메뉴
Guides the user through Tauri application code signing and notarization for Android, iOS, Linux, macOS, and Windows platforms including certificate setup and configuration.
기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.
설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
직접 명령은 검토 Prompt를 거치지 않습니다. 실행하기 전에 소스를 확인하세요.
npx skills add https://github.com/dchuk/claude-code-tauri-skills --skill signing-tauri-apps명령은 한 줄로 유지됩니다. 복사하기 전에 가로로 스크롤해 전체 내용을 확인하세요.
로컬 사본을 원하시나요? SkillsMP에서 현재 제공할 수 있는 파일을 다운로드하세요.
Guides the user through distributing Tauri applications for Android, including Google Play Store submission, APK and AAB generation, build configuration, signing setup, and version management.
Assists with managing Tauri application resources including app icons setup and generation, embedding static files and assets, accessing bundled resources at runtime, and implementing thread-safe state management patterns.
Guides users through Tauri binary size optimization techniques to produce small, efficient desktop application bundles using Cargo profile settings and build configurations.
SKILL.md 표시 중
SOC 직업 분류 기준
| name | signing-tauri-apps |
| description | Guides the user through Tauri application code signing and notarization for Android, iOS, Linux, macOS, and Windows platforms including certificate setup and configuration. |
This skill provides comprehensive guidance for code signing Tauri applications across all supported platforms.
| Platform | Requirement | Certificate Type |
|---|---|---|
| Android | Required for Play Store | Java Keystore (JKS) |
| iOS | Required for distribution | Apple Developer Certificate |
| Linux | Optional (enhances trust) | GPG Key |
| macOS | Required for distribution | Developer ID / Apple Distribution |
| Windows | Required (SmartScreen) | OV or EV Certificate |
macOS/Linux:
keytool -genkey -v -keystore ~/upload-keystore.jks -keyalg RSA -keysize 2048 -validity 10000 -alias upload
Windows:
keytool -genkey -v -keystore $env:USERPROFILE\upload-keystore.jks -storetype JKS -keyalg RSA -keysize 2048 -validity 10000 -alias upload
Create src-tauri/gen/android/keystore.properties:
password=<your-password>
keyAlias=upload
storeFile=/path/to/upload-keystore.jks
IMPORTANT: Never commit keystore.properties to version control.
Modify src-tauri/gen/android/app/build.gradle.kts:
import java.io.FileInputStream
// Add before android { } block
val keystorePropertiesFile = rootProject.file("keystore.properties")
val keystoreProperties = java.util.Properties()
if (keystorePropertiesFile.exists()) {
keystoreProperties.load(FileInputStream(keystorePropertiesFile))
}
android {
// ... existing config ...
signingConfigs {
create("release") {
keyAlias = keystoreProperties["keyAlias"] as String
keyPassword = keystoreProperties["password"] as String
storeFile = file(keystoreProperties["storeFile"] as String)
storePassword = keystoreProperties["password"] as String
}
}
buildTypes {
release {
signingConfig = signingConfigs.getByName("release")
// ... other release config ...
}
}
}
| Variable | Description |
|---|---|
ANDROID_KEY_ALIAS | Key alias (e.g., upload) |
ANDROID_KEY_PASSWORD | Keystore password |
ANDROID_KEY_BASE64 | Base64-encoded keystore file |
GitHub Actions Example:
- name: Setup Android signing
run: |
cd src-tauri/gen/android
echo "keyAlias=${{ secrets.ANDROID_KEY_ALIAS }}" > keystore.properties
echo "password=${{ secrets.ANDROID_KEY_PASSWORD }}" >> keystore.properties
base64 -d <<< "${{ secrets.ANDROID_KEY_BASE64 }}" > $RUNNER_TEMP/keystore.jks
echo "storeFile=$RUNNER_TEMP/keystore.jks" >> keystore.properties
For local development, authenticate through Xcode Settings > Accounts.
For CI/CD, create an App Store Connect API key and set:
| Variable | Description |
|---|---|
APPLE_API_ISSUER | Issuer ID from App Store Connect |
APPLE_API_KEY | Key ID from App Store Connect |
APPLE_API_KEY_PATH | Path to the .p8 private key file |
| Variable | Description |
|---|---|
IOS_CERTIFICATE | Base64-encoded .p12 certificate |
IOS_CERTIFICATE_PASSWORD | Password used when exporting certificate |
IOS_MOBILE_PROVISION | Base64-encoded provisioning profile |
| Distribution | Certificate Type |
|---|---|
| Debugging | Apple Development or iOS App Development |
| App Store | Apple Distribution or iOS Distribution |
| Ad Hoc | Apple Distribution or iOS Distribution |
.p12base64 -i certificate.p12base64 -i profile.mobileprovisiongpg2 --full-gen-key
Back up the key securely.
| Variable | Description |
|---|---|
SIGN | Set to 1 to enable signing |
SIGN_KEY | GPG Key ID (optional, uses default if not set) |
APPIMAGETOOL_SIGN_PASSPHRASE | Key password (required for CI/CD) |
APPIMAGETOOL_FORCE_SIGN | Set to 1 to fail build on signing error |
SIGN=1 APPIMAGETOOL_SIGN_PASSPHRASE="your-passphrase" npm run tauri build
./src-tauri/target/release/bundle/appimage/app_version_amd64.AppImage --appimage-signature
Download the validate tool from AppImageUpdate releases:
chmod +x validate-x86_64.AppImage
./validate-x86_64.AppImage your-app.AppImage
Note: AppImage does not auto-validate signatures. Users must manually verify.
| Certificate | Use Case |
|---|---|
| Apple Distribution | App Store submissions |
| Developer ID Application | Distribution outside App Store |
.cer to installtauri.conf.json:
{
"bundle": {
"macOS": {
"signingIdentity": "Developer ID Application: Your Name (TEAM_ID)"
}
}
}
Certificate Variables:
| Variable | Description |
|---|---|
APPLE_CERTIFICATE | Base64-encoded .p12 certificate |
APPLE_CERTIFICATE_PASSWORD | Password for exported certificate |
APPLE_SIGNING_IDENTITY | Certificate name in keychain |
Notarization - Option 1: App Store Connect API (Recommended):
| Variable | Description |
|---|---|
APPLE_API_ISSUER | Issuer ID |
APPLE_API_KEY | Key ID |
APPLE_API_KEY_PATH | Path to .p8 private key |
Notarization - Option 2: Apple ID:
| Variable | Description |
|---|---|
APPLE_ID | Apple ID email |
APPLE_PASSWORD | App-specific password |
APPLE_TEAM_ID | Team identifier |
# Export from Keychain as .p12, then:
base64 -i certificate.p12 | pbcopy
For unsigned distribution or testing without Apple credentials:
{
"bundle": {
"macOS": {
"signingIdentity": "-"
}
}
}
- name: Import certificate
env:
APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
run: |
echo $APPLE_CERTIFICATE | base64 --decode > certificate.p12
security create-keychain -p actions temp.keychain
security import certificate.p12 -k temp.keychain -P $APPLE_CERTIFICATE_PASSWORD -T /usr/bin/codesign
security list-keychains -s temp.keychain
security unlock-keychain -p actions temp.keychain
security set-key-partition-list -S apple-tool:,apple: -s -k actions temp.keychain
| Type | SmartScreen | Availability |
|---|---|---|
| OV (Organization Validated) | Builds reputation over time | Before June 1, 2023 |
| EV (Extended Validation) | Immediate trust | Required after June 1, 2023 |
Note: Certificates obtained after June 1, 2023 require EV certificates for immediate SmartScreen trust.
tauri.conf.json:
{
"bundle": {
"windows": {
"certificateThumbprint": "A1B1A2B2A3B3A4B4A5B5A6B6A7B7A8B8A9B9A0B0",
"digestAlgorithm": "sha256",
"timestampUrl": "http://timestamp.sectigo.com"
}
}
}
http://timestamp.sectigo.comhttp://timestamp.digicert.comhttp://timestamp.globalsign.comopenssl pkcs12 -export -in cert.cer -inkey private-key.key -out certificate.pfx
| Variable | Description |
|---|---|
WINDOWS_CERTIFICATE | Base64-encoded .pfx file |
WINDOWS_CERTIFICATE_PASSWORD | PFX export password |
- name: Import Windows certificate
env:
WINDOWS_CERTIFICATE: ${{ secrets.WINDOWS_CERTIFICATE }}
WINDOWS_CERTIFICATE_PASSWORD: ${{ secrets.WINDOWS_CERTIFICATE_PASSWORD }}
run: |
echo "$WINDOWS_CERTIFICATE" | base64 --decode > certificate.pfx
Import-PfxCertificate -FilePath certificate.pfx -CertStoreLocation Cert:\CurrentUser\My -Password (ConvertTo-SecureString -String $env:WINDOWS_CERTIFICATE_PASSWORD -AsPlainText -Force)
shell: pwsh
For cloud-based signing with Azure Key Vault:
| Variable | Description |
|---|---|
AZURE_CLIENT_ID | Azure AD application client ID |
AZURE_CLIENT_SECRET | Azure AD application secret |
AZURE_TENANT_ID | Azure AD tenant ID |
Configure in tauri.conf.json:
{
"bundle": {
"windows": {
"signCommand": "relic sign --key azurekeyvault --file %1"
}
}
}
For Azure Code Signing service:
{
"bundle": {
"windows": {
"signCommand": "trusted-signing-cli -e <endpoint> -a <account> -c <profile> %1"
}
}
}
For other signing tools or cross-platform builds:
{
"bundle": {
"windows": {
"signCommand": "your-signing-tool --sign %1"
}
}
}
The %1 placeholder is replaced with the executable path.
ANDROID_KEY_ALIASANDROID_KEY_PASSWORDANDROID_KEY_BASE64IOS_CERTIFICATEIOS_CERTIFICATE_PASSWORDIOS_MOBILE_PROVISIONAPPLE_API_ISSUERAPPLE_API_KEYAPPLE_API_KEY_PATHAPPLE_CERTIFICATEAPPLE_CERTIFICATE_PASSWORDAPPLE_SIGNING_IDENTITYAPPLE_IDAPPLE_PASSWORDAPPLE_TEAM_IDSIGNSIGN_KEYAPPIMAGETOOL_SIGN_PASSPHRASEAPPIMAGETOOL_FORCE_SIGNWINDOWS_CERTIFICATEWINDOWS_CERTIFICATE_PASSWORDAZURE_CLIENT_IDAZURE_CLIENT_SECRETAZURE_TENANT_ID