Xcode now allows anyone with an Apple ID to build and run app, from anywhere. But, what if, I’m jailbroken and not satisfied with 7-days expiration? Or I’m trying to build an open-source app, but can’t build because the bundle id is already taken and submitted to iTunes?
Since we are jailbroken, everything should just work if we use selfsigned certificate. But somehow, Xcode just keeps asking for a “provisioning profile”, and which is kind of messy to play around. But finally I got it working.
Provisioning profile, is a Cryptographic Message Syntax (CMS) signed property list (plist), which includes team, app, and permission info.
For those who don’t want to bother with cert generating and plist signing, you can just take CodeSigning.zip, import the p12 into keychain, open provisioning profile in Xcode, and skip to the last step, and you are all set.
If you’d like to create the cert from scratch, here’s the detailed steps.
Create selfsigned certificate for code signing
Things is different here because we are going to sign the plist, so for key usage you need not only “Code Signing”, but also “Any” and “Email Protection”, everything else should be famillar if you tried to create a code signing cert in the past. Note that you need to fill in “Organizational Unit”, and this will be your team id, so don’t leave white space in here.
Choose Code Signing type and don’t forget to check the “Let me override defaults”Fill in the Organizational Unit, everything else can leave blankedAny and Email Protection must be included or you can’t sign the profile later
Create provision plist
Now you have a working certficate, it’s time to create the provision plist. Here is the template plist file:
provision.plist
XHTML
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
<?xml version="1.0"encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
Here’s a few thing you need to change in this plist.
Paste your certificate content after DeveloperCertificates entry. Open Terminal.app and run “security find-certificate -c “iPhone Developer” -p” and copy things between the dashes.
Change all the team identifier SELFSIGNED if you chose your own “Organizational Unit” name when creating cert.
Change the CreationDate, ExpirationDate, and TimeToLive to match your cert’s validation info.
(Optional) Run “uuidgen” in Terminal and change the UUID entry.
Signing the provision profile
After you modified the plist, the easiest way should be running
Though, for some reason, my machine keep running into error. If you have the same problem, export the cert and private key from keychain and sign it with openssl. (Note that the openssl cli utility comes with mac does not have cms function, you might need to compile one yourself or find another platform)
1
openssl cms-sign-nodetach-inprovision.plist-out provision.mobileprovision-inkey CodeSigning.key-signer CodeSigning.crt-outform DER
Configure Xcode to use the certificate and provisioning profile
So we finally got everything set up, but wait! There’s the last step.
First open the .mobileprovision file in Xcode, it will not react or pop anything, but you can check “~/Library/MobileDevice/Provisioning Profiles” directory if your generated uuid is there.
Then go to project’s “Build Setting” – Signing, select your certificate in “Code Signing Identity”, change “Code Signing Style” to “Manual”, leave “Development Team” empty, and select your provisioning profile in both “Provisioning Profile” and “Provisioning Profile (Deprecated)”
Now check the Gerenal tab, and it should not complaint about signing anymore.
因为框架实在是太难看了，有一个10.3.3回报使用一小时后持续failed to start直到重启我也没搞懂具体是什么原因。我所找到的-5803(FailedToStartError)错误只有两处，一个是开始录制的时候available为false，另一个是replayd里取 isApplicationInForegroundWithBundleIdentifier:bundleId 的时候返回了false
