blocks|key|2948013|text|终于让它工作起来了！|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2948014|使用与cert1签署的IPA进行测试，以便在配置配置文件中未添加设备的情况下提交应用商店。导致使用企业帐户和移动调配配置文件签署的新IPA用于内部部署(移动调配配置文件嵌入到IPA中)。|2948015|解决方案：|2948016|解压缩IPA|2948017|unzip+Application.ipa|code-block|syntax|javascript|2948018|删除旧的CodeSignature|2948019|rm+-r+"Payload/Application.app/_CodeSignature"+"Payload/Application.app/CodeResources"+2>+/dev/null+%7C+true|2948020|替换嵌入式移动配置文件|2948021|cp+"MyEnterprise.mobileprovision"+"Payload/Application.app/embedded.mobileprovision"|2948022|重新签名|2948023|/usr/bin/codesign+-f+-s+"iPhone+Distribution:+Certificate+Name"+--resource-rules+"Payload/Application.app/ResourceRules.plist"+"Payload/Application.app"|2948024|重新打包|2948025|zip+-qr+"Application.resigned.ipa"+Payload|2948026|编辑:删除了授权部分(请参阅小巷评论，谢谢)|2948027|entityMap^0|0|0|0|0|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|16|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|17|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|18|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|19|8|@]|9|@]|A|$]]|$1|H|3|I|5|J|7|1A|8|@]|9|@]|A|$K|L]]|$1|M|3|N|5|6|7|1B|8|@]|9|@]|A|$]]|$1|O|3|P|5|J|7|1C|8|@]|9|@]|A|$K|L]]|$1|Q|3|R|5|6|7|1D|8|@]|9|@]|A|$]]|$1|S|3|T|5|J|7|1E|8|@]|9|@]|A|$K|L]]|$1|U|3|V|5|6|7|1F|8|@]|9|@]|A|$]]|$1|W|3|X|5|J|7|1G|8|@]|9|@]|A|$K|L]]|$1|Y|3|Z|5|6|7|1H|8|@]|9|@]|A|$]]|$1|10|3|11|5|J|7|1I|8|@]|9|@]|A|$K|L]]|$1|12|3|13|5|6|7|1J|8|@]|9|@]|A|$]]|$1|14|3|-4|5|6|7|1K|8|@]|9|@]|A|$]]]|15|$]]

Finally got this working!

Tested with a IPA signed with cert1 for app store submission with no devices added in the provisioning profile. Results in a new IPA signed with a enterprise account and a mobile provisioning profile for in house deployment (the mobile provisioning profile gets embedded to the IPA).

Solution:

Unzip the IPA

<pre><code>unzip Application.ipa
</code></pre>

Remove old CodeSignature

<pre><code>rm -r "Payload/Application.app/_CodeSignature" "Payload/Application.app/CodeResources" 2&gt; /dev/null | true
</code></pre>

Replace embedded mobile provisioning profile

<pre><code>cp "MyEnterprise.mobileprovision" "Payload/Application.app/embedded.mobileprovision"
</code></pre>

Re-sign

<pre><code>/usr/bin/codesign -f -s "iPhone Distribution: Certificate Name" --resource-rules "Payload/Application.app/ResourceRules.plist" "Payload/Application.app"
</code></pre>

Re-package

<pre><code>zip -qr "Application.resigned.ipa" Payload
</code></pre>

Edit: Removed the Entitlement part (see alleys comment, thanks)

blocks|key|259374|text|我成功地遵循了这个答案，但由于权利发生了变化，我只需删除倒数第二条语句中的--entitlements+"Payload/Application.app/Entitlements.plist"部分，它就像一个护身符。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|259375|entityMap^0|11|1N|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|K|8|@]|D|@]|E|$]]]|G|$]]

I successfully followed this answer, but since entitlements have changed, I simply removed the <code>--entitlements "Payload/Application.app/Entitlements.plist"</code> part of the second to last statement, and it worked like a charm.

blocks|key|261201|text|谢谢你，Erik，你发了这篇文章。这对我很有效。我想添加一个关于我需要的额外步骤的注释。在"Payload/Application.app/“中，有一个名为"CACertChains”的目录，其中包含一个名为"cacert.pem“的文件。我必须删除目录和.pem才能完成这些步骤。再次感谢！|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|261202|entityMap^0|27|C|2X|A|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]|$9|K|A|L|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|M|8|@]|D|@]|E|$]]]|G|$]]

Thank you, Erik, for posting this. This worked for me. I'd like to add a note about an extra step I needed. Within "Payload/Application.app/" there was a directory named "CACertChains" that contained a file named "cacert.pem". I had to remove the directory and the .pem to complete these steps. Thanks again! –

blocks|key|257148|text|如果您有一个带扩展的应用程序和/或一个手表应用程序，并且每个扩展/手表应用程序都有多个配置配置文件，那么您应该使用此脚本重新签署ipa文件。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|257149|Re-signing+script+at+Github|offset|length|257150|以下是如何使用此脚本的示例：|257151|./resign.sh+YourApp.ipa+"iPhone+Distribution:+YourCompanyOrDeveloperName"+-p+<path_to_provisioning_profile_for_app>.mobileprovision+-p+<path_to_provisioning_profile_for_watchkitextension>.mobileprovision+-p+<path_to_provisioning_profile_for_watchkitapp>.mobileprovision+-p+<path_to_provisioning_profile_for_todayextension>.mobileprovision++resignedYourApp.ipa|code-block|syntax|javascript|257152|您还可以通过使用另一个-p选项添加其他扩展配置文件来包括它。|257153|对我来说-所有配置配置文件都使用相同的证书/签名身份进行签名。|257154|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/fastlane/fastlane/blob/3173d41667451820627c156ea31a7a1a1ad4f35c/sigh/lib/assets/resign.sh^0|0|0|R|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Y|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Z|8|@]|9|@$D|10|E|11|1|12]]|A|$]]|$1|F|3|G|5|6|7|13|8|@]|9|@]|A|$]]|$1|H|3|I|5|J|7|14|8|@]|9|@]|A|$K|L]]|$1|M|3|N|5|6|7|15|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|16|8|@]|9|@]|A|$]]|$1|Q|3|-4|5|6|7|17|8|@]|9|@]|A|$]]]|R|$S|$5|T|U|V|A|$W|X]]]]

If you have an app with extensions and/or a watch app and you have multiple provisioning profiles for each extension/watch app then you should use this script to re-sign the ipa file.

<a href="https://github.com/fastlane/fastlane/blob/3173d41667451820627c156ea31a7a1a1ad4f35c/sigh/lib/assets/resign.sh" rel="nofollow noreferrer">Re-signing script at Github</a>

Here is an example of how to use this script:

<pre><code>./resign.sh YourApp.ipa "iPhone Distribution: YourCompanyOrDeveloperName" -p &lt;path_to_provisioning_profile_for_app&gt;.mobileprovision -p &lt;path_to_provisioning_profile_for_watchkitextension&gt;.mobileprovision -p &lt;path_to_provisioning_profile_for_watchkitapp&gt;.mobileprovision -p &lt;path_to_provisioning_profile_for_todayextension&gt;.mobileprovision resignedYourApp.ipa
</code></pre>

You can include other extension provisioning profiles too by adding it with yet another -p option. 

For me - all the provisioning profiles were signed by the same certificate/signing identity.

blocks|key|3162008|text|这个问题的答案有点过时，并且缺少潜在的关键步骤，所以这是从外部开发人员那里安装应用程序的更新指南。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3162009|-如何给iOS应用重新签名-|offset|length|style|BOLD|3162010|假设您从另一个开发人员那里收到一个应用程序(例如MyApp.ipa)，并且您希望能够在您的设备上安装和运行它(例如，通过使用ideviceinstaller+)。|3162011|准备新的签约资产|3162012|第一步是获取配置配置文件，其中包括您希望安装和运行的所有设备。确保配置文件包含您在密钥链访问中安装的证书(例如，iPhone开发人员:某个主体(XXXXXXXXXX)+)。下载配置文件(MyProfile.mobileprovision)，以便替换应用程序中嵌入的配置文件。|3162013|接下来，我们将准备一个授权文件以包含在签名中。打开您的终端并运行以下命令。|3162014|$+security+cms+-D+-i+path/to/MyProfile.mobileprovision+>+provision.plist|code-block|syntax|javascript|3162015|这将创建一个描述您的配给配置文件的xml文件。接下来，我们希望将授权提取到一个文件中。|3162016|$+/usr/libexec/PlistBuddy+-x+-c+'Print+:Entitlements'+provision.plist+>+entitlements.plist|3162017|替换配置文件并退出应用程序|3162018|如果您正在使用.ipa文件，请首先解压缩应用程序(如果您使用的是.app，则可以跳过此步骤)。|3162019|$+unzip+MyApp.ipa|3162020|您的工作目录现在将包含Payload/和Payload/MyApp.app/。接下来，删除旧的代码签名文件。|CODE|3162021|$+rm+-rf+Payload/MyApp.app/_CodeSignature|3162022|用您自己的配置文件替换现有的配置文件(即embedded.mobileprovision)。|3162023|$+cp+path/to/MyProfile.mobileprovision+Payload/MyApp.app/embedded.mobileprovision|3162024|重要提示:您还必须放弃应用程序中包含的所有框架。您可以在Payload/MyApp.app/Frameworks中找到这些。如果应用程序是用Swift编写的，或者如果它包含任何其他框架，则必须提交这些框架，否则应用程序将安装但不会运行。|3162025|$+/usr/bin/codesign+-f+-s+"iPhone+Developer:+Some+Body+(XXXXXXXXXX)"+--entitlements+entitlements.plist+Payload/MyApp.app/Frameworks/*|3162026|现在使用您的预配配置文件中包含的证书和您之前创建的entitlements.plist对应用程序进行签名。|3162027|$+/usr/bin/codesign+-f+-s+"iPhone+Developer:+Some+Body+(XXXXXXXXXX)"+--entitlements+entitlements.plist+Payload/MyApp.app|3162028|您现在可以重新压缩该应用程序。|3162029|$+zip+-qr+MyApp-resigned.ipa+Payload|3162030|Done|3162031|您现在可以删除Payload目录，因为您有原始应用程序(MyApp.ipa)和重新签名的版本(MyApp-resigned.ipa)。现在，您可以在预配配置文件中包含的任何设备上安装MyApp-resigned.ipa。|3162032|entityMap^0|0|0|E|0|0|0|8|0|0|0|0|0|0|0|D|0|0|0|B|8|K|I|0|0|0|0|0|F|S|S|0|0|0|0|0|0|0|4|0|7|7|0^^$0|@$1|2|3|4|5|6|7|1V|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1W|8|@$D|1X|E|1Y|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|1Z|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|20|8|@$D|21|E|22|F|G]]|9|@]|A|$]]|$1|L|3|M|5|6|7|23|8|@]|9|@]|A|$]]|$1|N|3|O|5|6|7|24|8|@]|9|@]|A|$]]|$1|P|3|Q|5|R|7|25|8|@]|9|@]|A|$S|T]]|$1|U|3|V|5|6|7|26|8|@]|9|@]|A|$]]|$1|W|3|X|5|R|7|27|8|@]|9|@]|A|$S|T]]|$1|Y|3|Z|5|6|7|28|8|@$D|29|E|2A|F|G]]|9|@]|A|$]]|$1|10|3|11|5|6|7|2B|8|@]|9|@]|A|$]]|$1|12|3|13|5|R|7|2C|8|@]|9|@]|A|$S|T]]|$1|14|3|15|5|6|7|2D|8|@$D|2E|E|2F|F|16]|$D|2G|E|2H|F|16]]|9|@]|A|$]]|$1|17|3|18|5|R|7|2I|8|@]|9|@]|A|$S|T]]|$1|19|3|1A|5|6|7|2J|8|@]|9|@]|A|$]]|$1|1B|3|1C|5|R|7|2K|8|@]|9|@]|A|$S|T]]|$1|1D|3|1E|5|6|7|2L|8|@$D|2M|E|2N|F|G]|$D|2O|E|2P|F|16]]|9|@]|A|$]]|$1|1F|3|1G|5|R|7|2Q|8|@]|9|@]|A|$S|T]]|$1|1H|3|1I|5|6|7|2R|8|@]|9|@]|A|$]]|$1|1J|3|1K|5|R|7|2S|8|@]|9|@]|A|$S|T]]|$1|1L|3|1M|5|6|7|2T|8|@]|9|@]|A|$]]|$1|1N|3|1O|5|R|7|2U|8|@]|9|@]|A|$S|T]]|$1|1P|3|1Q|5|6|7|2V|8|@$D|2W|E|2X|F|G]]|9|@]|A|$]]|$1|1R|3|1S|5|6|7|2Y|8|@$D|2Z|E|30|F|16]]|9|@]|A|$]]|$1|1T|3|-4|5|6|7|31|8|@]|9|@]|A|$]]]|1U|$]]

The answers to this question are a little out of date and missing potentially key steps, so this is an updated guide for installing an app from an external developer.
----- How to Resign an iOS App -----
Let's say you receive an app (e.g. MyApp.ipa) from another developer, and you want to be able to install and run it on your devices (by using ideviceinstaller, for example).
Prepare New Signing Assets
The first step is to attain a Provisioning Profile which includes all of the devices you wish to install and run on. Ensure that the profile contains a certificate that you have installed in your Keychain Access (e.g. iPhone Developer: Some Body (XXXXXXXXXX) ). Download the profile (MyProfile.mobileprovision) so you can replace the profile embedded in the app.
Next, we are going to prepare an entitlements file to include in the signing. Open up your terminal and run the following.
<pre><code>$ security cms -D -i path/to/MyProfile.mobileprovision &gt; provision.plist
</code></pre>
This will create an xml file describing your Provisioning Profile. Next, we want to extract the entitlements into a file.
<pre><code>$ /usr/libexec/PlistBuddy -x -c 'Print :Entitlements' provision.plist &gt; entitlements.plist
</code></pre>
Replace The Provisioning Profile and Resign App
If you are working with a .ipa file, first, unzip the app (if you have a .app instead, you can skip this step).
<pre><code>$ unzip MyApp.ipa
</code></pre>
Your working directory will now contain <code>Payload/</code> and <code>Payload/MyApp.app/</code>. Next, remove the old code signature files.
<pre><code>$ rm -rf Payload/MyApp.app/_CodeSignature
</code></pre>
Replace the existing provisioning profile (i.e. embedded.mobileprovision) with your own.
<pre><code>$ cp path/to/MyProfile.mobileprovision Payload/MyApp.app/embedded.mobileprovision
</code></pre>
IMPORTANT: You must also resign all frameworks included in the app. You will find these in <code>Payload/MyApp.app/Frameworks</code>. If the app is written in Swift or if it includes any additional frameworks these must be resigned or the app will install but not run.
<pre><code>$ /usr/bin/codesign -f -s &quot;iPhone Developer: Some Body (XXXXXXXXXX)&quot; --entitlements entitlements.plist Payload/MyApp.app/Frameworks/*
</code></pre>
Now sign the app with the certificate included in your provisioning profile and the entitlements.plist that you created earlier.
<pre><code>$ /usr/bin/codesign -f -s &quot;iPhone Developer: Some Body (XXXXXXXXXX)&quot; --entitlements entitlements.plist Payload/MyApp.app
</code></pre>
You can now rezip the app.
<pre><code>$ zip -qr MyApp-resigned.ipa Payload
</code></pre>
Done
You may now remove the <code>Payload</code> directory since you have your original app (MyApp.ipa) and your resigned version (MyApp-resigned.ipa). You can now install MyApp-resigned.ipa on any device included in your provisioning profile.

blocks|key|261230|text|有了Fastlane+sigh的辞职选项，你可以很容易地做到这一点。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|261231|sigh+resign+-p+<path-to-profile-with-mobileprovision-ext>+-i+<code-sighning-identity-of-your-app>|code-block|syntax|javascript|261232|您也可以在命令之前使用sigh下载配置文件。|261233|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

With Fastlane sigh's resign option you can do this very easily.

<pre><code>sigh resign -p &lt;path-to-profile-with-mobileprovision-ext&gt; -i &lt;code-sighning-identity-of-your-app&gt;
</code></pre>

You can download the profile using sigh also, just before the command.

blocks|key|262558|text|这些辞职方法对我来说都不管用，所以我不得不想出别的办法。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|262559|在我的例子中，我有一个证书过期的IPA。我可以重建应用程序，但因为我们想确保分发的是完全相同的版本(只是使用新证书)，所以我们不想重建它。|262560|我没有使用其他答案中提到的退出方法，而是转向了Xcode创建IPA的方法，该方法从构建的.xcarchive开始。|262561|262562|I复制了现有的.xcarchive并开始替换内容。(我忽略了.dSYM文件。)|ordered-list-item|262563|I从旧的IPA文件中提取旧的应用程序(通过解压缩；该应用程序是Payload文件夹中的唯一内容)|262564|我将此应用程序移动到新的.xcarchive中，位于Products/Applications下，替换存在的应用程序。|offset|length|style|CODE|262565|I编辑Info.plist，编辑代码<|262566|>G211|262567|-+`ApplicationProperties/ApplicationPath`
-+`ApplicationProperties/CFBundleIdentifier`
-+`ApplicationProperties/CFBundleShortVersionString`
-+`ApplicationProperties/CFBundleVersion`
-+`Name`|code-block|syntax|javascript|262568|​|262569|企业代码我将.xcarchive移动到Xcode的存档文件夹，通常是/Users/xxxx/Library/Developer/Xcode/Archives.|262570|In+Xcode，我打开管理器窗口，选择这个新的存档文件，并执行常规(在本例中为|unordered-list-item|262571|)导出。|262572|262573|262574|结果是一个很好的IPA可以工作。|262575|entityMap^0|0|0|0|0|0|0|Q|L|0|3|A|0|0|0|0|Y|18|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|1F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1G|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|1H|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|1I|8|@]|9|@]|A|$]]|$1|G|3|H|5|I|7|1J|8|@]|9|@]|A|$]]|$1|J|3|K|5|I|7|1K|8|@]|9|@]|A|$]]|$1|L|3|M|5|I|7|1L|8|@$N|1M|O|1N|P|Q]]|9|@]|A|$]]|$1|R|3|S|5|I|7|1O|8|@$N|1P|O|1Q|P|Q]]|9|@]|A|$]]|$1|T|3|U|5|6|7|1R|8|@]|9|@]|A|$]]|$1|V|3|W|5|X|7|1S|8|@]|9|@]|A|$Y|Z]]|$1|10|3|11|5|6|7|1T|8|@]|9|@]|A|$]]|$1|12|3|13|5|6|7|1U|8|@$N|1V|O|1W|P|Q]]|9|@]|A|$]]|$1|14|3|15|5|16|7|1X|8|@]|9|@]|A|$]]|$1|17|3|18|5|I|7|1Y|8|@]|9|@]|A|$]]|$1|19|3|-4|5|6|7|1Z|8|@]|9|@]|A|$]]|$1|1A|3|-4|5|6|7|20|8|@]|9|@]|A|$]]|$1|1B|3|1C|5|6|7|21|8|@]|9|@]|A|$]]|$1|1D|3|-4|5|6|7|22|8|@]|9|@]|A|$]]]|1E|$]]

None of these resigning approaches were working for me, so I had to work out something else.

In my case, I had an IPA with an expired certificate. I could have rebuilt the app, but because we wanted to ensure we were distributing exactly the same version (just with a new certificate), we did not want to rebuild it.

Instead of the ways of resigning mentioned in the other answers, I turned to Xcode’s method of creating an IPA, which starts with an .xcarchive from a build.

<ol>
<li>I duplicated an existing .xcarchive and started replacing the contents. (I ignored the .dSYM file.)</li>
<li>I extracted the old app from the old IPA file (via unzipping; the app is the only thing in the Payload folder)</li>
<li>I moved this app into the new .xcarchive, under <code>Products/Applications</code> replacing the app that was there.</li>
<li>I edited <code>Info.plist</code>, editing

<ul>
<li><code>ApplicationProperties/ApplicationPath</code></li>
<li><code>ApplicationProperties/CFBundleIdentifier</code></li>
<li><code>ApplicationProperties/CFBundleShortVersionString</code></li>
<li><code>ApplicationProperties/CFBundleVersion</code></li>
<li><code>Name</code></li>
</ul></li>
<li>I moved the .xcarchive into Xcode’s archive folder, usually <code>/Users/xxxx/Library/Developer/Xcode/Archives</code>.</li>
<li>In Xcode, I opened the Organiser window, picked this new archive and did a regular (in this case Enterprise) export.</li>
</ol>

The result was a good IPA that works.

blocks|key|259550|text|使用Mac+OS+High+Sierra和Xcode+10检查|type|unstyled|depth|inlineStyleRanges|entityRanges|data|259551|您可以简单地使用应用程序iResign来实现相同的功能。|offset|length|259552|给出1).ipa的路径|259553|2)新的配置文件|259554|3)授权文件(可选，仅当您有授权时才添加)|259555|4)捆绑id|259556|5)分发证书|259557|您可以看到重新签名后保存的输出.ipa文件|style|BOLD|259558|简单而强大的工具|259559|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/maciekish/iReSign^0|0|C|7|0|0|0|0|0|0|0|0|9|0|0^^$0|@$1|2|3|4|5|6|7|13|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|14|8|@]|9|@$D|15|E|16|1|17]]|A|$]]|$1|F|3|G|5|6|7|18|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|19|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|1A|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|1B|8|@]|9|@]|A|$]]|$1|N|3|O|5|6|7|1C|8|@]|9|@]|A|$]]|$1|P|3|Q|5|6|7|1D|8|@$D|1E|E|1F|R|S]]|9|@]|A|$]]|$1|T|3|U|5|6|7|1G|8|@]|9|@]|A|$]]|$1|V|3|-4|5|6|7|1H|8|@]|9|@]|A|$]]]|W|$X|$5|Y|Z|10|A|$11|12]]]]

<h2>Checked with Mac OS High Sierra and Xcode 10</h2>

You can simply implement the same using the application <a href="https://github.com/maciekish/iReSign" rel="nofollow noreferrer">iResign</a>.

Give path of 
1).ipa

2) New provision profile

3) Entitlement file (Optional, add only if you have entitlement) 

4) Bundle id

5) Distribution Certificate

You can see output .ipa file saved after re-sign

Simple and powerful tool

blocks|key|259565|text|我认为最简单的方法是使用Fastlane：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|259566|sudo+gem+install+fastlane+-NV
hash+-r+#+for+bash
rehash+#+for+zsh
fastlane+sigh+resign+./path/app.ipa+--signing_identity+"Apple+Distribution:+Company+Name"+-p+"my.mobileprovision"|code-block|syntax|javascript|259567|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

I think the easiest is to use Fastlane:
<pre><code>sudo gem install fastlane -NV
hash -r # for bash
rehash # for zsh
fastlane sigh resign ./path/app.ipa --signing_identity &quot;Apple Distribution: Company Name&quot; -p &quot;my.mobileprovision&quot;
</code></pre>

blocks|key|3162279|text|我尝试了所有的解决方案，但最终我能够使用这些命令创建+ipa|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|3162280|重新签名证书|3162281|3162282|*是ipa名称，也是应用程序名称$PROVISION是配置文件的路径$CERTIFICATE是密钥链中证书的名称全名(双击证书时为通用名称)|unordered-list-item|3162283|3162284|3162285|blockquote|3162286|3162287|3162288|转到要创建带有重新签名证书的新ipa的目录。Pase所有的文件在那里的ipa，证书和移动供应，并安装证书|ordered-list-item|3162289|3162290|3162291|security+cms+-D+-i+path+/to/MyProfile.MobileProvisioning>+provision.plist+(调用此命令并将移动预配替换为文件路径)|3162292|3162293|3162294|/usr/libexec/PlistBuddy+-x+-c‘打印:授权’provision.plist+>+entitlements.plist+(点击此命令)|3162295|3162296|3162297|解压缩-q+*.ipa|3162298|3162299|Payload/*.app/_CodeSignature/+|3162300|rm+-rf|3162301|3162302|3162303|/usr/libexec/PlistBuddy+Payload/*..app/info.plist(在此命令之后，我们必须添加新的包ID，如果我们不需要更改包id，则可以忽略这3个步骤)|3162304|3162305|7.++Set+:CFBundleIdentifier+“com.mycompany.newbundleidentifier”+(This+should+be+new+bundle+ID)
8.++save
9.++quit|code-block|syntax|javascript|3162306|3162307|3162308|3162309|Payload/*.app/embedded.mobileprovision的|3162310|cp+$PROVISION|3162311|3162312|3162313|协同设计-d+--授权:entitlements.plist有效负载/*.app/(如果应用程序不工作，请尝试忽略此命令，下次使用此命令)|3162314|3162315|3162316|+Payload/.app/Frameworks/|3162317|+-f+-s+"$CERTIFICATE“--entitlements+entitlements.plist+codesign|3162318|3162319|+Payload/*.app/|3162320|+-f+-s+"$CERTIFICATE“--entitlements+entitlements.plist+codesign|3162321|3162322|zip+-qr+resigned.ipa有效负载|3162323|3162324|https://stackoverflow.com/a/37172815+https://stackoverflow.com/a/50392448+https://coderwall.com/p/qwqpnw/resign-ipa-with-new-cfbundleidentifier-and-certificate|3162325|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/a/37172815|1|https://stackoverflow.com/a/50392448|2|https://coderwall.com/p/qwqpnw/resign-ipa-with-new-cfbundleidentifier-and-certificate^0|Q|4|0|0|6|0|0|0|1Y|0|0|0|0|0|0|0|1G|0|0|0|0|2M|0|0|0|0|28|0|0|0|0|B|0|0|0|U|0|0|6|0|0|0|0|2L|0|0|0|0|0|0|0|13|0|0|D|0|0|0|0|1X|0|0|0|0|P|0|0|1R|0|0|0|F|0|0|1R|0|0|0|O|0|0|0|10|11|10|22|2D|0|10|0|11|10|1|22|2D|2|0^^$0|@$1|2|3|4|5|6|7|2P|8|@$9|2Q|A|2R|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|2S|8|@$9|2T|A|2U|B|C]]|D|@]|E|$]]|$1|H|3|-4|5|6|7|2V|8|@]|D|@]|E|$]]|$1|I|3|J|5|K|7|2W|8|@$9|2X|A|2Y|B|C]]|D|@]|E|$]]|$1|L|3|-4|5|6|7|2Z|8|@]|D|@]|E|$]]|$1|M|3|-4|5|6|7|30|8|@]|D|@]|E|$]]|$1|N|3|-4|5|O|7|31|8|@]|D|@]|E|$]]|$1|P|3|-4|5|6|7|32|8|@]|D|@]|E|$]]|$1|Q|3|-4|5|6|7|33|8|@]|D|@]|E|$]]|$1|R|3|S|5|T|7|34|8|@$9|35|A|36|B|C]]|D|@]|E|$]]|$1|U|3|-4|5|6|7|37|8|@]|D|@]|E|$]]|$1|V|3|-4|5|6|7|38|8|@]|D|@]|E|$]]|$1|W|3|X|5|T|7|39|8|@$9|3A|A|3B|B|C]]|D|@]|E|$]]|$1|Y|3|-4|5|6|7|3C|8|@]|D|@]|E|$]]|$1|Z|3|-4|5|6|7|3D|8|@]|D|@]|E|$]]|$1|10|3|11|5|T|7|3E|8|@$9|3F|A|3G|B|C]]|D|@]|E|$]]|$1|12|3|-4|5|6|7|3H|8|@]|D|@]|E|$]]|$1|13|3|-4|5|6|7|3I|8|@]|D|@]|E|$]]|$1|14|3|15|5|T|7|3J|8|@$9|3K|A|3L|B|C]]|D|@]|E|$]]|$1|16|3|-4|5|6|7|3M|8|@]|D|@]|E|$]]|$1|17|3|18|5|6|7|3N|8|@$9|3O|A|3P|B|C]]|D|@]|E|$]]|$1|19|3|1A|5|T|7|3Q|8|@$9|3R|A|3S|B|C]]|D|@]|E|$]]|$1|1B|3|-4|5|6|7|3T|8|@]|D|@]|E|$]]|$1|1C|3|-4|5|6|7|3U|8|@]|D|@]|E|$]]|$1|1D|3|1E|5|T|7|3V|8|@$9|3W|A|3X|B|C]]|D|@]|E|$]]|$1|1F|3|-4|5|6|7|3Y|8|@]|D|@]|E|$]]|$1|1G|3|1H|5|1I|7|3Z|8|@]|D|@]|E|$1J|1K]]|$1|1L|3|-4|5|6|7|40|8|@]|D|@]|E|$]]|$1|1M|3|-4|5|O|7|41|8|@]|D|@]|E|$]]|$1|1N|3|-4|5|6|7|42|8|@]|D|@]|E|$]]|$1|1O|3|1P|5|6|7|43|8|@$9|44|A|45|B|C]]|D|@]|E|$]]|$1|1Q|3|1R|5|T|7|46|8|@$9|47|A|48|B|C]]|D|@]|E|$]]|$1|1S|3|-4|5|6|7|49|8|@]|D|@]|E|$]]|$1|1T|3|-4|5|6|7|4A|8|@]|D|@]|E|$]]|$1|1U|3|1V|5|T|7|4B|8|@$9|4C|A|4D|B|C]]|D|@]|E|$]]|$1|1W|3|-4|5|6|7|4E|8|@]|D|@]|E|$]]|$1|1X|3|-4|5|6|7|4F|8|@]|D|@]|E|$]]|$1|1Y|3|1Z|5|T|7|4G|8|@$9|4H|A|4I|B|C]]|D|@]|E|$]]|$1|20|3|21|5|6|7|4J|8|@$9|4K|A|4L|B|C]]|D|@]|E|$]]|$1|22|3|-4|5|6|7|4M|8|@]|D|@]|E|$]]|$1|23|3|24|5|T|7|4N|8|@$9|4O|A|4P|B|C]]|D|@]|E|$]]|$1|25|3|26|5|6|7|4Q|8|@$9|4R|A|4S|B|C]]|D|@]|E|$]]|$1|27|3|-4|5|6|7|4T|8|@]|D|@]|E|$]]|$1|28|3|29|5|T|7|4U|8|@$9|4V|A|4W|B|C]]|D|@]|E|$]]|$1|2A|3|-4|5|6|7|4X|8|@]|D|@]|E|$]]|$1|2B|3|2C|5|6|7|4Y|8|@$9|4Z|A|50|B|C]|$9|51|A|52|B|C]|$9|53|A|54|B|C]]|D|@$9|55|A|56|1|57]|$9|58|A|59|1|5A]|$9|5B|A|5C|1|5D]]|E|$]]|$1|2D|3|-4|5|6|7|5E|8|@]|D|@]|E|$]]]|2E|$2F|$5|2G|2H|2I|E|$2J|2K]]|2L|$5|2G|2H|2I|E|$2J|2M]]|2N|$5|2G|2H|2I|E|$2J|2O]]]]

I tried all the Solution but finally I am able to create resign ipa with these commands
Resign Certificates
<ul>
<li>*is the ipa name and also app name
$PROVISION is the path of the provision profile
$CERTIFICATE is the name of the certificate in key chain full name (Common name when double click on the certificate)</li>
</ul>
<blockquote>
<ol>
<li>Go the Directory where want to create the new ipa with resign certificates . Pase all the files there ipa, certificate and
mobileprovision and also install the certificate
</li>
<li>security cms -D -i path/to/MyProfile.mobileprovision &gt; provision.plist (Call this command and replace mobile provision with
path of the file)
</li>
<li>/usr/libexec/PlistBuddy -x -c 'Print :Entitlements' provision.plist &gt; entitlements.plist (Hit this command)
</li>
<li>unzip -q *.ipa
</li>
<li>rm -rf Payload/*.app/_CodeSignature/
</li>
<li>/usr/libexec/PlistBuddy Payload/*.app/Info.plist (After this command we have to add new bundle ID if we don’t need to change bundle
id Then we can ignore these 3 steps)
</li>
</ol>
</blockquote>
<pre><code>7. Set :CFBundleIdentifier “com.mycompany.newbundleidentifier” (This should be new bundle ID)
8. save
9. quit
</code></pre>
<blockquote>
<ol start="10">
<li>cp $PROVISION Payload/*.app/embedded.mobileprovision
</li>
<li>codesign -d --entitlements :entitlements.plist Payload/*.app/ (Try to ignore this command if app doesn’t work then next time use
this command)
</li>
<li>codesign -f -s &quot;$CERTIFICATE&quot; --entitlements entitlements.plist Payload/.app/Frameworks/
</li>
<li>codesign -f -s &quot;$CERTIFICATE&quot; --entitlements entitlements.plist Payload/*.app/
</li>
<li>zip -qr resigned.ipa Payload
</li>
</ol>
</blockquote>
<a href="https://stackoverflow.com/a/37172815">https://stackoverflow.com/a/37172815</a>
<a href="https://stackoverflow.com/a/50392448">https://stackoverflow.com/a/50392448</a>
<a href="https://coderwall.com/p/qwqpnw/resign-ipa-with-new-cfbundleidentifier-and-certificate" rel="nofollow noreferrer">https://coderwall.com/p/qwqpnw/resign-ipa-with-new-cfbundleidentifier-and-certificate</a>

blocks|key|262703|text|在2020年，我和Fastlane一起做到了-|type|unstyled|depth|inlineStyleRanges|entityRanges|data|262704|下面是我使用的命令|262705|$+fastlane+run+resign+ipa:"/Users/my_user/path/to/app.ipa"+signing_identity:"iPhone+Distribution:+MY+Company+(XXXXXXXX)"+provisioning_profile:"/Users/my_user/path/to/profile.mobileprovision"+bundle_id:com.company.new.bundle.name|code-block|syntax|javascript|262706|完整文档请点击此处-+https://docs.fastlane.tools/actions/resign/|offset|length|262707|entityMap|0|LINK|mutability|MUTABLE|url|https://docs.fastlane.tools/actions/resign/^0|0|0|0|B|17|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|V|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|W|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|X|8|@]|9|@$K|Y|L|Z|1|10]]|A|$]]|$1|M|3|-4|5|6|7|11|8|@]|9|@]|A|$]]]|N|$O|$5|P|Q|R|A|$S|T]]]]

In 2020, I did it with Fastlane -
Here is the command I used
<pre><code>$ fastlane run resign ipa:&quot;/Users/my_user/path/to/app.ipa&quot; signing_identity:&quot;iPhone Distribution: MY Company (XXXXXXXX)&quot; provisioning_profile:&quot;/Users/my_user/path/to/profile.mobileprovision&quot; bundle_id:com.company.new.bundle.name
</code></pre>
Full docs here - <a href="https://docs.fastlane.tools/actions/resign/" rel="nofollow noreferrer">https://docs.fastlane.tools/actions/resign/</a>

blocks|key|257309|text|如果您的应用是使用Flutter工具构建的，请检查所有pod扩展的codesign信息：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|257310|codesign+-d+--verbose=4+Runner.app/Frameworks/xxx.framework+%7C&+grep+'Authority='|code-block|syntax|javascript|257311|结果应该是您的团队的名称。|257312|运行下面的shell脚本以codesign所有扩展：|257313|IDENTITY=<prefix+of+Team+ID+number>
ENTITLEMENTS=<entitlements.plist>
find+Payload/Runner.app+-type+d+-name+'*framework'+%7C+xargs+-I+'{}'+codesign+-s+$IDENTITY+-f+--entitlements+$ENTITLEMENTS+{}+|257314|最后，不要忘了codesign+Runner.app本身|257315|entityMap^0|X|8|0|0|0|D|8|0|0|7|8|G|A|0^^$0|@$1|2|3|4|5|6|7|U|8|@$9|V|A|W|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|X|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|Y|8|@]|D|@]|E|$]]|$1|M|3|N|5|6|7|Z|8|@$9|10|A|11|B|C]]|D|@]|E|$]]|$1|O|3|P|5|H|7|12|8|@]|D|@]|E|$I|J]]|$1|Q|3|R|5|6|7|13|8|@$9|14|A|15|B|C]|$9|16|A|17|B|C]]|D|@]|E|$]]|$1|S|3|-4|5|6|7|18|8|@]|D|@]|E|$]]]|T|$]]

If your APP is built using Flutter tools, please examine the <code>codesign</code> info for all pod extensions:
<pre><code>codesign -d --verbose=4 Runner.app/Frameworks/xxx.framework |&amp; grep 'Authority='
</code></pre>
The result should be the name of your team.
Run the shell script below to <code>codesign</code> all extensions:
<pre><code>IDENTITY=&lt;prefix of Team ID number&gt;
ENTITLEMENTS=&lt;entitlements.plist&gt;
find Payload/Runner.app -type d -name '*framework' | xargs -I '{}' codesign -s $IDENTITY -f --entitlements $ENTITLEMENTS {} 
</code></pre>
And finally don't forget to <code>codesign</code> the <code>Runner.app</code> itself

blocks|key|3162417|text|您可以使用XReSign应用程序(一个简单的图形用户界面工具)重新签名您的ipa，我使用它重新签名我的企业分发应用程序，它工作得很好|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3162418|https://github.com/xndrs/XReSign|offset|length|3162419|你所需要的是|3162420|将分发证书分发到resign|3162421|mobileprovision|unordered-list-item|3162422|
|3162423|entitlements+(要生成授权，请查看下面的steps)|3162424|3162425|enterprise+|3162426|ordered-list-item|3162427|3162428|3162429|要生成授权，请执行以下操作：|3162430|开放终端|3162431|$+security+cms+-D+-i+"your_path/Enterprise_Distribution.mobileprovision"+>+provision.plist|code-block|syntax|javascript|3162432|然后|3162433|$+/usr/libexec/PlistBuddy+-x+-c+'Print+:Entitlements'+provision.plist+>+entitlements.plist|3162434|谢谢|3162435|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|W|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|1J|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1K|8|@]|9|@$D|1L|E|1M|1|1N]]|A|$]]|$1|F|3|G|5|6|7|1O|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|1P|8|@]|9|@]|A|$]]|$1|J|3|K|5|L|7|1Q|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|1R|8|@]|9|@]|A|$]]|$1|O|3|P|5|L|7|1S|8|@]|9|@]|A|$]]|$1|Q|3|N|5|6|7|1T|8|@]|9|@]|A|$]]|$1|R|3|S|5|L|7|1U|8|@]|9|@]|A|$]]|$1|T|3|-4|5|U|7|1V|8|@]|9|@]|A|$]]|$1|V|3|-4|5|6|7|1W|8|@]|9|@]|A|$]]|$1|W|3|-4|5|6|7|1X|8|@]|9|@]|A|$]]|$1|X|3|Y|5|6|7|1Y|8|@]|9|@]|A|$]]|$1|Z|3|10|5|6|7|1Z|8|@]|9|@]|A|$]]|$1|11|3|12|5|13|7|20|8|@]|9|@]|A|$14|15]]|$1|16|3|17|5|6|7|21|8|@]|9|@]|A|$]]|$1|18|3|19|5|13|7|22|8|@]|9|@]|A|$14|15]]|$1|1A|3|1B|5|6|7|23|8|@]|9|@]|A|$]]|$1|1C|3|-4|5|6|7|24|8|@]|9|@]|A|$]]]|1D|$1E|$5|1F|1G|1H|A|$1I|C]]]]

You can use XReSign app (a simple GUI tool) for re-signing your ipa, i used it for re-signing my enterprise distribution app and it worked fine
<a href="https://github.com/xndrs/XReSign" rel="nofollow noreferrer">https://github.com/xndrs/XReSign</a>
All you need is
<ol>
<li>ipa to resign</li>
<li>mobileprovision</li>
<li>entitlements (to generate entitlements please check the below steps)</li>
<li>enterprise distribution certificate</li>
</ol>
To generate entitlements:
Open up terminal
<pre><code>$ security cms -D -i &quot;your_path/Enterprise_Distribution.mobileprovision&quot; &gt; provision.plist
</code></pre>
then
<pre><code>$ /usr/libexec/PlistBuddy -x -c 'Print :Entitlements' provision.plist &gt; entitlements.plist
</code></pre>
Thanks

I currently build all my applications with hudson using xcodebuild followed by a xcrun without any problems

I've received a couple of IPA files from different people that I would like to re-sign with a enterprise account instead of the corporate account (for the app store, or sometimes ad-hoc distributed).

My problem is that when I try to resign the app, it won't install on my device (and it should since it's a Enterprise build). The error message is on the device (not in iTunes) and it tells me simply that it couldn't install the app. No more information is given.

I've found some information, ( <a href="http://www.ketzler.de/2011/01/resign-an-iphone-app-insert-new-bundle-id-and-send-to-xcode-organizer-for-upload/" rel="noreferrer">http://www.ketzler.de/2011/01/resign-an-iphone-app-insert-new-bundle-id-and-send-to-xcode-organizer-for-upload/</a> )

And this might be possible. The problem I'm facing is that it doesn't seem to embed the mobile provisioning profile as I do with my normal builds (using xcrun) is this possible to control with the codesign tool, or is it possible to re-sign with xcrun?

With my resign script i currently do

<ul>
<li>unzip app.ipa</li>
<li>appname=$(ls Payload)</li>
<li>xcrun -sdk iphoneos PackageApplication -s "$provisioning_profile" "$project_dir/Payload/$appname" -o "$project_dir/app-resigned.ipa" --sign "$provisioning_profile" --embed "$mobileprovision"</li>
</ul>

I've looked in the resulting ipa file and it seems to be very similar to the original app. What files should really change here? I initially thought the the _CodeSignature/CodeResources would change, but the content looks pretty much exactly the same.

Pointers are much appreciated.

Re-sign IPA (iPhone)

我目前使用hudson构建所有的应用程序，使用xcodebuild，然后使用xcrun，没有任何问题。我收到了几个来自不同人的IPA文件，我希望使用企业帐户而不是公司帐户重新签名(用于应用程序商店，有时也可以是临时分发的)。我的问题是，当我试图退出应用程序时，它不会安装在我的设备上(它应该安装在设备上，因为它是企业版的...

问重新签署国际和平协议(iPhone)
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问重新签署国际和平协议(iPhone)EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问重新签署国际和平协议(iPhone)
EN