Entitlements get lost when resigning

GoogleCodeExporter commented 8 years ago

What steps will reproduce the problem?
1. Take an IPA that uses the keychain
2. Resign it.
3. Install IPA.

What is the expected output? What do you see instead?

I would expect the app to work as before, however errors such as 
"SecItemCopyMatching: missing entitlement" are output to the console.

What version of the product are you using? On what operating system?

1.1 on Mac OS 10.7.4 Xcode 4.3.3.

Please provide any additional information below.

I've attached a patch which fixes the issue by preserving the entitlements from 
the old IPA. I'm not sure if this is a sane/sensible idea, although it seems to 
work in my case.

Original issue reported on code.google.com by mjholg...@gmail.com on 19 Jul 2012 at 7:28

Attachments:

iresign-patch2

GoogleCodeExporter commented 8 years ago

I actually ran into this same issue last week.  However, in addition to copying 
over the entitlements from the old IPA, I also had to replace the application 
identifier within that was in the old .ipa with the one that was in the 
provisioning profile.  Seems like this would be the best behavior (since if the 
entitlements and provisioning profile don't match, your app won't run).

Thoughts?

Also... I am more than happy to pitch in with coding that up.  Just let me know 
how I can help.  Thanks!!
Jeff

Original comment by jolson...@gmail.com on 24 Jul 2012 at 5:02

GoogleCodeExporter commented 8 years ago

Working on this atm - thanks for the fix ideas, jeff and mjholgate

Original comment by pblitzph...@gmail.com on 12 Oct 2012 at 5:57

GoogleCodeExporter commented 8 years ago

Any news on this front? I have been struggling with this for a while, even 
after replacing the appid in the entitlement.plist, the app launches but does 
not get granted the entitlements requested (keychain access)
Any idea?

Original comment by nil...@gmail.com on 13 Mar 2013 at 4:50

dimones / iresign

Entitlements get lost when resigning #25