osy / Jitterbug

Launch JIT enabled iOS app with a second iOS device
Apache License 2.0
1.11k stars 90 forks source link

How do I use VPN tunnel ? #26

Closed LukasMFR closed 3 years ago

LukasMFR commented 3 years ago

Hi, I was able to successfully configure the tool to play Wii games on iPad at full speed. But I have a paid developer account and I wanted to know how I can configure the VPN tunnel ? Do I just use the generated file from my Mac on the SAME device instead of secondary ? Thanks in advance.

osy commented 3 years ago

Yes, and make sure you sign or build with the right profile.

LukasMFR commented 3 years ago

Thanks for your reply, I use Sideloadly to install the IPA using my paid dev account. Is it enough or do I actually have to build it from source and follow instructions to get the entitlements ? Btw do both devices have to be connected to same Wi-Fi ? Because let's say I use data sharing then the iPad will be connected to iPhone with the iPhone will have access to internet but on 4G.

LukasMFR commented 3 years ago

I tried but I got thisimage

LukasMFR commented 3 years ago

And let's say I only have my iPad without any internet connection but I have the dev account can I still run Jitterbug VPN ? (If I can figure out how to set it up)

LukasMFR commented 3 years ago

Well I actually build from source and it gave me the option to use VPN tunnel. Weird that Sideloadly will not sign it properly.

SugarRayLua commented 3 years ago

@LukasAppleFan , Hello. I've never been able to get the VPN option to work and end up always using Jitterbug with 2 devices (one device enables the other when on the same wifi network or hotspot). It sounds like you got it to work but had to build Jitterbug from source. Is it your understanding then that the VPN tunnel only works if you build Jitterbug from source and not if you sideload the regular Jitterbug .ipa? I can't tell for sure from these posts if everyone using the VPN on same device idea built Jitterbug from source using Xcode on their MAC? It would seem much easier if the Jitterbug .ipa came with the ability to use VPN if you have a developer certificate (I do, purchased through Signulous).

If you got Jitterbug on the same device to work using VPN tunnel, would you mind posting sometime either screenshots or small video or steps of how you actually use Jitterbug on the VPN tunnel to get UTM to work? That might help me troubleshoot better my efforts.

Thanks!

LukasMFR commented 3 years ago

Hello, For the videos I can't right now. But yes after building from source I was able to only use one device (I have a paid dev account). And basically when setting it up on iPad it told me that I could use VPN tunnel.

SugarRayLua commented 3 years ago

Thanks, LukasAppleFan.

I think I figured out what the issue is for me. I use a resigning service (Signulous) to obtain my paid dev account and realized that many of the resigning services don’t routinely include the ability to add the “Network Extensions Entitlement” as confirmed by their response to my support query:

"Glad you're enjoying our service! Signulous depends on provisioning files with wildcard app identifiers in order to be able to install an unlimited number of apps, and these provisioning files don't support custom entitlements due to limitations from Apple. However, if you are willing to sign the app yourself on your Mac and only need it for one app identifier, I can get you a custom provisioning file for your device that supports custom entitlements including network extensions. If you’d like to give it a try, please let me know your device's UDID.

Regards, Signulous”

They are sending me a custom provisioning file, and I am going to try installing Jitterbug with that and see if that works. Otherwise, I believe some of the other resigning services for paid dev accounts are able to add the network extensions entitlement. Unfortunately, I’m not able to build from source and use Xcode as my Mac and Xcode are too old to create a iOS 15 app. I’ll let you and the other users know if I get the VPN tunnel working using the custom provisioning file that Signulous sends me as other users might wish to do the same.

Sincerely,

Mike

On Oct 17, 2021, at 12:41 PM, LukasAppleFan @.***> wrote:

Hello, For the videos I can't right now. But yes after building from source I was able to only use one device (I have a paid dev account). And basically when setting it up on iPad it told me that I could use VPN tunnel.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/osy/Jitterbug/issues/26#issuecomment-945183063, or unsubscribe https://github.com/notifications/unsubscribe-auth/ASKMCEYK6JABQDU5Y2N3363UHMRINANCNFSM5EICXQPA.

Eun commented 2 years ago

Hello @SugarRayLua do you got it working with a custom provisioning file?

SugarRayLua commented 2 years ago

Hi, @Eun, yes I did.

Sorry I didn't update this post with that information-- it seems like so long ago (and it was only 8 months ago) :-). I also thought I wrote a step by step post somewhere of how I did it but now can't seem to find it :-( and my memory of the exact steps is fading.

However, it turned out that to run the VPN tunnel you actually need a certificate with "entitlements" and not just a "custom provisioning file". The only place I could find on the web that you can purchase such a certificate with "entitlements" is at the UDID website:

https://www.udidregistrations.com/buy

Singulous and the other certificate signing services I believe do not sell certificates with the "entitlements" you need to set up on device VPN tunnel. I think (but not sure) the only other place to get a certificate with "entitlements" is to set up a higher tier development account with Apple.

Once you have such a certificate (e.g. a certificate with "entitlements" from the UDID site) you can then manually sign the certificate with those entitlements and get the VPN tunnel to work. Unfortunately, that is where my memory is now hazy in terms of the exact steps to do that. I remember actually importing the UDID certificate I got with its entitlements into UTM and then using a Linux signing pkg I downloaded to sign the certificates (but unfortunately now don't remember the name of it). I believe you can also sign certificates with entitlements via Xcode signing tools on the Mac but I never did that because at that time my Mac was old and Xcode was out of date.

I hope at least that helps get you started. The VPN tunnel has been working well on my iPad with UTM ever since. If I can find the document where I outline the exact steps I did, I'll add it to this post and cc: you.

Good luck!