jeremyagost / hancock

Signs files, such as .mobileconfigs, using a identity from your keychain

PSU MacAdmins Hackathon 2016

Award Winner

Biggest time saver

Hancock

Hancock is a GUI tool for signing packages and mobileconfig files. First it looks through your keychain for all certificates that can be used to sign, then signs the files using the selected certificate.

It can also unsign mobileconfig files, giving the user the ability to then read or make changes to mobileconfig file already signed.

Requirements

At least one certificate with a private key installed. This could be an Apple Developer certificate or as simple as a free Comodo email cert.

Signing

1. Select a valid certificate from the dropdown.

2. Select the mobileconfig/pkg to sign by clicking Sign.... You are also able to drag and drop.

3. You will get prompted to allow access to your keychain. Choose Allow or choose Always Allow, if you plan on using that certificate again.

4. Choose where you want to save the signed file.

Certificate Status

Any certificate listed in the drop down can be used to sign. The icons tell you if the certificate is fully trusted by the system or not. ✅ Trusted by system. ⚠️ Not Trusted by system.

Unsigning

If you want to make changes to a signed mobileconfig file, or it you want to view the contents you will need unsign the mobileconfig file first. This can be accomplished by clicking the Unsign... button and selecting the mobileconfig file to unsign. *NOTE: Unsigning pkgs is not supported.

Acknowledgements

This project was inspired Nick McSpadden's Profilesigner. A command line utility for signing mobileconfig files. If you're looking for a cli method I suggest you check it out.

hancock's Issues

Signs with the first cert in the list

Hello Jeremy,

First of all, what an amazing app!!.
I seem to be having a problem when I sign the profile with the selected certificate.

I'm getting the first cert in the list instead.

Build Instructions

There appears to be some work necessary after opening the Xcode project in order to get the project to actually build. I'm not finding any documentation on that, however, and I'm not a developer by trade. Feeling a bit lost. Would love to make use of the tool, but I can't get a binary to build for the life of me.

Attempting to sign a mobileconfig file results in trying to use productsign?

If you drag n drop mobileconfig's still work, but if you choose to by clicking on the button, it will try and use product sign.

macOS Ventura

Hi,

It seems like Hanckok app won't code sign .pkg installers on macOS Ventura.... I've tried many times but I get no pkg signed.
Thanks for fixing the app for macOS Ventura.

macOS Monterey: issue with code sign pkg files

Hi,

Thanks a lot for this wonderful app that really helped me code sign my pkg files. I've an issue with my new MBPro 16/i7 (2019), I downloaded my Apple ID certificate and when I try to import it through keychain access it get loaded but does not show on My Certificate level, it's only there in Login level, and Hancock won't code sign my pkg like before when I was using my old MBPro 15 (mid2014). Can you make Hancock app point to the certificate and browse it directly rather than pick it from keychain access? Please forgive my request, I maybe wrong as I'm not a guru of programming.

Thanks a lot for your kind help and fix.

—Nor Eddine Bahha
https://norfonts.ma/

---

My System Configuration:
macOS Monterey v12.3.1 (21E258)
MacBook Pro (16-inch, 2019)
2,6 GHz 6-Core Intel Core i7
32 GB 2667 MHz DDR4
Intel UHD Graphics 630 1536 MB

---

macOS Catalina

Hi, very helpful tool ! unfortunately not working with macOS Catalina :( any updates ?

MacOS M1 ARM support

Currently, Hancock is only built for MacOS x86, and not MacOS M1 ARM. It would be great to see a build of Hancock that could run natively on ARM Macs, without the use of Rosetta 2 x86 translation. Thanks for making this essential piece of software!