cert_type.to_s, "*.cer")]
+      keys = Dir[File.join(certs_dir, "certs", cert_type.to_s, "*.p12")]      
+
+      if certs.count == 0 || keys.count == 0
+        raise Informative, "No certificates found in #{certs_dir}"
+      else
+          output_dir = Dir.mktmpdir
+          
+          decrypt_password = AESHelper.fetch_password(keychain_name:cert_url)
+          Funlog.instance.fancyinfo_start("正在安装证书...")
+
+          cert_path = AESHelper.decrypt_specific_file(src_file: certs.first, password:decrypt_password, output_dir: output_dir)
+          unless cert_path.nil? || File.exist?(cert_path)
+            AESHelper.delete_password(keychain_name:cert_url)
+            raise Informative, "证书解析失败，密码错误！"
+          end
+
+          key_path = AESHelper.decrypt_specific_file(src_file: keys.first, password:decrypt_password, output_dir: output_dir)
+          unless key_path.nil? || File.exist?(key_path)
+            AESHelper.delete_password(keychain_name:cert_url)
+            raise Informative, "证书解析失败，密码错误！"
+          end
+
+          unless is_cert_valid?(cert_path)
+             raise Informative, "证书已经过期，请重新生产新证书!"
+          end
+
+
+          if isMac?
+
+            keychain_name = "login.keychain"
+            if FastlaneCore::CertChecker.installed?(cert_path, in_keychain: nil)
+              Funlog.instance.fancyinfo_success("证书#{File.basename(cert_path)}已安装，无需重复安装!")
+            else
+
+              cert_password = Pindoconfig.instance.cert_key_password
+              keychain = 'login.keychain'
+              keychain_path = FastlaneCore::Helper.keychain_path(keychain)
+
+              KeychainHelper.import_file(cert_path, keychain_path, keychain_password: cert_password, certificate_password:'' )
+              KeychainHelper.import_file(key_path, keychain_path, keychain_password: cert_password, certificate_password: '')
+
+
+              Funlog.instance.fancyinfo_success("证书'#{File.basename(cert_path)}'安装完成！")
+            end
+          else
+            Funlog.instance.fancyinfo_error("非Mac电脑不支持安装证书!")
+          end
+
+      end
+
+      def install_provisionfiles(cert_url:nil, certs_dir:nil, bundle_id_map:nil, cert_type:nil)
+
+
+          Funlog.instance.fancyinfo_start("正在安装Provisioning Profiles文件...")
+
+
+          if cert_type.downcase.include?("development")
+            cert_type = "Development"
+          elsif cert_type.downcase.include?("adhoc")
+            cert_type = "Adhoc"
+          else
+            cert_type = "AppStore"
+          end
+
+            un_exist_files = []
+
+          provisioning_info_array = []
+
+
+
+            provisioning_info_array = []
+
+            bundle_id_map.each do |type, bundle_id_temp|
+                profile_filename = File.join(certs_dir, "profiles", cert_type.downcase.to_s,[cert_type.to_s, bundle_id_temp].join('_') + '.mobileprovision') 
+                  unless File.exist?(profile_filename)
+                    un_exist_files << profile_filename 
+                    next
+                  end
+                  # puts "正在安装 #{bundle_id_temp}..."
+                  decrypt_password = AESHelper.fetch_password(keychain_name:cert_url)
+                  output_dir = Dir.mktmpdir
+                  file_decrypt = AESHelper.decrypt_specific_file(src_file: profile_filename, password:decrypt_password, output_dir: output_dir)
+                  destpath = Provisioninghelper.install(file_decrypt)
+                  parsed_data = Provisioninghelper.parse(destpath)
+
+                  provisioning_info = {}
+                  provisioning_info['type'] = type
+                  provisioning_info['bundle_id'] = bundle_id_temp
+                  provisioning_info['profile_name'] = parsed_data['Name']
+                  provisioning_info['profile_path'] = destpath
+
+
+                  cert_info = get_cert_info(parsed_data["DeveloperCertificates"].first.string).to_h
+                  provisioning_info['signing_identity'] = cert_info["Common Name"]
+                  provisioning_info['team_id'] = parsed_data["TeamIdentifier"].first
+
+                  # puts JSON.pretty_generate(provisioning_info)
+                  provisioning_info_array << provisioning_info
+            end
+
+            Funlog.instance.fancyinfo_success("Provisioning Profiles文件安装完成！")
+
+            if un_exist_files.size > 0
+              Funlog.instance.fancyinfo_error("证书Provisioning Profiles文件不存在！")
+              raise Informative, "The following profiles do not exist: #{un_exist_files.join(', ')}"
+            end
+
+            return provisioning_info_array
+      end
+
+
+    end
+
+
+  end
+end

data/lib/pindo/module/cert/keychainhelper.rb

@@ -0,0 +1,150 @@
+
+require 'open3'
+require 'security'
+
+module Pindo
+
+  module KeychainHelper
+
+    def self.import_file(path, keychain_path, keychain_password: nil, certificate_password: "", skip_set_partition_list: false, output: false)
+      # puts path
+
+      # puts "Could not find file '#{path}'" unless File.exist?(path)
+
+      password_part = " -P #{certificate_password.shellescape}"
+
+      command = "security import #{path.shellescape} -k '#{keychain_path.shellescape}'"
+      command << password_part
+      command << " -T /usr/bin/codesign" # to not be asked for permission when running a tool like `gym` (before Sierra)
+      command << " -T /usr/bin/security"
+      command << " -T /usr/bin/productbuild" # to not be asked for permission when using an installer cert for macOS
+      command << " -T /usr/bin/productsign"  # to not be asked for permission when using an installer cert for macOS
+      command << " 1> /dev/null" unless output
+
+      # puts command
+      # sensitive_command = command.gsub(password_part, " -P ********")
+
+      # UI.command(sensitive_command) if output
+      Open3.popen3(command) do |stdin, stdout, stderr, thrd|
+        # UI.command_output(stdout.read.to_s) if output
+        # puts "123"
+        # Set partition list only if success since it can be a time consuming process if a lot of keys are installed
+        if thrd.value.success? && !skip_set_partition_list
+          # puts "安装成功!"
+          keychain_password ||= resolve_keychain_password(keychain_path)
+          set_partition_list(path, keychain_path, keychain_password: keychain_password, output: output)
+        else
+          # Output verbose if file is already installed since not an error otherwise we will show the whole error
+          err = stderr.read.to_s.strip
+
+          if err.include?("SecKeychainItemImport") && err.include?("The specified item already exists in the keychain")
+            # UI.verbose("'}' is already installed on this machine")
+            # puts "证书key已经存在，安装完成!"
+          else
+            # puts err
+            # raise Informative, err
+          end
+        end
+      end
+    end
+
+    def self.help_backticks(command, print: true)
+      # UI.command(command) if print
+      result = `#{command}`
+      # UI.command_output(result) if print
+      return result
+    end
+
+    def self.set_partition_list(path, keychain_path, keychain_password: nil, output: false)
+      # When security supports partition lists, also add the partition IDs
+      # See https://openradar.appspot.com/28524119
+      if help_backticks('security -h | grep set-key-partition-list', print: false).length > 0
+        password_part = " -k #{keychain_password.to_s.shellescape}"
+
+        command = "security set-key-partition-list"
+        command << " -S apple-tool:,apple:,codesign:"
+        command << " -s" # This is a needed in Catalina to prevent "security: SecKeychainItemCopyAccess: A missing value was detected."
+        command << password_part
+        command << " #{keychain_path.shellescape}"
+        command << " 1> /dev/null" # always disable stdout. This can be very verbose, and leak potentially sensitive info
+
+        # Showing loading indicator as this can take some time if a lot of keys installed
+        # Helper.show_loading_indicator("Setting key partition list... (this can take a minute if there are a lot of keys installed)")
+
+        # Strip keychain password from command output
+        # sensitive_command = command.gsub(password_part, " -k ********")
+        # puts command
+        # UI.command(sensitive_command) if output
+        Open3.popen3(command) do |stdin, stdout, stderr, thrd|
+          unless thrd.value.success?
+            err = stderr.read.to_s.strip
+
+            # Inform user when no/wrong password was used as its needed to prevent UI permission popup from Xcode when signing
+            if err.include?("SecKeychainItemSetAccessWithPassword")
+              keychain_name = File.basename(keychain_path, ".*")
+              # puts "password #{keychain_password}"
+              # puts "keychain #{keychain_name}"
+              # puts "security #{server_name(keychain_name)}"
+              Security::InternetPassword.delete(server: server_name(keychain_name))
+
+              # UI.important("")
+              # UI.important("Could not configure imported keychain item (certificate) to prevent UI permission popup when code signing\n" \
+              #          "Check if you supplied the correct `keychain_password` for keychain: `#{keychain_path}`\n" \
+              #          "#{err}")
+              # UI.important("")
+              # UI.important("Please look at the following docs to see how to set a keychain password:")
+              # UI.important(" - https://docs.fastlane.tools/actions/sync_code_signing")
+              # UI.important(" - https://docs.fastlane.tools/actions/get_certificates")
+              # puts "证书密码错误!"
+            else
+              puts err
+            end
+          end
+        end
+
+        # Hiding after Open3 finishes
+        # Helper.hide_loading_indicator
+
+      end
+    end
+
+    # https://github.com/fastlane/fastlane/issues/14196
+    # Keychain password is needed to set the partition list to
+    # prevent Xcode from prompting dialog for keychain password when signing
+    # 1. Uses keychain password from login keychain if found
+    # 2. Prompts user for keychain password and stores it in login keychain for user later
+    def self.resolve_keychain_password(keychain_path)
+      keychain_name = File.basename(keychain_path, ".*")
+      server = server_name(keychain_name)
+
+      # Attempt to find password in keychain for keychain
+      item = Security::InternetPassword.find(server: server)
+      if item
+        keychain_password = item.password
+        # UI.important("Using keychain password from keychain item #{server} in #{keychain_path}")
+      end
+
+      if keychain_password.nil?
+        # if UI.interactive?
+          # UI.important("Enter the password for #{keychain_path}")
+          # UI.important("This passphrase will be stored in your local keychain with the name #{server} and used in future runs")
+          # UI.important("This prompt can be avoided by specifying the 'keychain_password' option or 'MATCH_KEYCHAIN_PASSWORD' environment variable")
+          keychain_password = FastlaneCore::Helper.ask_password(message: "Password for #{keychain_name} keychain: ", confirm: true, confirmation_message: "Type password for #{keychain_name} keychain again: ")
+          Security::InternetPassword.add(server, "", keychain_password)
+        # else
+          # UI.important("Keychain password for #{keychain_path} was not specified and not found in your keychain. Specify the 'keychain_password' option to prevent the UI permission popup when code signing")
+          # keychain_password = ""
+        # end
+      end
+
+      return keychain_password
+    end
+
+    # server name used for accessing the macOS keychain
+    def self.server_name(keychain_name)
+      ["pindo", "keychain", keychain_name].join("_")
+    end
+
+    private_class_method :server_name
+  end
+end

data/lib/pindo/module/{pemcreate.rb → cert/pemhelper.rb}

@@ -1,6 +1,8 @@
 
 module Pindo
-  module Pemcreate
+
+  module PemHelper
+
     def create_certificate(bundle_id:nil, type:"prod", output_path:"")
 
       if bundle_id.empty? || output_path.empty?

data/lib/pindo/module/cert/provisioninghelper.rb

@@ -0,0 +1,137 @@
+require 'plist'
+require 'json'
+
+module Pindo
+  class Provisioninghelper
+    class << self
+      # @return (Hash) The hash with the data of the provisioning profile
+      # @example
+      #  {"AppIDName"=>"My App Name",
+      #   "ApplicationIdentifierPrefix"=>["5A997XSAAA"],
+      #   "CreationDate"=>#<DateTime: 2015-05-24T20:38:03+00:00 ((2457167j,74283s,0n),+0s,2299161j)>,
+      #   "DeveloperCertificates"=>[#<StringIO:0x007f944b9666f8>],
+      #   "Entitlements"=>
+      #    {"keychain-access-groups"=>["5A997XSAAA.*"],
+      #     "get-task-allow"=>false,
+      #     "application-identifier"=>"5A997XAAA.net.sunapps.192",
+      #     "com.apple.developer.team-identifier"=>"5A997XAAAA",
+      #     "aps-environment"=>"production",
+      #     "beta-reports-active"=>true},
+      #   "ExpirationDate"=>#<DateTime: 2015-11-25T22:45:50+00:00 ((2457352j,81950s,0n),+0s,2299161j)>,
+      #   "Name"=>"net.sunapps.192 AppStore",
+      #   "TeamIdentifier"=>["5A997XSAAA"],
+      #   "TeamName"=>"SunApps GmbH",
+      #   "TimeToLive"=>185,
+      #   "UUID"=>"1752e382-53bd-4910-a393-aaa7de0005ad",
+      #   "Version"=>1}
+      def parse(path, keychain_path = nil)
+        
+
+        plist = Plist.parse_xml(decode(path, keychain_path))
+        # puts JSON.pretty_generate(plist)
+        if (plist || []).count > 5
+          plist
+        else
+          raise Informative, "Error parsing provisioning profile at path '#{path}'"
+        end
+      end
+
+      # @return [String] The UUID of the given provisioning profile
+      def uuid(path, keychain_path = nil)
+        parse(path, keychain_path).fetch("UUID")
+      end
+
+      # @return [String] The Name of the given provisioning profile
+      def name(path, keychain_path = nil)
+        parse(path, keychain_path).fetch("Name")
+      end
+
+      def bundle_id(path, keychain_path = nil)
+        profile = parse(path, keychain_path)
+        app_id_prefix = profile["ApplicationIdentifierPrefix"].first
+        entitlements = profile["Entitlements"]
+        app_identifier = entitlements["application-identifier"] || entitlements["com.apple.application-identifier"]
+        bundle_id = app_identifier.gsub("#{app_id_prefix}.", "")
+        bundle_id
+      rescue
+        UI.error("Unable to extract the Bundle Id from the provided provisioning profile '#{path}'.")
+      end
+
+      def mac?(path, keychain_path = nil)
+        parse(path, keychain_path).fetch("Platform", []).include?('OSX')
+      end
+
+      def profile_filename(path, keychain_path = nil)
+        basename = uuid(path, keychain_path)
+        basename + profile_extension(path, keychain_path)
+      end
+
+      def profile_extension(path, keychain_path = nil)
+        if mac?(path, keychain_path)
+          ".provisionprofile"
+        else
+          ".mobileprovision"
+        end
+      end
+
+      def profiles_path
+        path = File.expand_path("~") + "/Library/MobileDevice/Provisioning Profiles/"
+        # If the directory doesn't exist, create it first
+        unless File.directory?(path)
+          FileUtils.mkdir_p(path)
+        end
+
+        return path
+      end
+
+      # Installs a provisioning profile for Xcode to use
+      def install(path, keychain_path = nil)
+
+        
+        destination = File.join(profiles_path, profile_filename(path, keychain_path))
+        # puts "Installing provisioning profile... #{destination}"
+        
+        if path != destination
+          # copy to Xcode provisioning profile directory
+          FileUtils.copy(path, destination)
+          unless File.exist?(destination)
+            raise Informative, "Failed installation of provisioning profile at location: '#{destination}'"
+          end
+        end
+        destination
+      end
+
+      private
+
+      def isMacOS?
+        (/darwin/ =~ RUBY_PLATFORM) != nil
+      end
+
+
+      def decode(path, keychain_path = nil)
+          require 'tmpdir'
+          Dir.mktmpdir('fastlane') do |dir|
+            err = "#{dir}/cms.err"
+            # we want to prevent the error output to mix up with the standard output because of
+            # /dev/null: https://github.com/fastlane/fastlane/issues/6387
+            if isMacOS?
+              if keychain_path.nil?
+                decoded = `security cms -D -i "#{path}" 2> #{err}`
+              else
+                decoded = `security cms -D -i "#{path}" -k "#{keychain_path.shellescape}" 2> #{err}`
+              end
+            else
+              # `security` only works on Mac, fallback to `openssl`
+              # via https://stackoverflow.com/a/14379814/252627
+              decoded = `openssl smime -inform der -verify -noverify -in #{path.shellescape} 2> #{err}`
+            end
+
+            if $?.exitstatus != 0
+              raise Informative, "Failure to decode #{path}"
+            end
+            decoded
+          end
+      end
+    end
+  end
+end