howsigned 0.0.5 → 0.0.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: cf4dd4a0deaac92e79d35420262f1a0dfa1d773d
-  data.tar.gz: baa4a3d7c1983d2b2b6de872372b0163db049984
+  metadata.gz: 17c40520b69c7b9f1fb516b1a66accb3697cc921
+  data.tar.gz: e781a50820c86c58b5abadbf4ad9d5c6dade1881
 SHA512:
-  metadata.gz: 6aa842ee204e2e15164f1f2b522d9a914a3d75bb031a13f7d56096065c0721ba0aec917c29eb6dec1d3b725e74c29046d5439b88142679bfeb2fcc11aa7d2eb8
-  data.tar.gz: beccc641dd70075e5e1f0710992d40f2c744868f2c7feb600cb8e21ed493c982fdf09e84e998c951c274d4d8951695039aafb9b62fa7569ce48f40df330bb234
+  metadata.gz: 295222840b8ecfb190216b2c04fe1767771649078c1ddd4329efe8381327322c295e7e2a47dfed7ff767b150933f40937ec2b938d82900567563adce32bc8d1e
+  data.tar.gz: b205ccc89dee8ea4ef5dbfee027a85a3b20bc888c97d36fedc7f63b289945e7fb771cb83f6070f7b2bae2856a125c948e4b5b467e0a5b9c8f888a8a93a2e083c

data/bin/howsigned

@@ -6,7 +6,8 @@ require 'commander/import'
 require 'entitlements'
 require 'profiles'
 require 'verify'
+require 'compare'
 
-program :version, '0.0.5'
+program :version, '0.0.6'
 program :description, 'Utility to determine codesigning on contained binaries in an .ipa'
 

data/lib/compare.rb

@@ -0,0 +1,49 @@
+require 'plist'
+require 'zip'
+require 'zip/filesystem'
+require 'validate_ipa'
+require 'extract_zip'
+require 'entitlements'
+require 'profiles'
+
+def write_plist_to_path(plist, path)
+	File.write(path, plist)
+end
+
+command :compare do |c|
+  c.syntax = 'howsigned entitlements [.ipa file]'
+  c.description = 'Prints entitlements of specified .ipa in plist format'
+  c.action do |args, options|
+	first_file = validate_ipa(args.pop)
+	second_file = validate_ipa(args.pop)
+
+	first_tempdir = ::File.new(Dir.mktmpdir)
+	extract_zip(first_file, first_tempdir)
+
+	second_tempdir = ::File.new(Dir.mktmpdir)
+	extract_zip(second_file, second_tempdir)
+
+	first_entitlements = get_entitlements(first_tempdir.path)
+	second_entitlements = get_entitlements(second_tempdir.path)
+
+	first_profiles = get_profiles(first_tempdir.path)
+	second_profiles = get_profiles(second_tempdir.path)
+
+	temp_plist_dir = ::File.new(Dir.mktmpdir).path
+	write_plist_to_path(first_entitlements, "#{temp_plist_dir}/entitlements1.plist")
+	write_plist_to_path(second_entitlements, "#{temp_plist_dir}/entitlements2.plist")
+	write_plist_to_path(first_profiles, "#{temp_plist_dir}/profiles1.plist")
+	write_plist_to_path(second_profiles, "#{temp_plist_dir}/profiles2.plist")
+
+	entitlements_diff = `diff "#{temp_plist_dir}/entitlements1.plist" "#{temp_plist_dir}/entitlements2.plist"`
+	profiles_diff = `diff "#{temp_plist_dir}/profiles1.plist" "#{temp_plist_dir}/profiles2.plist"`
+
+	if (entitlements_diff.length > 0)
+		puts entitlements_diff
+	end
+
+	if (profiles_diff.length > 0)
+		puts profiles_diff
+	end
+  end
+end

data/lib/entitlements.rb

@@ -9,35 +9,42 @@ require 'extract_zip'
 require 'contained_binaries_definition'
 
 def append_entitlements(path, entitlements_hash)
+	index = 0
 	Dir.glob(path) do |file|
 		entitlements = `codesign -d --entitlements :- "#{file}" 2>&1`
 		plist_entitlements = Plist::parse_xml(entitlements)
-		application_identifier = plist_entitlements["application-identifier"]
-		entitlements_hash[application_identifier] = plist_entitlements
+		if (plist_entitlements)
+			application_identifier = plist_entitlements["application-identifier"] ? plist_entitlements["application-identifier"] : index.to_s
+			entitlements_hash[application_identifier] = plist_entitlements
+			index = index + 1
+		end
 	end
 end
 
-command :entitlements do |c|
-  c.syntax = 'howsigned entitlements [.ipa file]'
-  c.description = 'Prints entitlements of specified .ipa in plist format'
-  c.action do |args, options|
-  	validate_ipa! unless @file = args.pop
-	puts "Missing or unspecified .ipa file" and abort unless @file and ::File.exist?(@file)
-
-	tempdir = ::File.new(Dir.mktmpdir)
-	extract_zip(@file, tempdir)
-
+def get_entitlements(tempdir_path)
 	entitlements_hash = Hash.new
 
 	contained_binary_extensions().each { |extension|
-		append_entitlements("#{tempdir.path}/**/*.#{extension}", entitlements_hash)
+		append_entitlements("#{tempdir_path}/**/*.#{extension}", entitlements_hash)
 	}
 
 	if (entitlements_hash.length == 0)
 		abort "No entitlements found on contained binaries"
 	end
 
-	puts entitlements_hash.to_plist
+	return entitlements_hash.to_plist
+end
+
+command :entitlements do |c|
+  c.syntax = 'howsigned entitlements [.ipa file]'
+  c.description = 'Prints entitlements of specified .ipa in plist format'
+  c.action do |args, options|
+	file = validate_ipa(args.pop)
+
+	tempdir = ::File.new(Dir.mktmpdir)
+	extract_zip(file, tempdir)
+
+	puts get_entitlements(tempdir.path)
   end
 end
 

data/lib/profiles.rb

@@ -4,13 +4,22 @@ require 'zip/filesystem'
 require 'validate_ipa'
 require 'extract_zip'
 
-def get_profiles(path)
+def get_profiles(tempdir_path, only_expiration)
+	path = "#{tempdir_path}/**/*.mobileprovision"
 	profiles = Hash.new
+	index = 0
 	Dir.glob(path) do |file|
 		profile = `security cms -D -i "#{file}" 2>&1`
 		plist_profile = Plist::parse_xml(profile)
-		app_id = plist_profile["AppIDName"]
-		profiles[app_id] = plist_profile
+		if plist_profile
+			app_id = plist_profile["AppIDName"] ? plist_profile["AppIDName"] : index.to_s
+			if only_expiration
+				profiles[app_id] = plist_profile["ExpirationDate"]
+			else
+				profiles[app_id] = plist_profile
+			end
+			index = index + 1
+		end
 	end
 
 	if (profiles.length == 0)
@@ -22,14 +31,15 @@ end
 command :profiles do |c|
   c.syntax = 'howsigned profiles [.ipa file]'
   c.description = 'Prints embedded profiles of specified .ipa in plist format'
+  c.option '--expiration', "When specified, will print only the expiration dates of embedded profiles"
   c.action do |args, options|
-  	validate_ipa! unless @file = args.pop
-	puts "Missing or unspecified .ipa file" and abort unless @file and ::File.exist?(@file)
+	file = validate_ipa(args.pop)
+	only_expiration = options.expiration || false
 
 	tempdir = ::File.new(Dir.mktmpdir)
-	extract_zip(@file, tempdir)
+	extract_zip(file, tempdir)
 
-	puts get_profiles("#{tempdir.path}/**/*.mobileprovision")
+	puts get_profiles(tempdir.path, only_expiration)
   end
 end
 

data/lib/validate_ipa.rb

@@ -1,9 +1,4 @@
-def validate_ipa!
-files = Dir['*.ipa']
-@file ||= case files.length
-		  when 0 then nil
-		  when 1 then files.first
-		  else
-		     @file = choose "Select an .ipa", *files
-		  end
+def validate_ipa(file)
+	puts "Missing or unspecified .ipa file" and abort unless file and ::File.exist?(file)
+	return file
 end

data/lib/verify.rb

@@ -18,11 +18,10 @@ command :verify do |c|
   c.syntax = 'howsigned verify [.ipa file]'
   c.description = 'Verifies the code signature of all binaries contained within the .ipa, will return nothing if signed correctly'
   c.action do |args, options|
-  	validate_ipa! unless @file = args.pop
-	puts "Missing or unspecified .ipa file" and abort unless @file and ::File.exist?(@file)
+	file = validate_ipa(args.pop)
 
 	tempdir = ::File.new(Dir.mktmpdir)
-	extract_zip(@file, tempdir)
+	extract_zip(file, tempdir)
 
 	entitlements_hash = Hash.new
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: howsigned
 version: !ruby/object:Gem::Version
-  version: 0.0.5
+  version: 0.0.6
 platform: ruby
 authors:
 - Michael MacDougall
@@ -60,6 +60,7 @@ extensions: []
 extra_rdoc_files: []
 files:
 - bin/howsigned
+- lib/compare.rb
 - lib/contained_binaries_definition.rb
 - lib/entitlements.rb
 - lib/extract_zip.rb