The latest articles on DEV Community by Daniel (@danielplust). https://dev.to/danielplust https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F195223%2Fad1dbcc4-064f-45b2-8537-cee8c15c9798.jpg https://dev.to/danielplust en Daniel Wed, 25 Nov 2020 15:59:10 +0000 https://dev.to/danielplust/resign-an-ios-app-at-the-command-line-5df https://dev.to/danielplust/resign-an-ios-app-at-the-command-line-5df <p>Do you need to resign an iOS app due to an expiring provisioning profile or new<br> bundle identifier, but you don't have access to the project files<br> (<code>.xcodeproj</code> or <code>.xcworkspace</code>)? Or maybe you do have access to the project<br> files, but your environment's version of Xcode can't build the project within<br> the GUI for whatever reason? In this article, I'll share with you a solution<br> that resigns an app without having to open Xcode.</p> <p><a href="https://res.cloudinary.com/practicaldev/image/fetch/s--Svbm7cXM--/c_limit%2Cf_auto%2Cfl_progressive%2Cq_auto%2Cw_880/https://dev-to-uploads.s3.amazonaws.com/i/k0eg4lbngyofbuanathr.jpeg" class="article-body-image-wrapper"><img src="https://res.cloudinary.com/practicaldev/image/fetch/s--Svbm7cXM--/c_limit%2Cf_auto%2Cfl_progressive%2Cq_auto%2Cw_880/https://dev-to-uploads.s3.amazonaws.com/i/k0eg4lbngyofbuanathr.jpeg" alt="Alt Text"></a></p> <h2> Assumptions </h2> <p>You have</p> <ol> <li>A Mac with Xcode installed</li> <li>An iOS app file (<code>.ipa</code>)</li> <li>A valid provisioning profile you wish to resign the app with (<code>.mobileprovision</code>)</li> <li>A valid distribution certificate for the above provisioning profile along with the private key used to generate the certificate in your Mac's Keychain</li> </ol> <h2> Solution </h2> <p>Below is a bash script I wrote that you can download:</p> <p>After downloading, you'll need to change the permissions of the script to allow<br> it to be executable:<br> </p> <div class="highlight js-code-highlight"> <pre class="highlight shell"><code><span class="nv">$ </span><span class="nb">chmod </span>755 resign-ios-app </code></pre> </div> <h2> Usage </h2> <p>Invoke the script without any arguments to see an instructional message:<br> </p> <div class="highlight js-code-highlight"> <pre class="highlight shell"><code><span class="nv">$ </span>./resign-ios-app Expected at least three arguments. Something like <span class="s1">'AnApp.ipa'</span> <span class="s1">'AProvisioningProfile.mobileprovision'</span> <span class="s1">'iPhone Distribution: AnOrganization'</span> where <span class="nv">$1</span> is an .ipa file <span class="nv">$2</span> is a .mobileprovision <span class="nv">$3</span> is the name of a distribution certificate <span class="k">in </span>the Keychain You may pass a fourth argument to serve as a new bundle identifier <span class="k">for </span>the resigned app. If not included, the original bundle identifier will be used. </code></pre> </div> <p>Assuming you have this script, the <code>.ipa</code>, and <code>.mobileprovision</code> all in the<br> same folder, and you're in that folder:<br> </p> <div class="highlight js-code-highlight"> <pre class="highlight shell"><code><span class="nv">$ </span>./resign-ios-app <span class="s1">'AnApp.ipa'</span> <span class="s1">'XC_iOS_comcompanyAnApp.mobileprovision'</span> <span class="s1">'iPhone Distribution: AnOrganization'</span> Unzipping <span class="s2">"AnApp.ipa"</span>... Extracting .app... Removing existing _CodeSignature... Decoding <span class="s2">"XC_iOS_comcompanyAnApp.mobileprovision"</span> and writing to ProvisioningProfile.plist... Extracting <span class="s2">"Entitlements"</span> from ProvisioningProfile.plist and writing to Entitlements.plist... Embedding <span class="s2">"XC_iOS_comcompanyAnApp.mobileprovision"</span> into <span class="s2">"AnApp.app"</span>... Resigning <span class="s2">"AnApp.app"</span> with existing bundle identifier <span class="s2">"com.company.AnApp"</span> Resigning embedded Swift libraries... ./libswiftCoreImage.dylib: replacing existing signature ./libswiftObjectiveC.dylib: replacing existing signature ./libswiftCore.dylib: replacing existing signature ./libswiftCoreGraphics.dylib: replacing existing signature ./libswiftUIKit.dylib: replacing existing signature ./libswiftMetal.dylib: replacing existing signature ./libswiftCoreData.dylib: replacing existing signature ./libswiftDispatch.dylib: replacing existing signature ./libswiftos.dylib: replacing existing signature ./libswiftCoreFoundation.dylib: replacing existing signature ./libswiftDarwin.dylib: replacing existing signature ./libswiftQuartzCore.dylib: replacing existing signature ./libswiftCoreAudio.dylib: replacing existing signature ./libswiftAVFoundation.dylib: replacing existing signature ./libswiftFoundation.dylib: replacing existing signature ./libswiftCoreMedia.dylib: replacing existing signature ./libswiftsimd.dylib: replacing existing signature Resigning embedded frameworks... ./BarcodeScanner.framework: replacing existing signature ./SQLite.framework: replacing existing signature Resigning <span class="s2">"AnApp.app"</span> with certificate <span class="s2">"iPhone Distribution: AnOrganization"</span>... Payload/AnApp.app: replacing existing signature Zipping app data into an .ipa... Resigning successful. Resigned app to /Users/daniel/resign-ios-app/resigned.ipa </code></pre> </div> <p>After a successful resigning, you'll notice some extra files in the folder:<br> </p> <div class="highlight js-code-highlight"> <pre class="highlight shell"><code><span class="nv">$ </span><span class="nb">ls</span> <span class="nt">-l</span> <span class="nt">-rw-rw-r--</span>@ 1 daniel staff 11506405 Nov 19 15:57 AnApp.ipa <span class="nt">-rw-r--r--</span>@ 1 daniel staff 228 Feb 4 2019 AppThinning.plist <span class="nt">-rw-r--r--</span> 1 daniel staff 517 Nov 22 18:29 Entitlements.plist <span class="nt">-rw-r--r--</span>@ 1 daniel staff 7354 Nov 19 10:26 XC_iOS_comcompanyAnApp.mobileprovision drwxr-xr-x@ 3 daniel staff 96 Feb 4 2019 Payload <span class="nt">-rw-r--r--</span> 1 daniel staff 3382 Nov 22 18:29 ProvisioningProfile.plist <span class="nt">-rw-r--r--</span> 1 daniel staff 11488043 Nov 22 18:29 resigned.ipa </code></pre> </div> <p><code>Payload</code> and the <code>.plist</code> files are artifacts of the script and can be deleted.<br> <code>resigned.ipa</code> should be good to deploy.</p> <h2> Tested </h2> <p>I developed and tested this script on:</p> <ul> <li>macOS 10.15.7</li> <li>Xcode 12.2</li> <li>GNU bash, version 5.0.7(1)-release (x86_64-apple-darwin16.7.0)</li> </ul> <p>That being said, this script should work with macOS's built in version of <code>bash<br> version 3</code> and recent versions of macOS and Xcode.</p> <p>Please create an Issue against <a href="https://github.com/danieltorrecillas/resign-ios-app">my repository</a> for this solution if you can<br> offer any improvements for more complicated resignings.</p> ios bash swift