ipa_utilities 0.1.1 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 9e13259f8182417c57a41a855b35bee4057c4f3c
-  data.tar.gz: c1f39537267fef3e907a225600b3cc8be3ef20e2
+  metadata.gz: 1ba9f6d65508ffbc1081de8722d3221acac0fb04
+  data.tar.gz: cc6b0c445643c336bf89807db765b68eb8c5bb30
 SHA512:
-  metadata.gz: 77a59e4dd5264869c433135378d000bd680b6af3bdee03fdd77ab7ea8d5fbbfab134ae41b7e5a2bfab3e98d7e8301206d94f701a96211066cb5f6af5a9686044
-  data.tar.gz: b8e511c4c71fb3888075dfa13d54d34d8e45072d21a7af788fa44c42a571c47aeea7d37f6bf92c26381af7c1ae9f29628a6263e4da959195b5c09fc6680f3d87
+  metadata.gz: 3eae0dfbcad611559f0cf5b4ead71f77985ec3ee9eb68c2e028d3b0de9341d424a3d40633c5ca991fbe4ccc5f27b6cc3aab7a094f87c263237302f98869decb3
+  data.tar.gz: 76b01af89335e76caef632bfb6a2c1d7fde9ab91fd276ef7c2a2764f9ac55c9f2ab547f0fb1455d77df791c7020bcd7a4a56a5a718c6ccf5424d43903680c21b

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    ipa_utilities (0.0.1)
+    ipa_utilities (0.2.0)
       CFPropertyList (~> 2.2)
       colorize (~> 0.7)
       commander (~> 4.1)
@@ -11,8 +11,8 @@ GEM
   remote: https://rubygems.org/
   specs:
     CFPropertyList (2.2.8)
-    colorize (0.7.3)
-    commander (4.2.0)
+    colorize (0.7.5)
+    commander (4.2.1)
       highline (~> 1.6.11)
     highline (1.6.21)
     json (1.8.1)

data/bin/ipa_utilities

@@ -7,6 +7,10 @@ require 'ipa_utilities'
 HighLine.track_eof = false
 Signal.trap("INT") {}
 
+$verbose = false
+global_option('--verbose') { $verbose = true }
+
+
 program :version, IpaVersion::VERSION
 program :description, 'A command-line interface for dealing with ipas'
 
@@ -14,136 +18,54 @@ program :help, 'Author', 'Omar Abdelhafith <o.arrabi@me.com>'
 program :help, 'Website', 'http://nsomar.com'
 program :help_formatter, :compact
 
-global_option('--verbose') { $verbose = true }
-$verbose = true
-
 default_command :help
 
 command :verify do |c|
-  c.syntax = 'ipa_utils verify ipa_path [...]'
+  c.syntax = 'ipa_utilities verify ipa_path [...]'
   c.summary = 'Verifies the ipa provision and signature information'
 
-  c.example 'description', 'ipa_utils verify ipa_path'
+  c.example 'description', 'ipa_utilities verify ipa_path'
   c.option '-c', '--certificate certificate', 'Path of the push notification PEM certificate'
-  c.option '-d', '--device udid', 'UDID of device to check if its included in embedded provision profile'
+  c.option '-d', '--device UDID', 'UDID of device to check if its included in embedded provision profile'
+  c.option '--devices', 'Show all the devices included in the provision profile'
 
   c.action do |args, options|
-
-    path = checkArgs args, "ipa"
-    exit unless path
-
-    certificate = options.certificate
-    device = options.device
-
     begin
-      errors = 0
-      puts
-
-      ipa = IpaUtilities.new path
-      ipa.unzipAndParse
-
-      parser = ipa.provisionParser
-
-      puts "Reading general information"
-      puts "Application Bundle ID " + parser.appBundleID.green
-      puts "APNS Enviroment: " + parser.apnsEnviroment.green
-      puts "App Enviroment: " + parser.buildEnviroment.green
-      puts
-
-      puts "Verifying bundle signature " + ipa.verifyCodeSign
-
-      status = parser.isAPNSandAppSameEnviroment ? "Yes".green : "No".red
-      puts "Checking embedde provision profile APNS Entitlement vs App enviroments"
-      puts "Is App and APNS on same enviroment: " + status
-
-      if parser.isAPNSandAppSameEnviroment
-        gateway = parser.isAPNSProduction ? "gateway.push.apple.com:2195".green : "gateway.sandbox.push.apple.com:2195".green
-        puts "APNS connection gateway: " + gateway
-      else
-        appStatus = parser.isBuildRelease ? "false (Release)" : "true (debug)"
-        apnStatus = parser.apnsEnviroment
-        puts "The application was build with get-task-allow set to #{appStatus} while the aps-environment is set to #{apnStatus}, To fix this issue regenerated the provision profile from apple developer then rebuild the app using it".red
-        errors += 1
-      end
-
-      if certificate
-        puts
-        puts "Checking certificates"
-        # puts parser.signingIdentities
-        pem = PemParser.new certificate
-
-        if pem.isAPNS
-          puts "Certificate Name " + pem.name.green
-          puts "Certificate Enviroment: " + "#{pem.enviroment}".green
-          puts "Certificate Bundle ID: " + "#{pem.bundleID}".green
-
-          status = parser.appBundleID == pem.bundleID ? "Yes".green : "No".red
-          errors += 1 if parser.appBundleID != pem.bundleID
-
-          puts "Certificate bundleId identical to app #{status}"
-
-          status = pem.isProduction == parser.isAPNSProduction ? "Yes".green : "No".red
-          puts "Is provided certificate correct for passed ipa: " + status
-
-          if pem.isProduction != parser.isAPNSProduction
-            puts "The application was build with a provision profile containing aps-environment in #{apnStatus} enviroment while the passed certificate environment is set to #{pem.enviroment}\nTo fix this issue either export the correct iOS Push #{pem.enviroment} certificate from keychain or rebuild your app with the correct provision profile".red
-            errors += 1
-          end
-        else
-          apnStatus = parser.apnsEnviroment
-          puts "The passed certificate is not an APNS certificate".red
-          errors += 1
-        end
-
-      end
-
-      if device
-        puts
-        puts "Checking provisioned devices"
-
-        if parser.isBuildDistro
-          puts "Distribution build do not contain provisioned devices".red
-          errors += 1
-        else
-          puts "Embedded profile contains " + "#{parser.provisionedDevices.count}".green + " devices"
-          status = parser.provisionedDevices.include?(device) ? "Device with UDID #{device} found".green :
-            "Device with UDID #{device} not found".red
-          puts status
-          errors += 1 if !parser.provisionedDevices.include?(device)
-        end
-      end
+      ipa = IpaParser.new(parse_path(args, "ipa"))
 
-      puts
-      puts "No errors encountered".green if errors == 0
-      puts "#{errors} errors encountered!".red if errors > 0
+      print_app_bundle(ipa)
+      print_provision_profile(ipa.provision_profile, ipa.info_plist)
+      verify_certificates(ipa.provision_profile, options.certificate) if options.certificate
+      print_provisioned_devices(ipa.provision_profile) if options.devices
+      search_udid(ipa.provision_profile, options.device) if options.device
 
+    rescue Exception => err
+      say_error err.message
     ensure
-      ipa.cleanUp
+      ipa.cleanup
     end
   end
 end
 
 command :convert do |c|
-  c.syntax = 'ipa_utils convert p12_path [...]'
+  c.syntax = 'ipa_utilities convert p12_path [...]'
   c.summary = 'Convert a p12 to PEM'
 
-  c.example 'description', 'ipa_utils convert p12_file_path'
-  c.option '-o', '--out outpath', 'Out put file for the Pem file'
-  # c.option '-d', '--device udid', 'UDID of device to check if its included in embedded provision profile'
+  c.example 'description', 'ipa_utilities convert p12_file_path'
+  c.option '-o', '--out output_path', 'Out put file for the Pem file'
 
   c.action do |args, options|
 
-    path = checkArgs args, "p12"
+    path = parse_path(args, "p12")
     exit unless path
 
-    outpath = options.out || "~/Desktop/out.pem"
+    output_path = options.out || "~/Desktop/out.pem"
 
     begin
 
-      puts
-      puts "Converting P12 to Pem"
-      system "openssl pkcs12 -in #{path} -out #{outpath} -nodes -clcerts"
-      puts "Pem saved at " + outpath.green
+      puts "\nConverting P12 to Pem"
+      system "openssl pkcs12 -in #{path} -out #{output_path} -nodes -clcerts"
+      output("Pem saved at ", output_path)
 
     ensure
 
@@ -152,105 +74,176 @@ command :convert do |c|
 end
 
 command :certificate do |c|
-  c.syntax = 'ipa_utils certificate ipa [...]'
+  c.syntax = 'ipa_utilities certificate ipa [...]'
   c.summary = 'fetch the correct push identity from the provided ipa (WIP)'
 
-  c.example 'description', 'ipa_utils certificate ipa_path (WIP)'
+  c.example 'description', 'ipa_utilities certificate ipa_path (WIP)'
 
   c.action do |args, options|
 
-    path = checkArgs args, "ipa"
+    path = parse_path args, "ipa"
     exit unless path
 
     begin
-      #Todo
-      puts
-      ipa = IpaUtilities.new path
-      ipa.unzipAndParse
-      parser = ipa.provisionParser
+      ipa = IpaParser.new path
 
-      apnsEnviroment = parser.isAPNSProduction ? "Production" : "Development"
-      identityName = "Apple #{apnsEnviroment} IOS Push Services: #{parser.appBundleID}"
+      apns_environment = ipa.provision_profile.production_apns? ? "Production" : "Development"
+      identity_name = "Apple #{apns_environment} IOS Push Services: #{ipa.provision_profile.bundle_id}"
 
-      puts "Searching Keychain for identity " + identityName.green
+      output("Searching Keychain for identity ", identity_name)
 
       identities = `security find-identity -v -p ssl-client`
-      puts "Item found please export it from your keychain".green if identities.lines.index{|s| s.include?(identityName)}
-      puts "Item couldnt be found in your keychain".red if !identities.lines.index{|s| s.include?(identityName)}
 
+      if identities.lines.index { |s| s.include?(identity_name) }
+        puts "Item found please export it from your keychain".green
+      else
+        puts "Item couldn't be found in your keychain".red
+      end
     ensure
-      ipa.cleanUp
+      ipa.cleanup
     end
   end
 end
 
 command :resign do |c|
-  c.syntax = 'ipa_utils resign ipa -p new_profile'
+  c.syntax = 'ipa_utilities resign ipa -p new_profile'
   c.summary = 'Resigns the passed ipa to the new passed profile'
 
-  c.example 'description', 'ipa_utils certificate ipa_path -p profile'
-  c.option '-p', '--profile profile', 'Path of the provision profile to use'
-  c.option '-o', '--out outpath', 'Out put file for the Pem file'
+  c.example 'description', 'ipa_utilities certificate ipa_path -p profile'
+  c.option '-p', '--profile profile_path', 'Path of the provision profile to use'
+  c.option '-i', '--identity Identity_name', 'The identity name'
+  c.option '-b', '--bundle bundle_identifier', 'The new bundle identifier'
+  c.option '-o', '--out output_path', 'Out put file for the Pem file'
 
   c.action do |args, options|
+    begin
+      path = parse_path(args, "ipa")
 
-    puts
+      raise "identity name is required with -i" unless options.identity
 
-    path = checkArgs args, "ipa"
-    exit unless path
+      signer = CodeSigner.new(ipa_path: path,
+                              identity: options.identity,
+                              profile: options.profile,
+                              bundle_id: options.bundle,
+                              output_path: options.out)
+      signer.resign
 
-    profile = options.profile
-    if !profile
-      say_error "pass a profile with -p profile-path"
-      exit
+    rescue Exception => err
+      say_error err.message
     end
+  end
+end
 
-    exit unless checkFileExists "provision profile", profile
-
-    outpath = options.out || "~/Desktop/resigned.ipa"
+def parse_path(args, title)
+  raise "Path to #{title} is required" if args.nil? || args.empty?
+  path = args.first
+  raise "Couldn't find #{title} with path #{path}" unless File.exist?(path)
 
-    begin
+  path
+end
 
-      ipa = IpaUtilities.new path
+def print_app_bundle(ipa)
+  puts "______Bundle information______"
+  output("App bundle name: ", ipa.bundle_name)
+  output("App display name: ", ipa.info_plist.display_name)
+  output("Verifying app bundle signature: ", "Signature Valid", "Signature Not Valid",
+         CodeSigner.signature_valid?(ipa))
 
-      ipa.unzipAndParse
-      ipa.deleteOldSignature
+end
 
-      parser = ipa.provisionParser
+def verify_certificates(provision_profile, apns_certificate_path)
+  puts "\n______Checking certificates______"
 
-      puts "Copying the new provision profile to app bundle"
-      system "cp \"#{profile}\" \"Payload/#{ipa.bundleName}/embedded.mobileprovision\""
+  apns_certificate = SigningIdentity.new(apns_certificate_path)
 
-      puts "Writing Entitlements.plist"
-      File.write "Entitlements.plist", parser.entitlementForSigning
+  if apns_certificate.apns?
+    output("Certificate name: ", apns_certificate.name)
+    output("Certificate environment: ", apns_certificate.environment)
+    output("Certificate bundle id: ", apns_certificate.bundle_id)
 
-      buildName = parser.isBuildRelease ? "Distribution" : "Development"
-      system "codesign -s \"iPhone #{buildName}: #{parser.teamName} (#{parser.teamIdentifier})\" --entitlements Entitlements.plist \"Payload/DummyApp.app\" -f"
+    output("Certificate bundleId identical to App bundleId: ", "Yes", "No",
+           apns_certificate.bundle_id == provision_profile.bundle_id)
 
-      puts
-      ipa.zip outpath
+    same_environment = apns_certificate.production? == provision_profile.production_apns?
+    output("Provided certificate correct for the ipa: ", "Yes", "No", same_environment)
 
-    ensure
-      ipa.cleanUp
+    unless same_environment
+      puts %{\
+The application was build with a provision profile containing aps-environment \
+in `#{provision_profile.environment}` environment while the passed certificate environment is set \
+to `#{apns_certificate.environment}`\
+           \nTo fix this issue either export the correct \
+iOS Push `#{apns_certificate.environment}` certificate from keychain or rebuild your app \
+with the correct provision profile}.red
     end
+  else
+    puts "The passed certificate is not an APNS certificate".red
   end
 end
 
-def checkArgs args, title
-  if args.nil? || args.empty?
-    say_error "Path to #{title} is required"
-    return nil
+def search_udid(provision_profile, device_udid)
+  puts "\n______Searching provisioned device______"
+
+  if provision_profile.app_store_build?
+    puts "Distribution build do not contain provisioned devices".red
+  else
+    output("Number of embedded devices: ", provision_profile.provisioned_devices.count.to_s)
+    output("Device with UDID `#{device_udid}`: ", "Yes", "No",
+           provision_profile.provisioned_devices.include?(device_udid))
   end
+end
 
-  checkFileExists title, args.first
+def print_provisioned_devices(provision_profile)
+  puts "\n______Provisioned devices______"
+
+  output("Number of embedded devices: ", provision_profile.provisioned_devices.count.to_s)
+  puts provision_profile.provisioned_devices
 end
 
-def checkFileExists title, path
+def check_bundle_id(provision_profile, info_plist)
+  output("InfoPlist App bundle id: ", info_plist.bundle_id)
+  output("Profile App bundle id: ", provision_profile.bundle_id)
+  output("InfoPlist bundle id matches Profile bundle id: ", "Yes", "No",
+         info_plist.bundle_id == provision_profile.bundle_id)
+end
 
-  if !File.exist?path
-    say_error "Couldn't find #{title} with path #{path}"
-    return nil
-  end
+def print_provision_profile(provision_profile, info_plist)
+  puts "\n______Provision profile information______"
+  output("Team name: ", provision_profile.team_name)
+  output("Profile display name: ", provision_profile.display_name)
+  check_bundle_id(provision_profile, info_plist)
 
-  path
+  puts "\n______Build environments______"
+  output("App environment: ", provision_profile.build_environment)
+  output("APNS environment: ", provision_profile.apns_environment)
+
+  output("App and APNS on same environment: ", "Yes", "No",
+         provision_profile.apns_and_app_same_environment?)
+
+  output("APNS connection gateway: ", provision_profile.apns_gateway)
+
+  unless provision_profile.apns_and_app_same_environment?
+    puts %{\
+The application was build with get-task-allow set to `#{provision_profile.task_allow?}` while \
+the aps-environment is set to `#{provision_profile.apns_environment}`, To fix this issue regenerated \
+the provision profile from apple developer then rebuild the app using it}.red
+  end
 end
+
+def output(*args)
+  label = args.first
+
+  if args.count == 2
+    success_string = failure_string = args[1]
+    status = true
+  elsif args.count == 3
+    success_string = failure_string = args[1]
+    status = args[2]
+  elsif args.count == 4
+    success_string = args[1]
+    failure_string = args[2]
+    status = args[3]
+  end
+
+  puts label + (status ? success_string.green : failure_string.red)
+end

data/lib/ipa_utilities.rb

@@ -1,3 +1,4 @@
-require "ipa_utilities/IpaUtilities"
-require "ipa_utilities/Parsers"
+require "ipa_utilities/ipa_parser"
+require "ipa_utilities/parsers"
 require "ipa_utilities/version"
+require "ipa_utilities/code_signer"

data/lib/ipa_utilities/code_signer.rb

@@ -0,0 +1,66 @@
+class CodeSigner
+
+  def initialize(options)
+    @ipa_path = check_file_exist(options[:ipa_path], "Cannot find file at '%s'",)
+    @profile = check_file_exist(options[:profile], "Cannot find file at '%s'") if options[:profile]
+
+    @output_path = options[:output_path] || "~/Desktop/resigned.ipa"
+
+    @identity = check_non_nil(options[:identity], "Identity cannot be nil")
+    @bundle_id = options[:bundle_id]
+  end
+
+  def self.signature_valid?(ipa)
+    system("codesign -v #{ipa.app_path} 2>&1")
+    $?.exitstatus == 0
+  end
+
+  def resign
+    ipa = IpaParser.new(@ipa_path)
+    @app_path = ipa.app_path
+
+    delete_old_signature
+    embed_profile
+    update_bundle_id(ipa.info_plist)
+
+    cmd = "codesign -s '#{@identity}' '#{ipa.app_path}' -f"
+    puts cmd if $verbose
+    system(cmd)
+    ipa.zip(@output_path)
+    ipa.cleanup
+  end
+
+  def update_bundle_id(info_plist)
+    return unless @bundle_id
+
+    puts "Applying new bundle id '#{@bundle_id.green}'"
+    info_plist.bundle_id = @bundle_id
+    info_plist.save
+  end
+
+  private
+
+  def embed_profile
+    return unless @profile
+
+    puts "Copying the new provision profile to app bundle"
+    system "cp \"#{@profile}\" \"#{@app_path}/embedded.mobileprovision\""
+  end
+
+  def delete_old_signature
+    system "rm -rf #{@app_path}/_CodeSignature"
+    puts "Deleting old code sign file" if $verbose
+  end
+
+  def check_non_nil(string, error)
+    raise error unless string
+    string
+  end
+
+  def check_file_exist(file, error)
+    file_path = file || ""
+    raise error%file_path unless File.exist?(file_path)
+    file
+  end
+
+end

data/lib/ipa_utilities/ipa_parser.rb

@@ -0,0 +1,112 @@
+require 'cfpropertylist'
+require 'base64'
+require 'colorize'
+require 'ipa_utilities/parsers'
+require 'tmpdir'
+
+class IpaParser
+
+  attr_reader :provision_profile, :info_plist, :ipa_path
+
+  def initialize(ipa_path)
+    @ipa_path = ipa_path
+    unzip_and_parse
+  end
+
+  def bundle_name
+    File.basename(app_path)
+  end
+
+  def app_path
+    Dir["Payload/*.app"].last
+  end
+
+  def info_plist_path
+    app_path + "/Info.plist"
+  end
+
+  def zip(path)
+    say "Zipping " + @ipa_path.green if $verbose
+    system "zip -qr \"_new.ipa\" Payload"
+    system "cp _new.ipa #{path}"
+    say "Resigned ipa saved at " + path.green
+  end
+
+  def cleanup
+    system "rm -rf #{zip_out_path}"
+    say "Deleting directory #{zip_out_path}" if $verbose
+  end
+
+  private
+
+  def generate_entitlements(new_bundle_id = nil)
+    puts "\nGenerating Entitlements.plist"
+    File.write("Entitlements.plist", provision_profile.signing_entitlement(new_bundle_id))
+  end
+
+  def unzip_and_parse
+    unzip
+    parse
+  end
+
+  def unzip
+    say "Unzipping '#{@ipa_path.green}' to '#{zip_out_path}'"  if $verbose
+    system "unzip #{@ipa_path} -d #{zip_out_path} | logger -t ipa_utilities"
+
+    change_directory
+  end
+
+  def change_directory
+    puts "Changing directory: " + "'#{zip_out_path}'\n".green if $verbose
+    FileUtils.chdir(zip_out_path)
+  end
+
+  def parse
+    provision_path = "Payload/#{bundle_name}/embedded.mobileprovision"
+    say "Reading provision profile: "+ provision_path.green + "\n" if $verbose
+
+    @provision_profile = ProvisionProfile.new(provision_path)
+    @info_plist = InfoPlist.new(info_plist_path)
+  end
+
+  def zip_out_path
+    @zip_out_path ||= Dir.mktmpdir
+  end
+
+  def base_path
+    File.dirname(@ipa_path)
+  end
+
+  def ipa_name
+    File.basename(@ipa_path)
+  end
+
+end
+
+class InfoPlist
+
+  def initialize(path)
+    @path = path
+    plist = CFPropertyList::List.new(:file => path)
+    @data = CFPropertyList.native_types(plist.value)
+  end
+
+  def bundle_id
+    @data["CFBundleIdentifier"]
+  end
+
+  def display_name
+    @data["CFBundleDisplayName"]
+  end
+
+  def bundle_id=(bundle)
+    @data["CFBundleIdentifier"] = bundle
+  end
+
+  def save
+    plist = CFPropertyList::List.new(:file => @path)
+    plist.value = CFPropertyList.guess(@data)
+    plist.save(@path, CFPropertyList::List::FORMAT_BINARY)
+  end
+
+end

data/lib/ipa_utilities/parsers.rb

@@ -0,0 +1,151 @@
+class SigningIdentity
+
+  def initialize(name)
+    @identity = name
+  end
+
+  def self.from_base64(base64)
+    string = "-----BEGIN CERTIFICATE-----\n"
+    string += base64
+    string += "-----END CERTIFICATE-----"
+
+    File.write("cer.pem", string)
+
+    pem = `openssl x509 -text -in cer.pem`
+
+    system "rm -rf cer.pem"
+
+    SigningIdentity.new(pem[/CN=(.*?),/, 1])
+  end
+
+  def self.from_file(file)
+    pem = `openssl x509 -text -in #{file}`
+    SigningIdentity.new(pem[/CN=(.*?),/, 1])
+  end
+
+  def name
+    @identity
+  end
+
+  def apns?
+    @identity.include?("IOS Push Services")
+  end
+
+  def production?
+    !@identity[/[Development|Developer]/]
+  end
+
+  def environment
+    if apns?
+      production? ? "Production" : "Development (Sandbox)"
+    else
+      production? ? "Production" : "Development"
+    end
+  end
+
+  def display_name
+    @identity[/: (.*?)$/, 1]
+  end
+
+end
+
+class ProvisionProfile
+
+  def initialize(provision_path)
+    @provision_path = provision_path
+    @data = CFPropertyList.native_types(read_profile)
+  end
+
+  def uuid
+    @data["UUID"]
+  end
+
+  def signing_identities
+    certificates.map { |identity| SigningIdentity.from_base64(Base64.encode64(identity)) }
+  end
+
+  def certificates
+    @data["DeveloperCertificates"]
+  end
+
+  def provisioned_devices
+    @data["ProvisionedDevices"]
+  end
+
+  def production_apns?
+    @data["Entitlements"]["aps-environment"] == "production"
+  end
+
+  def release_build?
+    !@data["Entitlements"]["get-task-allow"]
+  end
+
+  def task_allow?
+    @data["Entitlements"]["get-task-allow"]
+  end
+
+  def app_store_build?
+    provisioned_devices.nil?
+  end
+
+  def apns_and_app_same_environment?
+    release_build? == production_apns?
+  end
+
+  def bundle_id
+    identifier = @data["Entitlements"]["application-identifier"]
+    identifier[/#{team_identifier}\.(.*)/, 1]
+  end
+
+  def team_name
+    @data["TeamName"]
+  end
+
+  def display_name
+    @data["Name"]
+  end
+
+  def team_identifier
+    @data["Entitlements"]["com.apple.developer.team-identifier"]
+  end
+
+  def apns_environment
+    production_apns? ? "Production" : "Development (Sandbox)"
+  end
+
+  def apns_gateway
+    production_apns? ? "gateway.push.apple.com:2195" : "gateway.sandbox.push.apple.com:2195"
+  end
+
+  def build_environment
+    if release_build?
+      app_store_build? ? "Distribution" : "AdHoc"
+    else
+      "Development"
+    end
+  end
+
+  def signing_entitlement(new_bundle_id)
+    bundle_to_write = "#{team_identifier}.#{new_bundle_id || bundle_id}"
+    puts "Bundle identifier: #{bundle_to_write}"
+
+    file_path = File.expand_path("#{__FILE__}/../../resources/Original.Entitlements.plist")
+    file = File.read(file_path)
+    file.sub!("BUNDLE_ID", bundle_to_write)
+    file.sub!("GET_TASK_ALLOW", release_build? ? "false" : "true")
+  end
+
+  private
+
+  def read_profile
+    cmd = "security cms -D -i #{@provision_path} > tmp.plist"
+    say cmd if $verbose
+    system(cmd)
+
+    # Get info from plist
+    plist = CFPropertyList::List.new(:file => "tmp.plist")
+    system("rm tmp.plist")
+
+    plist.value
+  end
+end

data/lib/ipa_utilities/version.rb

@@ -1,3 +1,3 @@
 module IpaVersion
-  VERSION = "0.1.1"
+  VERSION = "0.2.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ipa_utilities
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.2.0
 platform: ruby
 authors:
 - Omar Abdelhafith
@@ -80,8 +80,9 @@ files:
 - "./ipa_utilities-0.0.2.gem"
 - "./ipa_utilities.gemspec"
 - "./lib/ipa_utilities.rb"
-- "./lib/ipa_utilities/IpaUtilities.rb"
-- "./lib/ipa_utilities/Parsers.rb"
+- "./lib/ipa_utilities/code_signer.rb"
+- "./lib/ipa_utilities/ipa_parser.rb"
+- "./lib/ipa_utilities/parsers.rb"
 - "./lib/ipa_utilities/version.rb"
 - "./lib/resources/Original.Entitlements.plist"
 - bin/ipa_utilities

data/lib/ipa_utilities/IpaUtilities.rb

@@ -1,63 +0,0 @@
-require 'cfpropertylist'
-require 'pathname'
-require 'base64'
-require 'colorize'
-require 'ipa_utilities/Parsers'
-
-class IpaUtilities
-  attr :provisionParser
-
-  def initialize ipaPath
-    pn = Pathname.new(ipaPath)
-    @ipaPath = pn.dirname
-    @ipaName = pn.basename
-    @fullPath = ipaPath
-  end
-
-  def unzip
-    say "Unzipping " + @fullPath.green if $verbose
-    system "unzip #{@fullPath} > log.txt"
-  end
-
-  def zip path
-    say "Zipping " + @fullPath.green if $verbose
-    system "zip -qr \"_new.ipa\" Payload"
-    system "cp _new.ipa #{path}"
-    say "Resigned ipa saved at " + path.green if $verbose
-  end
-
-  def bundleName
-    Dir.entries("Payload").last
-  end
-
-  def verifyCodeSign
-    result = `codesign -v Payload/#{bundleName} 2>&1`
-    result.empty? ? "Signature Valid\n".green : "Signature Not Valid\n".red + result.red if $verbose
-  end
-
-  def parse
-    @provisionPath = "Payload/#{bundleName}/embedded.mobileprovision"
-    @provisionParser = ProvisionParser.new @provisionPath
-  end
-
-  def unzipAndParse
-    unzip
-    puts "App bundle name is " + bundleName.green if $verbose
-
-    parse
-    say "Reading provision profile at "+ @provisionPath.green if $verbose
-    puts if $verbose
-  end
-
-  def deleteOldSignature
-    system "rm -rf Payload/*.app/_CodeSignature"
-    puts "Deleting old code sign file" if $verbose
-  end
-
-  def cleanUp
-    system "rm -rf Payload"
-    system "rm -rf tmp.plist"
-    system "rm -rf Entitlements.plist"
-    system "rm -rf _new.ipa"
-  end
-end

data/lib/ipa_utilities/Parsers.rb

@@ -1,138 +0,0 @@
-class PemParser
-
-  def initialize file
-    @identity = PemParser.signingIdentitiesWithFile(file).first
-  end
-
-  def name
-    @identity
-  end
-
-  def isAPNS
-    @identity.include?("IOS Push Services")
-  end
-
-  def isProduction
-    !@identity.include?("Development")
-  end
-
-  def enviroment
-    isProduction ? "Production" : "Development (Sandbox)"
-  end
-
-  def bundleID
-    /: (.*?)$/.match(@identity).captures.first
-  end
-
-  def self.signingIdentitiesWithBase64 base64
-    string = "-----BEGIN CERTIFICATE-----\n"
-    string += base64
-    string += "-----END CERTIFICATE-----"
-
-    File.write("cer.pem", string)
-
-    pem = `openssl x509 -text -in cer.pem`
-
-    system "rm -rf cer.pem"
-
-    identity = /CN=(.*?),/.match(pem).captures
-    identity
-  end
-
-  def self.signingIdentitiesWithFile file
-    pem = `openssl x509 -text -in #{file}`
-    identity = /CN=(.*?),/.match(pem).captures
-    identity
-  end
-end
-
-class ProvisionParser
-
-  def initialize provisionPath
-    @provisionPath = provisionPath
-    parse
-  end
-
-  def parse
-    # read mobileprovision and convert it to plist
-    `security cms -D -i #{@provisionPath} > tmp.plist`
-
-    # Get info from plist
-    plist = CFPropertyList::List.new
-    plist = CFPropertyList::List.new(:file => "tmp.plist")
-    @data = CFPropertyList.native_types(plist.value)
-  end
-
-  def uuid
-    @data["UUID"]
-  end
-
-  def signingIdentities
-
-    arr = []
-
-    certificates.each do |var|
-      arr << PemParser.signingIdentitiesWithBase64(Base64.encode64(var))
-    end
-
-    arr
-  end
-
-  def certificates
-    @data["DeveloperCertificates"]
-  end
-
-  def provisionedDevices
-    @data["ProvisionedDevices"]
-  end
-
-  def isAPNSProduction
-    @data["Entitlements"]["aps-environment"] == "production"
-  end
-
-  def isBuildRelease
-    @data["Entitlements"]["get-task-allow"] == false
-  end
-
-  def isBuildDistro
-    @data["ProvisionedDevices"].nil?
-  end
-
-  def isAPNSandAppSameEnviroment
-    isBuildRelease == isAPNSProduction
-  end
-
-  def appBundleID
-    var = @data["Entitlements"]["application-identifier"]
-    var.slice!(@data["TeamIdentifier"].first + ".")
-    var
-  end
-
-  def teamName
-    @data["TeamName"]
-  end
-
-  def teamIdentifier
-    @data["Entitlements"]["com.apple.developer.team-identifier"]
-  end
-
-  def apnsEnviroment
-    isAPNSProduction ? "Production" : "Development (Sandbox)"
-  end
-
-  def buildEnviroment
-    if isBuildRelease
-      isBuildDistro ? "Distribution" : "AdHoc"
-    else
-      "Development"
-    end
-  end
-
-  def entitlementForSigning
-    filePath = File.expand_path "#{__FILE__}/../../resources/Original.Entitlements.plist"
-    file = File.read filePath
-    file.sub! "BUNDLE_ID", "#{teamIdentifier}.#{appBundleID}"
-    file.sub! "GET_TASK_ALLOW", isBuildRelease ? "false" : "true"
-  end
-
-end