Is it possible to check if iOS application is signed by its developer at applications runtime? I tried to download .ipa of some apps and resigning them with my developer ID and almost all of them worked on my iOS device. But some of them didn't, so I guess they are somehow checking if signature has changed and forbidding them to run if it is.
I know, there is Code Signing Services for OSX, but I haven't found a way to do this in iOS.
Also I have read that after reviewing, apple signs application with their own signature. Are the _CodeSignature/CodeResources and embedded.mobileprovision files also changed during this process? Is it possible for me to check if it is signed with apples signature at runtime?
Open the Preferences dialog box. Under Categories, select Signatures. For Verification, click More. To automatically validate all signatures in a PDF when you open the document, select Verify Signatures When The Document Is Opened.
How developers sign their apps. Developers can sign their apps through certificate validation (through the Apple Developer Program). They can also embed frameworks inside their apps and have that code validated with an Apple-issued certificate (through a team identifier string).
Adobe Sign is an iOS signature app produced by one of the biggest companies in the software design industry, Adobe. This signature app for iPhone provides many features and functionality to users.
I wrote a small signature checker (using openssl). It is available here: https://github.com/elnormous/signature_check/blob/master/SignatureCheck/main.c
And the answer to the second question is no, _CodeSignature/CodeResources and embedded.mobileprovision are not being changed. Apple changes only the signature of the Mach-O file.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With