1.
Pavan Kumar Challa
IPA Re-sign

2.
• IPA - Its an application archive file which includes the binary and can be installed on iOS
devices
• APPLE ENTERPRISE LICENSE - This license allows large organisations to develop
and deploy proprietary, internal apps.
• APP IDENTIFIER - Unique identifier for an app.
• PROVISIONING PROFILES - Profiles used install development apps on test device
or distribute apps to App Store etc.
• ENTITLEMENTS - This file defines the capabilities of the app.

3.
What is IPA Re-sign.?

4.
Background on how did we come
across IPA Resign.

5.
Uses of IPA Resign
• When we receive an IPA file and want to install the apps on your devices
• When the certificates expire and want to regenerate the build with new
certificates
• When the organisation have strict polices of not giving access to apple
developer account or not sharing distribution certificates.

6.
Step 1 : Make change to Info.Plist
• Bundle Identifier - CFBundleIdentifier
• Marketing Version - CFBundleShortVersionString
• Bundle Version - CFBundleVersion

7.
Step 2 : Prepare new signing assets
1. Generate provision file for the original configuration
security cms -D -i ../profile.mobileprovision > provision.plist
2. Generate entitlements file for signing
/usr/libexec/PlistBuddy -x -c 'Print :Entitlements' provision.plist > entitlements.plist
3. Check and update the new entitlements if anything is missing in keychain-
access-groups.

8.
Step 3 : Replace mobileprovison
1. Unzip the IPA file
2. Remove _Codesignature in Payload folder
3. Replace mobileprovision profile

9.
Step 4 : Codesign the app, frameworks and executable
1. Sign the app with your Developer or Distribution certificate
/usr/bin/codesign -f -s “developer/distribution.p12” --entitlements entitlements.plist Payload/MyApp.app
2. Sign all the frameworks with your developer or distribution certificate
/usr/bin/codesign -f -s "developer/distribution.p12" --entitlements entitlements.plist
Payload/MyApp.app/Frameworks/*
2. Sign the executable with your developer or distribution certificate
/usr/bin/codesign -f -s "developer/distribution.p12" --entitlements entitlements.plist
Payload/MyApp.app/MyApp

10.
STEP 5 : Rezip the IPA

11.
PAVAN KUMAR CHALLA
Thank you