Provisioning profiles like a Pro
•
5 likes•4,424 views
- Provisioning profiles contain important information for code signing like the bundle identifier, entitlements, and developer certificates. They need to be installed and referenced correctly in Xcode to avoid build errors. - When dealing with multiple builds from the same project, manually changing the provisioning profile reference in Xcode can be error prone. It's better to generate an xcconfig file from the profile to automate selection. - Issues like duplicate certificates in the keychain can cause code signing errors. Making sure the keychain is configured correctly helps avoid problems with building and running apps.
Recommended
More Related Content
Similar to Provisioning profiles like a Pro
Similar to Provisioning profiles like a Pro (20)
Recently uploaded
Recently uploaded (20)
Provisioning profiles like a Pro
- 8. ReadaProvisioningProfile openssl openssl smime -in ./your.mobileprovision -inform der -verify openssl smime -in /path/to/your.mobileprovision -inform der -verify -noverify https://skabber.snipt.net/provisioning-profile-tips-tricks/ Monday, September 9, 13
- 13. ImportantValues DeveloperCertificates <key>DeveloperCertificates</key> ! <array> ! ! <data> MIIFnDCCBISgAwIBAgIIEIdrqpJlb9MwDQYJKoZIhvcNAQEFBQAwgZYxCzAJ BgNVBAYTAlVTMRMwEQYDVQQKDApBcHBsZSBJbmMuMSwwKgYDVQQLDCNBcHBs ZSBXb3JsZHdpZGUgRGV2ZWxvcGVyIFJlbGF0aW9uczFEMEIGA1UEAww7QXBw bGUgV29ybGR3aWRlIERldmVsb3BlciBSZWxhdGlvbnMgQ2VydGlmaWNhdGlv ... Monday, September 9, 13
- 14. ImportantValues DeveloperCertificates -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIIEIdrqpJlb9MwDQYJKoZIhvcNAQEFBQAwgZYxCzAJ BgNVBAYTAlVTMRMwEQYDVQQKDApBcHBsZSBJbmMuMSwwKgYDVQQLDCNBcHBs ZSBXb3JsZHdpZGUgRGV2ZWxvcGVyIFJlbGF0aW9uczFEMEIGA1UEAww7QXBw bGUgV29ybGR3aWRlIERldmVsb3BlciBSZWxhdGlvbnMgQ2VydGlmaWNhdGlv ... -----END CERTIFICATE----- openssl x509 -text -in cert.pem Monday, September 9, 13
- 15. ImportantValues DeveloperCertificates Certificate: Data: Version: 3 (0x2) Serial Number: 10:87:6b:aa:92:65:6f:d3 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=Apple Inc., OU=Apple Worldwide Developer Relations, CN=Apple Worldwide Developer Relations Certification Authority Validity Not Before: Nov 3 21:38:10 2012 GMT Not After : Nov 3 21:38:10 2013 GMT Subject: UID=9K9F9LCV74, CN=iPhone Distribution: Massively Overrated, OU=9K9F9LCV74, O=Massively Overrated, C=US Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (2048 bit) Modulus (2048 bit): 00:c8:57:f9:cf:af:c2:4d:7a:8a:16:62:47:4b:c2: Monday, September 9, 13
- 21. ToolsforusingProvisioningProfiles Terminal.app-bashalias alias prov='openssl smime -inform der -verify -in' Monday, September 9, 13
- 26. Xcode Monday, September 9, 13
- 27. Xcode Howdoesitseeprofiles? CODE_SIGN_IDENTITY = "iPhone Developer"; PROVISIONING_PROFILE = ""; Monday, September 9, 13
- 28. Xcode Howdoesitseeprofiles? CODE_SIGN_IDENTITY = "iPhone Developer: Jay Graves (E6L876QFM6)"; PROVISIONING_PROFILE = "0FEB5831-22D3-4B1D-A973-59ED243E8103"; Monday, September 9, 13
- 32. •Automatic Profiles •Good if you don’t have multiple projects. •It can select the wrong profile. •Rules on automatic selection are not defined. •Specific Profiles •Much more control over which profile is selected. •Can be a pain to update the project file every time a profile is updated. Whatdoesallthismean? Monday, September 9, 13
- 33. Monday, September 9, 13
- 35. •Add a Duplicate Target •Large project file change •Duplicated all of the Configurations •A 2nd info.plist has been created. • Add a new Configuration •Still a large project file change •Still duplicated all the build options •Easy to forget new build options MultipleBuildScenario PossibleSolutions Monday, September 9, 13
- 38. MultipleBuildScenario Createa.xcconfigfile CODE_SIGN_IDENTITY = iPhone Distribution: Double Encore PROVISIONING_PROFILE = 1203C18-8F08-45D8-A5AC-76AD9319CDDC Monday, September 9, 13
- 39. MultipleBuildScenario Buildwitha.xcconfigfile xcodebuild -xcconfig second_build.xcconfig Monday, September 9, 13
- 40. Thiscanbebetter! Automateit •Every Provisioning Profile contains all the information we need. •CODE_SIGN_IDENTITY is in the DeveloperCertificates •PROVISIONING_PROFILE is the UUID Monday, September 9, 13
- 41. Thiscanbebetter! Thescript http://bit.ly/xcconfig #!/usr/bin/env python from M2Crypto import SMIME, X509, BIO, m2 import plistlib ... plist = plistlib.readPlistFromString(blob) developerPEM = "-‐-‐-‐-‐-‐BEGIN CERTIFICATE-‐-‐-‐-‐-‐n%s-‐-‐-‐-‐-‐ END CERTIFICATE-‐-‐-‐-‐-‐" % plist["DeveloperCertificates"] [0].asBase64() Monday, September 9, 13
- 42. Thiscanbebetter! Thescript http://bit.ly/xcconfig developerCert = X509.load_cert_string(developerPEM) items = developerCert.get_subject().get_entries_by_nid(X509.X5 09_Name.nid["CN"]) ... open(outXcConfig, 'w').write("CODE_SIGN_IDENTITY = %s nPROVISIONING_PROFILE = %sn" % (codeSignIdentity, plist["UUID"])) Monday, September 9, 13
- 43. Whathaveweaccomplished? •Real file based Provisioning Profile selection. •Zero ambiguity about which profile will be selected. •No mismatched Profiles in Xcode’s Code Signing Identity. •Other than downloading the profile from the iOS Dev Center there is no work for you! Monday, September 9, 13
- 47. SwitchKeychains security default-keychain -d user -s /FULLPATH/My.keychain security unlock-keychain -p ******* /FULLPATH/My.keychain unlockkeychain Monday, September 9, 13
- 48. SwitchKeychains Error: User interaction is not allowed. unlockkeychain Monday, September 9, 13
- 50. KeychainError Code Sign error: Certificate identity 'iPhone Developer: Your Name (NNNNNNNN)' appears more than once in the keychain Monday, September 9, 13