Making Apple Developer certificates on Linux

Making Apple Developer certificates on Linux

1. Create a new directory;
	mkdir Apple\ Enterprise
	cd Apple\ Enterprise

2. Generate a certificate signing request
	openssl req -nodes -newkey rsa:2048 -keyout ios_enterprise.key -out CertificateSigningRequest.certSigningRequest
		
Note: If you want to password-protect the .pem key, ditch the -nodes switch on step 2:
	openssl req -newkey rsa:2048 -keyout ios_enterprise.key -out CertificateSigningRequest.certSigningRequest

3. With the information like so (ensure you give it a password):
	Country Name (2 letter code) [AU]:GB
	State or Province Name (full name) [Some-State]:London
	Locality Name (eg, city) []:
	Organization Name (eg, company) [Internet Widgits Pty Ltd]:Total Onion Ltd
	Organizational Unit Name (eg, section) []:
	Common Name (e.g. server FQDN or YOUR name) []:Total Onion Enterprise
	Email Address []:

4. Login to developer.apple.com, go to:
	"Member Center" -> "Manage your certificates, App IDs, devices, and provisioning profiles." -> "Certificates" -> "Add"

5. Go through the wizard, selecting the certificate type, and uploading the .csr.

6. Download the .cer file, saving it to the folder created in step 1

7. Convert the .cer file to a .pem file:
	openssl x509 -in ios_enterprise.cer -inform DER -out ios_enterprise.pem -outform PEM

8. Convert the .pem to a .p12:
	openssl pkcs12 -export -inkey ios_enterprise.key -in ios_enterprise.pem -out ios_enterprise.p12

9. You can now create a "Provisioning Profile" in the "Member Center" on developer.apple.com using the certificate you made in step 4