From be2be68462217f9eb46d414326d4d054ed5e52eb Mon Sep 17 00:00:00 2001
From: Mike Maxim <mike@keyba.se>
Date: Wed, 21 Feb 2024 13:31:49 -0500
Subject: [PATCH] update macOS code sign identity

---
 go/updater/osx/build.sh               | 2 +-
 osx/Scripts/build.sh                  | 2 +-
 packaging/desktop/package_darwin.sh   | 2 +-
 packaging/prerelease/build_kbfs.sh    | 2 +-
 packaging/prerelease/build_kbnm.sh    | 2 +-
 packaging/prerelease/build_keybase.sh | 2 +-
 packaging/prerelease/build_updater.sh | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/go/updater/osx/build.sh b/go/updater/osx/build.sh
index 6a518abea104..90a791fb0bf1 100755
--- a/go/updater/osx/build.sh
+++ b/go/updater/osx/build.sh
@@ -8,7 +8,7 @@ cd "$dir"
 app_name="KeybaseUpdater"
 plist="$dir/Updater/Info.plist"
 scheme="Updater"
-code_sign_identity=${CODE_SIGN_IDENTITY:-"9FC3A5BC09FA2EE307C04060C918486411869B65"}
+code_sign_identity=${CODE_SIGN_IDENTITY:-"90524F7BEAEACD94C7B473787F4949582F904104"}
 xcode_configuration="Release"
 install_app_path="/Applications/Keybase.app/Contents/Resources/$app_name.app"
 
diff --git a/osx/Scripts/build.sh b/osx/Scripts/build.sh
index 772f22936d0a..66247c7560ff 100755
--- a/osx/Scripts/build.sh
+++ b/osx/Scripts/build.sh
@@ -15,7 +15,7 @@ mkdir -p $build_dest
 # Flirting with custom configuration but xcodebuild archive will only do Release
 # configuration.
 xcode_configuration="Release"
-code_sign_identity="9FC3A5BC09FA2EE307C04060C918486411869B65" # "Developer ID Application: Keybase, Inc. (99229SGT5K)"
+code_sign_identity="90524F7BEAEACD94C7B473787F4949582F904104" # "Developer ID Application: Keybase, Inc. (99229SGT5K)"
 
 echo "Plist: $plist"
 app_version="`/usr/libexec/plistBuddy -c "Print :CFBundleShortVersionString" $plist`"
diff --git a/packaging/desktop/package_darwin.sh b/packaging/desktop/package_darwin.sh
index e27fa0dabf91..5b29f5ac751d 100755
--- a/packaging/desktop/package_darwin.sh
+++ b/packaging/desktop/package_darwin.sh
@@ -245,7 +245,7 @@ update_plist() {(
 
 sign() {(
   cd "$out_dir"
-  code_sign_identity="9FC3A5BC09FA2EE307C04060C918486411869B65" # "Developer ID Application: Keybase, Inc. (99229SGT5K)"
+  code_sign_identity="90524F7BEAEACD94C7B473787F4949582F904104" # "Developer ID Application: Keybase, Inc. (99229SGT5K)"
   # need to sign some stuff from electron that doesn't get picked up for some reason
   codesign --verbose --force --deep --timestamp --options runtime --sign "$code_sign_identity" "$app_name.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libffmpeg.dylib"
   codesign --verbose --force --deep --timestamp --options runtime --sign "$code_sign_identity" "$app_name.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libEGL.dylib"
diff --git a/packaging/prerelease/build_kbfs.sh b/packaging/prerelease/build_kbfs.sh
index 5273c744b926..8e0e15dcdcd0 100755
--- a/packaging/prerelease/build_kbfs.sh
+++ b/packaging/prerelease/build_kbfs.sh
@@ -38,7 +38,7 @@ GOARCH="$arch" go build -a -tags "$tags" -ldflags "$ldflags" -o "$build_dir/keyb
 
 if [ "$PLATFORM" = "darwin" ] || [ "$PLATFORM" = "darwin-arm64" ]; then
   echo "Signing binaries..."
-  code_sign_identity="9FC3A5BC09FA2EE307C04060C918486411869B65" # "Developer ID Application: Keybase, Inc. (99229SGT5K)"
+  code_sign_identity="90524F7BEAEACD94C7B473787F4949582F904104" # "Developer ID Application: Keybase, Inc. (99229SGT5K)"
   codesign --verbose --force --deep --timestamp --options runtime --sign "$code_sign_identity" "$build_dir"/kbfs
   codesign --verbose --force --deep --timestamp --options runtime --sign "$code_sign_identity" "$build_dir"/git-remote-keybase
   codesign --verbose --force --deep --timestamp --options runtime --sign "$code_sign_identity" "$build_dir"/keybase-redirector
diff --git a/packaging/prerelease/build_kbnm.sh b/packaging/prerelease/build_kbnm.sh
index d03f9d9f3faf..b56fda21cce1 100755
--- a/packaging/prerelease/build_kbnm.sh
+++ b/packaging/prerelease/build_kbnm.sh
@@ -24,7 +24,7 @@ echo "Building $build_dir/kbnm ($kbnm_build) with $(go version) on arch: $arch"
 
 if [ "$PLATFORM" = "darwin" ] || [ "$PLATFORM" = "darwin-arm64" ]; then
   echo "Signing binary..."
-  code_sign_identity="9FC3A5BC09FA2EE307C04060C918486411869B65" # "Developer ID Application: Keybase, Inc. (99229SGT5K)"
+  code_sign_identity="90524F7BEAEACD94C7B473787F4949582F904104" # "Developer ID Application: Keybase, Inc. (99229SGT5K)"
   codesign --verbose --force --deep --timestamp --options runtime --sign "$code_sign_identity" "$build_dir"/kbnm
 elif [ "$PLATFORM" = "linux" ]; then
   echo "No codesigning for Linux"
diff --git a/packaging/prerelease/build_keybase.sh b/packaging/prerelease/build_keybase.sh
index eefd8f496693..03f99d1294e1 100755
--- a/packaging/prerelease/build_keybase.sh
+++ b/packaging/prerelease/build_keybase.sh
@@ -23,7 +23,7 @@ echo "Building $build_dir/keybase ($keybase_build) with $(go version) on arch: $
 
 if [ "$PLATFORM" = "darwin" ] || [ "$PLATFORM" = "darwin-arm64" ]; then
   echo "Signing binary..."
-  code_sign_identity="9FC3A5BC09FA2EE307C04060C918486411869B65" # "Developer ID Application: Keybase, Inc. (99229SGT5K)"
+  code_sign_identity="90524F7BEAEACD94C7B473787F4949582F904104" # "Developer ID Application: Keybase, Inc. (99229SGT5K)"
   codesign --verbose --force --deep --timestamp --options runtime --sign "$code_sign_identity" "$build_dir/keybase"
 elif [ "$PLATFORM" = "linux" ]; then
   echo "No codesigning for Linux"
diff --git a/packaging/prerelease/build_updater.sh b/packaging/prerelease/build_updater.sh
index bfa5209255a2..8a5bded41ff4 100755
--- a/packaging/prerelease/build_updater.sh
+++ b/packaging/prerelease/build_updater.sh
@@ -21,7 +21,7 @@ GOARCH="$arch" go build -a -o "$dest" "$package"
 
 if [ "$PLATFORM" = "darwin" ] || [ "$PLATFORM" = "darwin-arm64" ]; then
   echo "Signing binary..."
-  code_sign_identity="9FC3A5BC09FA2EE307C04060C918486411869B65" # "Developer ID Application: Keybase, Inc. (99229SGT5K)"
+  code_sign_identity="90524F7BEAEACD94C7B473787F4949582F904104" # "Developer ID Application: Keybase, Inc. (99229SGT5K)"
   codesign --verbose --force --deep --timestamp --options runtime --sign "$code_sign_identity" "$dest"
 elif [ "$PLATFORM" = "linux" ]; then
   echo "No codesigning for Linux"