Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Check signature of iOS app

Is it possible to check if iOS application is signed by its developer at applications runtime? I tried to download .ipa of some apps and resigning them with my developer ID and almost all of them worked on my iOS device. But some of them didn't, so I guess they are somehow checking if signature has changed and forbidding them to run if it is.

I know, there is Code Signing Services for OSX, but I haven't found a way to do this in iOS.

Also I have read that after reviewing, apple signs application with their own signature. Are the _CodeSignature/CodeResources and embedded.mobileprovision files also changed during this process? Is it possible for me to check if it is signed with apples signature at runtime?

like image 200
Elviss Strazdins Avatar asked Feb 13 '13 16:02

Elviss Strazdins


People also ask

How do I verify a digital signature on my iPhone?

Open the Preferences dialog box. Under Categories, select Signatures. For Verification, click More. To automatically validate all signatures in a PDF when you open the document, select Verify Signatures When The Document Is Opened.

How are iOS apps signed?

How developers sign their apps. Developers can sign their apps through certificate validation (through the Apple Developer Program). They can also embed frameworks inside their apps and have that code validated with an Apple-issued certificate (through a team identifier string).

Does iPhone have a signature app?

Adobe Sign is an iOS signature app produced by one of the biggest companies in the software design industry, Adobe. This signature app for iPhone provides many features and functionality to users.


1 Answers

I wrote a small signature checker (using openssl). It is available here: https://github.com/elnormous/signature_check/blob/master/SignatureCheck/main.c

And the answer to the second question is no, _CodeSignature/CodeResources and embedded.mobileprovision are not being changed. Apple changes only the signature of the Mach-O file.

like image 89
Elviss Strazdins Avatar answered Oct 16 '22 04:10

Elviss Strazdins