Safari get Udid need to install the. mobileconfig file,
However, after we have installed the. Mobileconfig, the rebate configuration profile opens showing "unsigned" or "not signed", so the next job is to make our. mobileconfig file look more secure.
Most of the Mobileconfig signature networks are signed with SSL certificates and can be referenced
Http://www.rootmanager.com/iphone-ota-configuration/iphone-ota-setup-with-signed-mobileconfig.html
In this paper, the use of the Apple Developer certificate to achieve the purpose of signing, the two methods, one is a slash-and-burn step-by-step operation, a use of script signing
I. Exporting an Apple Certificate for signature
1. Export the certificate from the keychain (keychain)
Utility, keychain Access, select the certificate to export, export the build P12 file Innovcertificates.p12
Then convert to Innovcertificates.pem file
2. Convert P12 to PEM format method
P12 convert PEM https://www.sslshopper.com/ssl-converter.html Online
(certificate) cer.p12 file to Cer.pem file
OpenSSL pkcs12-clcerts-nokeys-out cer.pem-in CER.P12
(private key) KEY.P12 file to Key.pem file
OpenSSL pkcs12-nocerts-out KEY.PEM-INKEY.P12
3. Download Apple Root Certificate and Apple intermediate Certificate
(For verification of this article. mobileconfig file I used the following two certificates for Apple.
Apple root Certificate (Apple roots Certificate)
Apple application integration Certificate (Apple Application integration certificate)
You can also use these certificates or other certificates provided by Apple address: http://www.apple.com/certificateauthority/
The downloaded file includes a certificate (CER) and a private key (key)
(Read the certificate on the command line, refer to link info.ssl.com/article.aspx?id=12149)
According to this file we can extract the certificate.
123456 |
decompression apple root certificate certificate .apple intermediate certificate openssl x509 -inform der - outform pem -in appleincrootcertificate cer -out root. Crt. PEM OpenSSL x509 -inform DER -outform PEM -in Appleaaica . cer -out intermediate. CRT. PEM Open two extracted files in a text editor copy and pasteIntermediate. CRT. PEM to root. CRT. Start the PEM location , save and then your root. CRT. A PEM file is the result of two certificate merges |
4. Signing and verifying. mobileconfig file
With all the file preparation numbers above, run the command line tool and run the following command
1 |
OpensslSmime -Sign -Inch Example. mobileconfig -out< Span class= "crayon-h" > signedverifyexample. Mobileconfig -signer innovcertificates. Pem -certfile root< Span class= "Crayon-sy". crt. Pem -outform der< Span class= "crayon-h" > -nodetach |
The result is a signed and validated. mobileconfig file
Two. Script Signature
Find a Python script to sign with the help of a powerful github
Address: Https://github.com/nmcspadden/ProfileSigner
1. Sign a mobileconfig
profile_signer.py and Mobileconfig in the same directory, terminal into directory execution
1 |
. /profile_signer. PY -n ' 3rd party Mac Developer application ' sign acrobatpro. Mobileconfig acrobatprosigned. Mobileconfig |
2. Encrypt a Mobileconfig
1 |
. /profile_signer. PY -n "3rd party Mac Developer Application" encrypt acrobatpro. Mobileconfig acrobatproenc. Mobileconfig |
3. Sign and encrypt a mobileconfig
1 |
. /profile_signer. PY -n "3rd party Mac Developer Application" both acrobatpro. Mobileconfig acrobatproboth. Mobileconfig |
"3rd party MAC Developer Application" is the full name of your certificate in the keychain, select the certificate, display the introduction, copy the common name, for example
IPhone Developer:jakey.shao [email protected] (w26tlnww63)
IPhone distribution:xxx Network Technology Co., Ltd. (L5T8PFT6T5)
Three. Safari Installation
Find unsigned becomes signed, red turns green. No warning at the time of installation ... The jasmine is fragrant,!!!
Portal Access iOS device Udid (device unique identifier) via Safari browser
Reference Articles & Original English:
Http://stackoverflow.com/questions/28355902/ios-mobileconfig-file-still-not-verified-but-close-i-see-certification
Reproduced please specify: Day Fox Blog» for iOS mobileconfig file to sign
Safari get Udid need to install the. mobileconfig file,