Provisioning profiles like a Pro

Provisioning
ProfileslikeaPro
Monday, September 9, 13

JayGraves
CTO

LotsofApps

ShipIt

ProvisioningProfiles
Howdotheywork?

Whatarethey?
SMIME/PKCS#7
Originallydesignedforemailsigning&encryption.

ReadaProvisioningProfile
vim

ReadaProvisioningProfile
openssl
openssl smime -in ./your.mobileprovision -inform der -verify
openssl smime -in /path/to/your.mobileprovision -inform der
-verify -noverify
https://skabber.snipt.net/provisioning-proﬁle-tips-tricks/

ImportantValues
application-identifier
<key>application-identifier</key>
<string>ABCDEFGHIJK.com.your.bundleid</string>

ImportantValues
Entitlements
<key>Entitlements</key>
<dict>
...
<key>com.apple.developer.ubiquity-container-
identifiers</key>
...
<key>com.apple.developer.ubiquity-kvstore-
identifier</key>
...
<key>get-task-allow</key>
...
</dict>

ImportantValues
ProvisionedDevices
<key>ProvisionedDevices</key>
<array>
<string>7af8ee3af8e4e13193bd834bab50e1d...</string>
<string>a9f0d0477a6d3e8dad0ff984f7ba77e...</string>
</array>

ImportantValues
UUID
<key>UUID</key>
<string>E0EF8ACE-E83A-475C-9DA7-C67A147659FD</
string>

ImportantValues
DeveloperCertificates
<key>DeveloperCertificates</key>
! <array>
! ! <data>
MIIFnDCCBISgAwIBAgIIEIdrqpJlb9MwDQYJKoZIhvcNAQEFBQAwgZYxCzAJ
BgNVBAYTAlVTMRMwEQYDVQQKDApBcHBsZSBJbmMuMSwwKgYDVQQLDCNBcHBs
ZSBXb3JsZHdpZGUgRGV2ZWxvcGVyIFJlbGF0aW9uczFEMEIGA1UEAww7QXBw
bGUgV29ybGR3aWRlIERldmVsb3BlciBSZWxhdGlvbnMgQ2VydGlmaWNhdGlv
...

ImportantValues
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIIEIdrqpJlb9MwDQYJKoZIhvcNAQEFBQAwgZYxCzAJ
BgNVBAYTAlVTMRMwEQYDVQQKDApBcHBsZSBJbmMuMSwwKgYDVQQLDCNBcHBs
ZSBXb3JsZHdpZGUgRGV2ZWxvcGVyIFJlbGF0aW9uczFEMEIGA1UEAww7QXBw
bGUgV29ybGR3aWRlIERldmVsb3BlciBSZWxhdGlvbnMgQ2VydGlmaWNhdGlv
...
-----END CERTIFICATE-----
openssl x509 -text -in cert.pem

ImportantValues
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:87:6b:aa:92:65:6f:d3
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=US, O=Apple Inc., OU=Apple Worldwide Developer Relations, CN=Apple Worldwide
Developer Relations Certification Authority
Validity
Not Before: Nov 3 21:38:10 2012 GMT
Not After : Nov 3 21:38:10 2013 GMT
Subject: UID=9K9F9LCV74, CN=iPhone Distribution: Massively Overrated, OU=9K9F9LCV74,
O=Massively Overrated, C=US
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
Modulus (2048 bit):
00:c8:57:f9:cf:af:c2:4d:7a:8a:16:62:47:4b:c2:

InstallaProvisioningProfile
Don’tdoubleclickthem.
Nothumanreadable.

DragthemintotheFinder
~/Library/MobileDevice/Provisioning Profiles

Muchbetter

ToolsforusingProvisioningProfiles
Terminal.app

Terminal.app-bashalias
alias prov='openssl smime -inform der -verify -in'

QuicklookPlugin
http://www.macmation.com/blog/2011/10/quicklook-plugin-for-mobile-provision-ﬁles/

AutomatorService

AutomatorService
http://cl.ly/MTZb

Xcode
Howdoesitseeprofiles?
CODE_SIGN_IDENTITY = "iPhone Developer";
PROVISIONING_PROFILE = "";

Xcode
Howdoesitseeprofiles?
CODE_SIGN_IDENTITY = "iPhone Developer: Jay Graves (E6L876QFM6)";
PROVISIONING_PROFILE = "0FEB5831-22D3-4B1D-A973-59ED243E8103";

Xcode
Builderror

Xcode
Updatetheprofile.

Xcode
ProjectDiff

•Automatic Profiles
•Good if you don’t have multiple projects.
•It can select the wrong profile.
•Rules on automatic selection are not defined.
•Specific Profiles
•Much more control over which profile is selected.
•Can be a pain to update the project file every time a profile is updated.
Whatdoesallthismean?

Scenario
1Project 2Builds

•Add a Duplicate Target
•Large project file change
•Duplicated all of the Configurations
•A 2nd info.plist has been created.
• Add a new Configuration
•Still a large project file change
•Still duplicated all the build options
•Easy to forget new build options
MultipleBuildScenario
PossibleSolutions

Abettersolution
.xcconfigfile

Createa.xcconfigfile

Createa.xcconfigfile
CODE_SIGN_IDENTITY = iPhone Distribution: Double Encore
PROVISIONING_PROFILE = 1203C18-8F08-45D8-A5AC-76AD9319CDDC

Buildwitha.xcconfigfile
xcodebuild -xcconfig second_build.xcconfig

Thiscanbebetter!
Automateit
•Every Provisioning Proﬁle contains all the information we need.
•CODE_SIGN_IDENTITY is in the DeveloperCertiﬁcates
•PROVISIONING_PROFILE is the UUID

Thiscanbebetter!
Thescript
http://bit.ly/xcconﬁg
#!/usr/bin/env
python
from
M2Crypto
import
SMIME,
X509,
BIO,
m2
import
plistlib
...
plist
=
plistlib.readPlistFromString(blob)
developerPEM
=
"-‐-‐-‐-‐-‐BEGIN
CERTIFICATE-‐-‐-‐-‐-‐n%s-‐-‐-‐-‐-‐
END
CERTIFICATE-‐-‐-‐-‐-‐"
%
plist["DeveloperCertificates"]
[0].asBase64()

Thiscanbebetter!
Thescript
http://bit.ly/xcconﬁg
developerCert
=
X509.load_cert_string(developerPEM)
items
=

developerCert.get_subject().get_entries_by_nid(X509.X5
09_Name.nid["CN"])
...
open(outXcConfig,
'w').write("CODE_SIGN_IDENTITY
=
%s
nPROVISIONING_PROFILE
=
%sn"
%
(codeSignIdentity,

plist["UUID"]))

Whathaveweaccomplished?
•Real file based Provisioning Profile selection.
•Zero ambiguity about which profile will be selected.
•No mismatched Profiles in Xcode’s Code Signing Identity.
•Other than downloading the profile from the iOS Dev Center
there is no work for you!

OK,OK,Enoughwiththe
already.

Keychain
Access

MultipleKeychains

SwitchKeychains
security default-keychain -d user -s /FULLPATH/My.keychain
security unlock-keychain -p ******* /FULLPATH/My.keychain
unlockkeychain

SwitchKeychains
Error: User interaction is not allowed.
unlockkeychain

SwitchKeychains
unlockkeychain

KeychainError
Code
Sign
error:
Certificate
identity
'iPhone

Developer:
Your
Name
(NNNNNNNN)'
appears
more
than

once
in
the
keychain

OTAInstall

md5
checksum

md5checksum
doesn’twork

Installmultipleapps
atthesametime

ThankYou
jay@doubleencore.com
@skabber

Provisioning profiles like a Pro

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Ähnlich wie Provisioning profiles like a Pro

Ähnlich wie Provisioning profiles like a Pro (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Provisioning profiles like a Pro