Certificate fingerprint is invalid? - certificate

I have generated my SHA1 code from my keystore but when I try to create an OAuth client 2.0, Google game console is giving me the error: "Certificate fingerprint is invalid".
Anyone knows why this happens?
How do I fix this?

I've contacted Google Play Developer Support about this issue (I've got a same problem).
Here is their answer : Please ensure the key is set to 2048 bit and is valid for at least 25 years.
I've tried it, but sadly my debug.keystore is still not getting accepted, maybe there will be some luck on your side.
$ keytool -genkey -v -keystore debug.keystore -storepass android -alias androiddebugkey -keypass android -keyalg RSA -keysize 2048 -validity 10000

I'm Dan, and I'm a software engineer on Play Games Services.
First, let me thank you for using our service, and apologize for the inconvenience caused. We have discovered a bug in our product that prevents users from linking fingerprints of their signing keys to newly created applications. The issue has been fixed and you should be able to link your application as expected.
If you encounter a bug in the feature, please let us know using the bug report tool (Help -> Need more help? -> Send feedback & report bugs).

I ran into this issue recently.
After I added an Android credential, the Google Play Console pops up a modal with the app name and an SHA-1 fingerprint. For some reason this fingerprint is incorrect.
In the Google Play Console You need to go to Release -> App Integrity,and copy the SHA-1 certificate fingerprint under App signing key certificate.

Ok that is weird. I encountered the same problem. while I have done this numerous time in the past, never had this issue before. I tried with multiple options but still no go. So figured out a workaround. Thought of sharing it to save time:
Once you create a Game Service, You will get the API console project under -> Game Details > Api Console Project
Click your API project, and it should take you to your API console project.
Create Auth SHA1 keys by choosing credentials > create credentials.
Now, Google site do suggest not to do it
Warning: Do not create new client IDs for your game from the Google API Console. If you do so, Google Play games services will not associate your game settings with the client ID, and this could cause errors during gameplay.
https://developers.google.com/games/services/console/enabling
But as far I Have only one Sha1 for this package, I think we are good. I can confirm that my project is working fine and I am able to successfully linked the app. Although, I have still not tested all my games features.
Also, I am still figuring out the reason on why it works from Google API console with the same Sha1 key and package and will not work if I use the same combination from Play console -> linked apps. I will update on this thread as I learn more. Perhaps Google is changing the OAuth screen consent screen, may be this is a new change now.

Related

how do I fix this key signing error in google play console?

So I just built the new version of my app but when I upload the apk to the google play console I get this error
Image of Error
I have no idea what's causing it. I checked and within unity the key is the same one I used the first time I built the app. ID is same from the keystore. I have no idea what's causing this or how to fix it so i'd appreciate any help!
You must the same signing key used to sign the app bundle when it was initially uploaded to the Google Play Store. This signing key is typically stored in a Keystore file, which you can use to sign the app bundle using the jarsigner tool.
You should use choose the same Project Key Alias of the Keystore.

Google Game Service Leaderboard can't show after submit score on Cocos2d-x Android?

I implement Google Game Service for Android (Cocos2d-x) with Cocos Helper of Sonar System Team.
Everything is OK:
Sign-In Google Game Service.
Show Achievement and increateAchievement very good.
The first time, I sign-in to Google Game Service ==> show leaderboard is OK.
However, I submit score to leaderboard then re-show leaderboard again it always close automatic and I get respondCode=RESULT_RECONNECT_REQUIRED.
Can you give me some suggestion to fix it ?
I've found answer:
Reason of issue is OAuth2 Client ID form Game Services Console ==> ==> Link apps didn't equal with OAuth2 Client ID, be created at API Manager:
So to fix that, you must create new Link Apps in Google Service Console.
==> That will fix on server and leaderboard will working OK .
In my case, I had two OAuth2 clients configured: one associated with the development certificate SHA fingerprint (keytool -exportcert -keystore ~/.android/debug.keystore -list -v) and one associated with the release certificate SHA fingerprint (keytool -exportcert -keystore path/to/your/release.keystore -list -v).
While debugging, the apk was signed with the development certificate, and after submitting a score to the leaderboard, the next time I opened the leader board, it closed automatically without showing the leaderboard or an error message. After this, the only way to be able to use the leader board again, was uninstalling the tested app and the Google Play Games app from the device.
To be able to separate the development and release Google Play Services OAuth2 configuration, you can have two google-services.json files: one on the src/debug folder and another on the src/release folder.
When I used an apk was signed with the release certificate, the leaderboard worked properly before and after submitting scores to the leaderboard.
My conclusion: to be able to test the leaderboard you must use an apk signed with a release certificate.

Ionic Phonegap Facebook Native | Key Hash Error

I'm building and app with Ionic.
I've followed this article about integrating my application with the native facebook sdk for a more pleasant experience of my users.
Unfortunately since today the facebook login gets stuck and keep responding with "Invalid key hash. The key hash XXX does not match any stored key hashes..."
I'm still running my app in development, I've never built it.
I've read all the possible articles about setting the key hash.
Tried:
keytool -exportcert -alias androiddebugkey -keystore debug.keystore | openssl sha1 -binary | openssl base64
which should be for development, but I noticed that the key in response from this command isn't the same form the error I reported above.
I think my application is stuck with a wrong hash key that gets from I don't know where... Because it should get the key from the debug.keystore in ./android .
Also I tried to create an entirely new application copying only the www folder, repeated the steps of configuration from the article above but nothing changed. Same error, same wrong key hash reported from the error.
Don't really know what the issue could be.
My facebook app is LIVE, I'm on mac.
I run my application on my android phone through ionic run android

/usr/bin/codesign failed with exit code 1

I am attempting to deploy my first development iPhone app, and am running into some problems. I have successfully went though the online Provisioning Assistant, but now I am stuck. No matter what I do, I always get the following error.
/usr/bin/codesign failed with exit code 1
Anyone have any ideas why this is happening?
Update:
The Technical Note in my original answer is now deprecated. Apple posted a collection of code signing problems (and some solutions) in a new document: Technical Note TN2407 Code Signing Troubleshooting Index
Check the CODE_SIGN_IDENTITY property in your build settings. Is your provisioning profile selected there?
You also need to enter a valid bundle identifier in your apps .plist.
The identifier has to match the one you provided when generating the profile.
Apple has a technote about that here.
I just came across this error, and here's what I found out in case this helps anyone: I discovered that you can right click the error message in Xcode and choose expand to get more details, including a description of the problem.
In my case, I had two copies of my developer certificate with the same name in different keychain files, and Xcode couldn't figure out which one to use.
It might be strange answer for codesign issue in Xcode 9.0. I was receiving this error too and did not know what to be done, because everything was correct.
I went to the keychain, I had the login option "unlocked". I locked it and compiled my build again. Xcode itself asked me to open access keychain. I gave access and it worked.
Steps were:
Go to keychain
Lock it
Archive the code, build the project again
I had the exact same error, and tried everything under the sun, including what was elsewhere on this page, with no success. What the problem was for me was that in Keychain Access, the actual Apple WWDR certificate was marked as "Always Trust". It needed to be "System Defaults". That goes for your Development and Distribution certificates, too. If any of them are incorrectly set to "Always Trust", that can apparently cause this problem.
So, in Keychain Access, click on the Apple Worldwide Developer Relations Certificate Authority certificate, select Get Info. Then, expand the Trust settings, and for the combo box for "When using this certificate:", choose "System Defaults".
Others have commented that you may have to do this in System and login keychains for these errors.
There could be a lot of reason when you get this kind of error:
Check whether you have selected a provisioning profile which includes the valid Code Signing Identity and a valid Bundle Identifier in Settings. (Goto Build Settings->Signing->Provisioning Profile).
Open Keychain Access and click on lock icon at top left, so it will lock the login keychain and then again click to unlock.
Goto File->Project Settings->Derived Data and delete your project build folder. After that clean and build your app.
I had the same problem the distribution build. It just happened all of sudden. In fact I did not have this problem a few days ago and I had my Ad-Hoc version compile right. This issue came up because my certificate just expired today. So I went create a new provisional following Apple's guidance: (http://developer.apple.com/ios/manage/distribution/index.action).
After spending hours on the net and made sure I had not fallen for what could go wrong. Here is what save me as suggested by Tobias and Dan Ray:
"...discovered that you can right click the error message in Xcode to view details".
"...the issue was an expired certificate on my System keychain. Keychain Access doesn't, by default, show expired certs".
The detailed information told me about ambiguous matching two certificates. One of them happened to be an expired certificate in the System key chain. So I deleted the expired one then it worked! I also had a concern about what to enter in the "common name" when create the distribution certificate using the keychain utility: my name or my company name. In my case, I entered my name. I am guessing it is the same as the title that addressed by the developer's auto responder email.
Great help. Thanks.
If the error immediately preceding the codesign error says something like 'resource fork, Finder information, or similar detritus not allowed'
Then navigate to the .app file in Terminal and type:
xattr -cr < path_to_app_bundle >
ref: https://developer.apple.com/library/content/qa/qa1940/_index.html
What worked for me was adding --deep to Other Code Signing Flags in Build Settings.
More information here: Codesign of Dropbox API fails in Xcode 4.6.3: "code object is not signed at all"
Unfortunate that this ambiguous error condition has 400 different solutions, but I digress.
I had the same problem. In the end it turned out that my private key did not allow codesign to access it. One can see this in the info dialog in keychain application.
I have to agree with Tobias. The error is too generic. When the same thing happened to me I dug into the error message and realized I'd screwed up something in the build properties, but not the code signing. So yeah, I'd dig in to the details.
In my case error was due to the fact that I had two keys on the keychain with the same name. I deleted the old one and that solved the issue.
Going to the detail message show the real problem to me.
after hours of googling and trying out different things, this is what fixed it for me:
Make sure there are no certificates in the System > Certificates tab on Keychain Access. Remove all duplicate certificates from there.
Install the WWDR intermediate certificate under certificates from the provisioning portal, in addition to the developers certificates and make sure you see it in the Login > Certificates tab on Keychain Access.
hope this helps some of you!
Same issue with ambiguous (matches "iPhone Developer: [me] " and /// tweetdeck's library privatedata file. Fixed it by moving file to the trash and re-logging into Tweetdeck, setting up passwords again. What a pain.
I had the same problem but also listed in the error log was this: CSSMERR_TP_CERT_NOT_VALID_YET
Looking at the certificate in KeyChain showed a similar message. The problem was due to my Mac's system clock being set incorrectly. As soon as I set the correct region/time, the certificate was marked as valid and I could build and run my app on the iPhone
I was also getting this error ("/usr/bin/codesign failed with exit code 1"), and when I looked in Keychain Access my developer certificates were marked as "This certificate was signed by an unknown authority". I had recently upgraded to Mac OS 10.8 and have had a couple of other XCode (4.5.2) issues since then. It turns out I did not have the WWDR intermediate certificate installed. I downloaded that from the iOS Provisioning Portal, installed that in Keychain Access, and my project builds again!
When I got this error I wasn't even trying to sign the app. I was writing a test app and didn't care about signing.
In order to get rid of this message I had to select "Don't Code Sign" from Build Settings under Code Signing.
Sometimes your build folder simply needs cleaning - it certainly worked for me. Thanks to loafer-project for the solution.
One possible cause is that you doesn't have permission to write on the build directory.
Solution: Delete all build directory on your project folder and rebuild your application.
I just came across this error and it was because I was trying to write the build file to a network drive that was not working. Tried again from my desktop and it worked just fine. (You may have to "Clean" the build after you move it. Just choose "Clean all Targets" from the "Build" drop-down menu).
Tobias is correct though, dig into the details on the code by right-clicking it to see what your specific problem is.
One thing that you'll want to watch out for (it's a stupid mistake on my part, but it happens), is that the email address attached to the CSR needs to be the same as the email connected to your Apple Dev account. Once I used a new CSR and rebuilt all the certs and provisioning profiles, all was well in applesville.
Another reason,
Check your Developer account is connected with xCode
Kinda old question, but still happens it seems. Another solution:
Occurred for me after reverting a branch in git.
Tried cleaning, cleaning builds, deleting derived and restarting Xcode, but no luck.
Try rebooting the comp.
I had the same unknown error from codesigning that you mentioned. Similar to the answer provided (but a little different), I just locked my keychain access and unlocked it, and I was able to build and run to my device again. If anyone has the same issue, perhaps try that first before going through the trouble of modifying the keychain password.
Throwing my comments into the ring, I just came across this after attempting to refresh my development environment after clicking DENY accidentally on one of the application requests, after searching around I found a number of things that didn't seem to work. This is the full order in which I've attempted the fixes and whether there was a success:
1) Attempted to clear the DerivedFiles and restart XCode - no dice
2) Attempted to Log and Unlock the Keychain, then restart XCode - no dice
3) Attempted to refresh my developer account within XCode - no dice
4) Bit the bullet and just reset my entire keychain, after doing so my developer account was signed out (signed back in), then restarted XCode - no dice
5) Found an article on here that said that we needed to set the [login|local|System]/certificate/Apple Worldwide Developer Relations Certificate Authority to "System default". But in my case it was already set to system default - no dice
6) Then I looked at my actual developer certificate login/my certificates/Mac Developer: and when I looked in there it was correctly set to Confirm before allowing access BUT there was no entries in the lower section. There should be [Xcode, codesign, productbuild]. I deleted the certificate entry and restarted XCode - bingo
The certificate was added and I was then prompted. So what did I do, I pressed "always allow" and then just boned myself.
I had to go back and delete the certificate again, then go through about 20 allow dialogs during a clean build. Once completed, I was able to build completely.
In My Case, after a fews days of research,
All I did to revolve is listed below:
delete all the certificate on your keychain.
goto your apple account. a) download the specify certificate your want to install on your keychain. b)(Optional) Also create and download the require profile.
in Xcode, clean your project. This may take some time.
Build your project.
This should work for similar codesign issues.
Note, during this process the OS would ask for your credential validation.
I use Xamarin and for me this is what worked after trying everything else.
In Visual Studio for Mac I've opened a .xib file so it opens the project in Xcode.
Went to the project settings > Signing and Capabilities, selected the team and then fixed the Signing Certificate.
I think the issue is with the Keychain Access and certificate trust.
Try adding the following certificate Apple Worldwide Developer Relations Certification Authority from https://www.apple.com/certificateauthority/ (Expiry validity 2030)
The trust warning indicated in certificate will be fixed and then try building the iOS application again
Open the project path in terminal and enter the below commands in terminal
1) find . | xargs -0 xattr -c
2) xattr -rc .
This works for me.

iPhone Developer Portal won't accept my CSR

I am using the Development Provisioning Assistant in the iPhone Developer Portal, but when I get to the part where it asks me to generate and upload my CSR, I try to upload it and it just gives me this error:
The CSR selected is invalid. Please check the file and try again.
Does anyone know what this means or what I can do about it?? Thanks!
Also make sure you use Safari for uploading.
I tried Chrome and it always failed. Then I switched to Safari and it worked with the same CSR.
Never mind, I figured it out... in case anyone else has the same problem, I fixed it by downloading the WWDR Intermediate Certificate before generating the CSR, which I forgot to do. slaps forehead
If you do not have the following menu item: "Keychain Access->Certificate Assistant->Request a Certificate from a Certificate Authority", then you need a new WWDR Intermediate Certificate. My menu item was originally similar, but had some extra text in the title. Downloading and installing a new certificate changed the menu item and allowed generation of a valid CSR. This was odd because my previous WWDR Intermediate Certificate appeared in my keychain as an unexpired certificate.
I logged a bug at bugreport.apple.com asking for a clearer error message and pointing back to this SO discussion. Edit: fyi.. apparently developer portal bugs should be logged by sending email to devprograms#apple.com instead of the "product" targeted bugreport website. I encourage folks that have wasted time on this issue to provide helpful feedback regarding the issue via email.
If you are not able to upload the CSR using launching assistant, try going to "Provisioning Portal -> Certificates". Upload your file there and click "submit" button at the bottom.
I had my certificate this way.
I had the same problem, and what fixed it for me was to repair my login keychain. Go to 'Keychain First Aid' in Keychain Access and you can verify/repair your config.
Second on the Chrome vs. Safari conflict and solution.
The instructions on the iOS Provisioning Portal -> Certificates -> "How-To" tab are exactly correct, but I have a repeatable failure on upload in Chrome, and instant success on Safari.
Versions:
OS: OS X Snow Leopard 10.6.6 64-bit
Chrome: 8.0.552.237
Safari: 5.0.3 (6533.19.4)
Did right the opposite: used Firefox instead of Safari and the button worked.
I had a similar problem.
When creating a CSR for enabling push notifications, I first had to deselect the current selected key in Keychain Access before selecting Request a Certificate from a Certificate Authority. That solved my problem
Make sure you have only "Request a Certificate from a Certificate Authority" and not something like "Request a Certificate from a Certificate Authority with key "
If under Keychain Access you only have the option for "Request a Certificate from a Certificate Authority with key" it will not work. This indicates you have not downloaded the "WWDR intermediate certificate". You can get it from the "Certificates" tab in the iPhone Provisioning Portal. Once its installed (double click it to install), the menu item will change to "Request a Certificate from a Certificate Authority" and it should work.