From 13d288d87cbfa2d1edf5f8bf2c699d13789000e8 Mon Sep 17 00:00:00 2001
From: Lazizbek Ergashev <20501725+lazerg@users.noreply.github.com>
Date: Sat, 8 Aug 2026 16:45:19 +0500
Subject: [PATCH] fix(macos-sign): import the signing certificate as an
 explicit pkcs12

---
 .changes/keychain-import-pkcs12-format.md | 5 +++++
 crates/tauri-macos-sign/src/keychain.rs   | 1 +
 2 files changed, 6 insertions(+)
 create mode 100644 .changes/keychain-import-pkcs12-format.md

diff --git a/.changes/keychain-import-pkcs12-format.md b/.changes/keychain-import-pkcs12-format.md
new file mode 100644
index 000000000000..7228439cca89
--- /dev/null
+++ b/.changes/keychain-import-pkcs12-format.md
@@ -0,0 +1,5 @@
+---
+"tauri-macos-sign": patch:bug
+---
+
+Fixed importing a signing certificate failing with `MAC verification failed during PKCS12 import` for p12 files that use modern PBES2/AES encryption.
diff --git a/crates/tauri-macos-sign/src/keychain.rs b/crates/tauri-macos-sign/src/keychain.rs
index 92c62da20071..af33499d06ee 100644
--- a/crates/tauri-macos-sign/src/keychain.rs
+++ b/crates/tauri-macos-sign/src/keychain.rs
@@ -106,6 +106,7 @@ impl Keychain {
       Command::new("security")
         .arg("import")
         .arg(cert_path)
+        .args(["-f", "pkcs12"])
         .arg("-P")
         .arg(certificate_password)
         .args([