felipesabino / provise Goto Github PK

CLI for re-signing iOS Apps (.ipa files)

Home Page: https://rubygems.org/gems/provise

License: MIT License

Ruby 100.00%

provise's Introduction

Provise

CLI used to change the provisioning profile of an iOS App (.ipa file). Also makes possible changing the bundle identifier if the new provisioning has a different one.

Installation

$ gem install provise

Usage

To simply change the provisioning

$ resign ipa -i Application.ipa -p foo/bar.mobileprovision -c \"iPhone Distribution: Bla Bla\"

To change the peovisionig and also the bundle identifier

$ resign ipa -i Application.ipa -p foo/bar.mobileprovision -c "iPhone Distribution: Bla Bla" -b br.com.new.bundle.identifier

Help

$ resign ipa --help

Reference

Based on Erik's (http://stackoverflow.com/users/487353/erik) original answer at http://stackoverflow.com/a/6921689/429521

Changelog

0.0.3
- Fixes #5 - iOS ipa codesign on XCode 6.1 & Yosemite
0.0.2
- Added bundle version and entitlements file parameters (thanks eilers)
0.0.1
- Initial release

Contact

Felipe Sabino

License

Provise is available under the MIT license. See the LICENSE file for more info.

provise's People

Contributors

Stargazers

Watchers

Forkers

mau888 eilers chourobin tilmanx ivany4 nicksnapsheet jianlei larusso

provise's Issues

install fails on resigned 'trans-org' enterprise app - archived-expanded-entitlements.xcent not updated

Firstly - thanks for provise. Been using it happily for a bit when resigning apps from within an organization.

Having some trouble trying to resign an app between organizations.

Process goes like this:

Compile an IPA with an explicit bundle id and matching MPP, with push notifications enabled and configured, and signed with an 'in-house' (enterprise) key. This IPA installs correctly and recieves push notifications as expected.
Call resign using a certificate and MPP from another developer org enrolled in the apple enterprise dev program while changing bundle id to match new MPP. Completes without error.
Attempt OTA installation of the new IPA. This fails with:

Mar 25 12:03:33 Michaels-iPad itunesstored[2512] : 0x20bf000 __MobileInstallationInstallForLaunchServices_block_invoke240: Returned error Error Domain=MIInstallerErrorDomain Code=63 "Application is missing the application-identifier entitlement." UserInfo=0x145c0c60 {LegacyErrorString=ApplicationVerificationFailed, FunctionName=-[MIInstallableBundle performVerificationWithError:], NSLocalizedDescription=Application is missing the application-identifier entitlement., SourceFileLine=473}

In the resigned IPA, the correct NEW app id and bundle id appear in embedded.mobileprovision file under 'Entitlements' -> 'application-identifier'. The file 'archived-expanded-entitlements.xcent' in the new IPA still contains references to the old app id and bundle id, though. I >think< this is why the device declines to install the IPA.

automation around entitlements and change of team id and bundle id

This is a feature request, not a bug.

I'm thinking provise could be more useful with some changes around how entitlements are handled

Specifically:

default behavior should be to preserve entitlements from old .ipa to new. This can be achieved with the --preserve-metadata=entitlements parameter to codesign.
in addition to a new bundle id, user should be able to specify a new team identifier and provise should change appropriate values in the entitlements to match. This would involve dumping the current entitlements (codesign -d --entitlements :tmp-entitlements.plist), doing a search and replace on team identifier and/or bundle id, and then specifying use of the new entitlements during signing (codesign -f --entitlements entitlements.xml).

I have validated that these process work manually. Am willing to create a pull request if you reckon this is a good idea.