Safari get Udid need to install the. mobileconfig file,

Source: Internet
Author: User
Tags pkcs12

Safari get Udid need to install the. mobileconfig file,
However, after we have installed the. Mobileconfig, the rebate configuration profile opens showing "unsigned" or "not signed", so the next job is to make our. mobileconfig file look more secure.

Most of the Mobileconfig signature networks are signed with SSL certificates and can be referenced

Http://www.rootmanager.com/iphone-ota-configuration/iphone-ota-setup-with-signed-mobileconfig.html

In this paper, the use of the Apple Developer certificate to achieve the purpose of signing, the two methods, one is a slash-and-burn step-by-step operation, a use of script signing

I. Exporting an Apple Certificate for signature

1. Export the certificate from the keychain (keychain)

Utility, keychain Access, select the certificate to export, export the build P12 file Innovcertificates.p12

Then convert to Innovcertificates.pem file

2. Convert P12 to PEM format method

P12 convert PEM https://www.sslshopper.com/ssl-converter.html Online

(certificate) cer.p12 file to Cer.pem file

OpenSSL pkcs12-clcerts-nokeys-out cer.pem-in CER.P12

(private key) KEY.P12 file to Key.pem file

OpenSSL pkcs12-nocerts-out KEY.PEM-INKEY.P12

3. Download Apple Root Certificate and Apple intermediate Certificate

(For verification of this article. mobileconfig file I used the following two certificates for Apple.

Apple root Certificate (Apple roots Certificate)

Apple application integration Certificate (Apple Application integration certificate)

You can also use these certificates or other certificates provided by Apple address: http://www.apple.com/certificateauthority/

The downloaded file includes a certificate (CER) and a private key (key)

(Read the certificate on the command line, refer to link info.ssl.com/article.aspx?id=12149)

According to this file we can extract the certificate.

123456 decompression apple root certificate certificate .apple intermediate certificate openssl x509 -inform der - outform pem -in appleincrootcertificate cer -out root. Crt. PEM OpenSSL x509 -inform DER -outform PEM -in Appleaaica . cer -out intermediate. CRT. PEM Open two extracted files in a text editor copy and pasteIntermediate. CRT. PEM to root. CRT. Start the PEM location , save and then your root. CRT. A PEM file is the result of two certificate merges

4. Signing and verifying. mobileconfig file

With all the file preparation numbers above, run the command line tool and run the following command

1 OpensslSmime -Sign -Inch Example. mobileconfig -out< Span class= "crayon-h" > signedverifyexample. Mobileconfig -signer innovcertificates. Pem -certfile root< Span class= "Crayon-sy". crt. Pem -outform der< Span class= "crayon-h" > -nodetach

The result is a signed and validated. mobileconfig file

Two. Script Signature

Find a Python script to sign with the help of a powerful github

Address: Https://github.com/nmcspadden/ProfileSigner

1. Sign a mobileconfig

profile_signer.py and Mobileconfig in the same directory, terminal into directory execution

1 . /profile_signer. PY -n ' 3rd party Mac Developer application ' sign acrobatpro. Mobileconfig acrobatprosigned. Mobileconfig

2. Encrypt a Mobileconfig

1 . /profile_signer. PY -n "3rd party Mac Developer Application" encrypt acrobatpro. Mobileconfig acrobatproenc. Mobileconfig

3. Sign and encrypt a mobileconfig

1 . /profile_signer. PY -n "3rd party Mac Developer Application" both acrobatpro. Mobileconfig acrobatproboth. Mobileconfig

"3rd party MAC Developer Application" is the full name of your certificate in the keychain, select the certificate, display the introduction, copy the common name, for example

IPhone Developer:jakey.shao [email protected] (w26tlnww63)

IPhone distribution:xxx Network Technology Co., Ltd. (L5T8PFT6T5)

Three. Safari Installation

Find unsigned becomes signed, red turns green. No warning at the time of installation ... The jasmine is fragrant,!!!

Portal Access iOS device Udid (device unique identifier) via Safari browser

Reference Articles & Original English:

Http://stackoverflow.com/questions/28355902/ios-mobileconfig-file-still-not-verified-but-close-i-see-certification

Reproduced please specify: Day Fox Blog» for iOS mobileconfig file to sign

Safari get Udid need to install the. mobileconfig file,

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.