search

maciekish / iReSign

iReSign allows iDevice app bundles (.ipa) files to be signed or resigned with a digital certificate from Apple for distribution. This tool is aimed at enterprises users, for enterprise deployment, when the person signing the app is different than the person(s) developing it.
3.53k stars 908 forks source link

Failed to verify code signature (resource added!) #66

Open mshivas opened 9 years ago

mshivas commented 9 years ago

iResign had worked perfectly with several builds of an app but a recent build failed with this error in the Xcode device log:

: 0x10070c000 -[MICodeSigningVerifier performValidationWithError:]: 186: Failed to verify code signature of : 0xe8008017 (Signed resources have been added, removed, or modified) Another line in the log reported this: resource added: /private/var/mobile/Library/Caches/com.apple.mobile.installd.staging/temp.D4oAby/extracted/Payload/[deleted].app/Data/sharedassets1.resource I unzipped both the original and the re-signed IPA and right-clicked on the App file to "Show Package Contents". Sure enough, the re-signed version has a Data/sharedassets1.resource file which is 14.2Mb in size! The original does not. The file _CodeSignature/CodeResources does not reference the file sharedassets1.resource in either the original or re-signed App, which is probably the cause of the problem, i.e. the file is appearing from nowhere and is not signed. I was able to delete the sharedassets1.resource file through File Explorer, re-zip the IPA, and then it installed. Where in the world is the sharedassets1.resource file appearing from?
xgiovio commented 9 years ago

try with my command line script or contact my directly, i could test your ipa http://www.xgiovio.com/blog-photos-videos-other/blog/resign-your-ios-ipa-frameworks-and-plugins-included/