| 1 | # smbcloud-ascapi-signing |
| 2 | |
| 3 | Apple code signing through App Store Connect: certificates and provisioning |
| 4 | profiles, plus local RSA key pair and CSR generation. |
| 5 | |
| 6 | Apple never receives or returns a private key. You generate the key pair |
| 7 | locally, send Apple only a signing request, and keep the private key. A |
| 8 | certificate whose key file is lost is permanently unusable, and an expired |
| 9 | certificate cannot be renewed, only replaced. |
| 10 | |
| 11 | ```toml |
| 12 | [dependencies] |
| 13 | smbcloud-ascapi-core = "0.1" |
| 14 | smbcloud-ascapi-signing = "0.1" |
| 15 | ``` |
| 16 | |
| 17 | ```rust |
| 18 | use smbcloud_ascapi_core::{ApiKey, Client}; |
| 19 | use smbcloud_ascapi_signing::prelude::*; |
| 20 | |
| 21 | let client = Client::new(ApiKey::from_p8_file("KEY_ID", "ISSUER_ID", "AuthKey.p8")?); |
| 22 | ``` |
| 23 | |
| 24 | See the [API docs](https://docs.rs/smbcloud-ascapi-signing) for `csr`, |
| 25 | `certificate` and `profile`. |
| 26 | |
| 27 | ## Copyright |
| 28 | |
| 29 | © 2026 PT Sigit Mitra Bangun ([smbCloud](https://smbcloud.xyz)). |