nowsecure / node-applesign

NodeJS module and commandline utility for re-signing iOS applications (IPA files).
https://www.nowsecure.com
MIT License
425 stars 77 forks source link

validation #56

Closed 0x5e closed 7 years ago

0x5e commented 8 years ago

Hello, when I'm re-signing apps, I always meet problems.codesign -vv xxx.app doesn't validate all things iOS system do. For example: bundle_id/entitlements/certificate not match mobileprovision file; certificate expired; certificate revoked; .framework/.dylib/.appex not re-signed properly; These problems was found after I failed to install .ipa on the device then check and check again. What do you think, if validations can be done before re-sign operation?

trufae commented 7 years ago

You can use the -c to clone the entitlements from your mobileprovisioning and solve this inconsistency problem. Not all checks can be done without a device.