# Issues with code signing on CircleCI 2.0

**URL:** <https://discuss.circleci.com/t/issues-with-code-signing-on-circleci-2-0/18642>\
**Category:** Bug Reports\
**Tags:** 2.0, code-signing, fastlane, ios, match\
**Created:** [December 7, 2017, 6:11pm UTC](https://discuss.circleci.com/t/issues-with-code-signing-on-circleci-2-0/18642 "2017-12-07T18:11:32Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![JanBrinker](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/janbrinker/32/16761_2.png) [@JanBrinker](https://discuss.circleci.com/u/JanBrinker)\
**Post date:** [December 7, 2017, 6:11pm UTC](https://discuss.circleci.com/t/issues-with-code-signing-on-circleci-2-0/18642/1 "2017-12-07T18:11:32Z")

</div>

We are in the process of migrating our CircleCI 1.0 project to 2.0 and we’re having a bumpy time. We’ve made progress and the workflows are created, but on our final test run we’ve walked into an issue that everyone would like to avoid: code signing.

So, our pipeline works with `fastlane match` and we’ve been able to build, sign and upload our apps for a while now with 1.0. However with 2.0 builds are getting stuck during `gym` when signing:

```auto
...
[09:52:49]: ▸ Generating 'MyAppNotificationServiceExtension.appex.dSYM'
[09:52:49]: ▸ Running script '[CP] Copy Pods Resources'
[09:52:49]: ▸ Touching MyAppNotificationServiceExtension.appex
[09:52:49]: ▸ Signing /Users/distiller/Library/Developer/Xcode/DerivedData/MyApp-bqwbpzspiqvwmehkyqpjdnuythhl/Build/Intermediates.noindex/ArchiveIntermediates/MyApp\ Stage/IntermediateBuildFilesPath/UninstalledProducts/iphoneos/MyAppNotificationServiceExtension.appex

```

And this is where things time out after 10-15 minutes. Does anyone else experience the same issues? As I said, the lanes worked as they should before we switched to 2.0 ☹  
Running the lane locally built the app aswell. So something is amiss and I can’t see it. Any ideas?

Update:

I’ve taken a look into my branches that still run on CircleCI 1.0 and SSHed in to execute some lanes manually to play through the two small adjustments I made during the migration to 2.0. Everything works there. If I SSH into a 2.0 branch build: no chance. It always gets stuck at the same point when trying to sign the app extension.

Could there be the possibility, that CircleCI doesn’t unlock the keychain correctly?

---

<div class="post-metadata">

**Author:** ![JanBrinker](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/janbrinker/32/16761_2.png) [@JanBrinker](https://discuss.circleci.com/u/JanBrinker)\
**Post date:** [December 13, 2017, 10:32am UTC](https://discuss.circleci.com/t/issues-with-code-signing-on-circleci-2-0/18642/2 "2017-12-13T10:32:33Z")

</div>

I moved this thread into the Bug Reports board as I’m getting more and more certain this is not a configuration issue on our side.  
On the fastlane repo I also had a conversation with someone else experiencing this aswell.

Please advise.

---

<div class="post-metadata">

**Author:** ![tom](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/tom/32/27680_2.png) [@tom](https://discuss.circleci.com/u/tom)\
**Post date:** [December 13, 2017, 11:20am UTC](https://discuss.circleci.com/t/issues-with-code-signing-on-circleci-2-0/18642/3 "2017-12-13T11:20:40Z")

</div>

Thanks for reporting this. I’ll send you a DM requesting more details. We’ll update here when we have a solution.

---

<div class="post-metadata">

**Author:** ![tom](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/tom/32/27680_2.png) [@tom](https://discuss.circleci.com/u/tom)\
**Post date:** [December 13, 2017, 12:18pm UTC](https://discuss.circleci.com/t/issues-with-code-signing-on-circleci-2-0/18642/4 "2017-12-13T12:18:48Z")

</div>

One thing to make sure is that you have the `setup_circle_ci` action added to your Fastfile as described here: [https://circleci.com/docs/2.0/ios-codesigning/#adding-match-to-the-fastlane-lane](https://circleci.com/docs/2.0/ios-codesigning/#adding-match-to-the-fastlane-lane)

This will create and unlock the keychain.

---

<div class="post-metadata">

**Author:** ![JanBrinker](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/janbrinker/32/16761_2.png) [@JanBrinker](https://discuss.circleci.com/u/JanBrinker)\
**Post date:** [December 14, 2017, 1:46pm UTC](https://discuss.circleci.com/t/issues-with-code-signing-on-circleci-2-0/18642/5 "2017-12-14T13:46:03Z")

</div>

That was the solution! Adding `setup_circle_ci` did the trick.  
It would be good to highlight this step in the docs. That command somewhat gets lost in the details and it looks like it’s a private lane that just does “some setting up, whatever you want”.

It’s pretty easy to overlook right now…

---

<div class="post-metadata">

**Author:** ![tom](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/tom/32/27680_2.png) [@tom](https://discuss.circleci.com/u/tom)\
**Post date:** [December 14, 2017, 3:02pm UTC](https://discuss.circleci.com/t/issues-with-code-signing-on-circleci-2-0/18642/6 "2017-12-14T15:02:51Z")

</div>

Glad that fixed it and thanks for the feedback.

---

<div class="post-metadata">

**Author:** ![nerd0geek1](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/nerd0geek1/32/2903_2.png) [@nerd0geek1](https://discuss.circleci.com/u/nerd0geek1)\
**Post date:** [December 18, 2017, 7:48am UTC](https://discuss.circleci.com/t/issues-with-code-signing-on-circleci-2-0/18642/7 "2017-12-18T07:48:41Z")

</div>

I encounter exactly same problem, but it won’t resolved when I added `setup_circle_ci` .

---

<div class="post-metadata">

**Author:** ![JanBrinker](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/janbrinker/32/16761_2.png) [@JanBrinker](https://discuss.circleci.com/u/JanBrinker)\
**Post date:** [December 20, 2017, 1:16pm UTC](https://discuss.circleci.com/t/issues-with-code-signing-on-circleci-2-0/18642/8 "2017-12-20T13:16:16Z")

</div>

Try creating a support ticket with CircleCI and they will try to help you out 🙂

---

<div class="post-metadata">

**Author:** ![liyanone1990](https://avatars.discourse-cdn.com/v4/letter/l/278dde/32.png) [@liyanone1990](https://discuss.circleci.com/u/liyanone1990)\
**Post date:** [March 13, 2018, 3:57am UTC](https://discuss.circleci.com/t/issues-with-code-signing-on-circleci-2-0/18642/9 "2018-03-13T03:57:26Z")

</div>

Hi, could you please share the fastlane config as well as the config.yml that you use to set up fastlane match for code signing? we are stuck at the code signing part on CircleCI 2.0 for a few days. Really need some assistance. Thank you in advance.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/circleci/original/3X/5/1/511608acda8e85906e15909b57bd0a46c1dbe291.png) [@system](https://discuss.circleci.com/u/system)\
**Post date:** [June 18, 2018, 11:35am UTC](https://discuss.circleci.com/t/issues-with-code-signing-on-circleci-2-0/18642/10 "2018-06-18T11:35:20Z")

</div>


