1.进入证书目录：cd ~/wwwroot/FirWeb/myp12files/
2.导入通用证书(可选-只第一次导入，后面再不导入)：security import AppleWWDRCAG3.cer -k /Users/ec2-user/Library/Keychains/login.keychain-db
3.导入p12证书：security import certificates_Dist.p12 -k /Users/ec2-user/Library/Keychains/login.keychain-db -P "Cf7410258963.." -T /usr/bin/codesign
4.查看默认System已导入的证书（可选）：security find-identity -v -p codesigning /Library/Keychains/System.keychain
5.查看自创建的login已导入的证书（推荐）：security find-identity -v -p codesigning ~/Library/Keychains/login.keychain-db
6.删除证书：security delete-certificate -Z "AA57D4ACA8D034B1D9552A4DFEBE2C117B7FD533" ~/Library/Keychains/login.keychain-db
7.解锁login链：security set-key-partition-list -S apple-tool:,apple: -s -k "1234" /Users/ec2-user/Library/Keychains/login.keychain-db
8.执行签名：./signIpa.sh firWebUniversalCert20250122 1-1741251774 "yongle zhang"

1.查看login.keychain是否存在：ls -l ~/Library/Keychains/
2.如果不存在创建一个：security create-keychain -p "1234" ~/Library/Keychains/login.keychain-db
3.查看是否成功创建：security default-keychain -s ~/Library/Keychains/login.keychain-db // 没有任何错误就是成功
4.命令解锁keychain：security unlock-keychain -p "1234" ~/Library/Keychains/login.keychain-db
5.再次导入证书：security import certificates_Dist.p12 -k /Users/ec2-user/Library/Keychains/login.keychain-db -P "Cf7410258963.." -T /usr/bin/codesign
6.查看login.keychain是否是默认证书：security default-keychain
7.如果不是，需手动设置：security default-keychain -s ~/Library/Keychains/login.keychain-db
8.清楚多余重复的证书：security delete-identity -Z <重复的SHA1指纹> -t
9.测试直接签名app：codesign -f -s "Apple Distribution: yongle zhang (W394K7A46S)" DevBitpiePro.app --keychain /Users/ec2-user/Library/Keychains/login.keychain-db --verbose