felipesabino / provise Goto Github PK

This is a feature request, not a bug.

I'm thinking provise could be more useful with some changes around how entitlements are handled

Specifically:

• default behavior should be to preserve entitlements from old .ipa to new. This can be achieved with the --preserve-metadata=entitlements parameter to codesign.
• in addition to a new bundle id, user should be able to specify a new team identifier and provise should change appropriate values in the entitlements to match. This would involve dumping the current entitlements (codesign -d --entitlements :tmp-entitlements.plist), doing a search and replace on team identifier and/or bundle id, and then specifying use of the new entitlements during signing (codesign -f --entitlements entitlements.xml).

I have validated that these process work manually. Am willing to create a pull request if you reckon this is a good idea.

They have to be resigned with the separate provisioning profile / app ID

codesign --resource-rules=ResourceRules.plist is deprecated in Mac OS X >= 10.10

Also ResourceRules.plist is not present in newly generated ipas, which crashes the resign

http://stackoverflow.com/questions/26488077/ios-ipa-codesign-on-xcode-6-1-yosemite

Add info on

• Where to download iPhone Configuration Utility
• Export .mobileprovisioning file

Add info on how to find the certificate name on the Keychain

Firstly - thanks for provise. Been using it happily for a bit when resigning apps from within an organization.

Having some trouble trying to resign an app between organizations.

Process goes like this:

1. Compile an IPA with an explicit bundle id and matching MPP, with push notifications enabled and configured, and signed with an 'in-house' (enterprise) key. This IPA installs correctly and recieves push notifications as expected.
2. Call resign using a certificate and MPP from another developer org enrolled in the apple enterprise dev program while changing bundle id to match new MPP. Completes without error.
3. Attempt OTA installation of the new IPA. This fails with:

Mar 25 12:03:33 Michaels-iPad itunesstored[2512] : 0x20bf000 __MobileInstallationInstallForLaunchServices_block_invoke240: Returned error Error Domain=MIInstallerErrorDomain Code=63 "Application is missing the application-identifier entitlement." UserInfo=0x145c0c60 {LegacyErrorString=ApplicationVerificationFailed, FunctionName=-[MIInstallableBundle performVerificationWithError:], NSLocalizedDescription=Application is missing the application-identifier entitlement., SourceFileLine=473}

In the resigned IPA, the correct NEW app id and bundle id appear in embedded.mobileprovision file under 'Entitlements' -> 'application-identifier'. The file 'archived-expanded-entitlements.xcent' in the new IPA still contains references to the old app id and bundle id, though. I >think< this is why the device declines to install the IPA.