iOS 簽名 unsigned.mobileconfig 文件
通過(guò) Apple 開(kāi)發(fā)者賬號(hào)簽名
- 查看可用于簽名的 id
security find-identity -v -p codesigning
- result:
1) 4E8D512C8480FAC679947D6E50190AE9BAB3E825 "3rd Party Mac Developer Application: Developer Name (DUCNFCN445)"
2) 8B0EBBAE7E7230BB6AF5D69CA09B769663BC844D "Mac Developer: Developer Name (DUCNFCN445)"
3) 4E8D512C8480AAC67995D69CA09B769663BC844D "iPhone Developer: App Developer (DUCNFCN445)"
4) 65E24CDAF5B3E1E1480818CA4656210871214337 "Developer ID Application: App Developer (DUCNFCN445)"
4 valid identities found
- 通過(guò) security 簽名
security cms -S -N "iPhone Developer: App Developer (DUCNFCN445)" -i mdm_template_profile.mobileconfig -o signed.mobileconfig
- Python 腳本 ProfileSigner
python profile_signer.py -n "iPhone Developer: App Developer (DUCNFCN445)" sign mdm_template_profile.mobileconfig signed.mobileconfig
- 通過(guò)
Apple Configurator 2或 Hancock 等工具簽名
通過(guò) openssl 簽名
openssl smime -sign -in unsigned.mobileconfig -out signed.mobileconfig -signer server.crt -inkey server.key -certfile ca.crt -outform der -nodetach
unsigned.mobileconfig 通過(guò) openssl 簽名
注意：如果 signer 和 certfile 不一一對(duì)應(yīng)议谷，就會(huì)出現(xiàn) 紅色的 “尚未驗(yàn)證”
例如：
MDM 證書(shū) “MDM Vendor: Shanghai XXXXX Information Technology Co. Ltd.”
和
正確的關(guān)系應(yīng)該是：
“MDM Vendor: Shanghai XXXXX Information Technology Co. Ltd.”
與
Apple Worldwide Developer Relations Certification Authority
