Skip to content

fix(mas): declare exempt encryption (skip App Store export-compliance prompt) #187

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
oratis wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(mas): declare exempt encryption (skip App Store export-compliance prompt) #187

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions scripts/build-mas.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -64,6 +64,20 @@ VITE_MARKUP_MAS=1 pnpm tauri build \

[ -d "$APP" ] || { echo "::error:: $APP missing — build failed" >&2; exit 1; }

# MAS-only Info.plist tweaks, applied before signing (codesign seals Info.plist):
# - ITSAppUsesNonExemptEncryption=false: Markup's only crypto is standard
# HTTPS/TLS (exempt), so declaring it lets the App Store auto-clear export
# compliance — no per-upload encryption prompt, no France docs. Matches iOS.
# - CFBundleVersion: set MAS_BUILD_NUMBER to bump the build number when
# re-uploading the same marketing version (the App Store needs a higher one).
PLIST="$APP/Contents/Info.plist"
/usr/libexec/PlistBuddy -c "Add :ITSAppUsesNonExemptEncryption bool false" "$PLIST" 2>/dev/null \
|| /usr/libexec/PlistBuddy -c "Set :ITSAppUsesNonExemptEncryption false" "$PLIST"
if [ -n "${MAS_BUILD_NUMBER:-}" ]; then
/usr/libexec/PlistBuddy -c "Set :CFBundleVersion $MAS_BUILD_NUMBER" "$PLIST"
echo " CFBundleVersion → $MAS_BUILD_NUMBER"
fi

echo "==> 2/5 Embedding provisioning profile"
cp "$MAS_PROFILE" "$APP/Contents/embedded.provisionprofile"

Expand Down
Loading