diff options
| -rwxr-xr-x | ios/resign-archive.sh | 47 |
1 files changed, 46 insertions, 1 deletions
diff --git a/ios/resign-archive.sh b/ios/resign-archive.sh index d6cd546cbc..3c94ecb9ae 100755 --- a/ios/resign-archive.sh +++ b/ios/resign-archive.sh @@ -72,13 +72,58 @@ install_mobile_provisioning() { install_mobile_provisioning ########################################### -# Sign and export IPA +# Resolve entitlements ########################################### +# The .entitlements files use build setting variables that need to be resolved. +SECURITY_GROUP_IDENTIFIER="group.net.mullvad.MullvadVPN" + +resolve_entitlements() { + local src="$1" + local dst="$2" + sed "s/\$(SECURITY_GROUP_IDENTIFIER)/$SECURITY_GROUP_IDENTIFIER/g" "$src" > "$dst" +} + +APP_ENTITLEMENTS=$(mktemp) +PACKET_TUNNEL_ENTITLEMENTS=$(mktemp) +trap 'rm -f "$APP_ENTITLEMENTS" "$PACKET_TUNNEL_ENTITLEMENTS"' EXIT + +resolve_entitlements "$SCRIPT_DIR/MullvadVPN/Supporting Files/MullvadVPN.entitlements" "$APP_ENTITLEMENTS" +resolve_entitlements "$SCRIPT_DIR/PacketTunnel/PacketTunnel.entitlements" "$PACKET_TUNNEL_ENTITLEMENTS" + +########################################### +# Sign archive binaries with entitlements +########################################### + +APP_PATH="$XCODE_ARCHIVE_DIR/Products/Applications/MullvadVPN.app" +SIGNING_IDENTITY="Apple Distribution: Mullvad VPN AB" + echo "" echo "Signing archive: $XCODE_ARCHIVE_DIR" echo "" +# Sign frameworks first (no entitlements needed) +for framework in "$APP_PATH"/Frameworks/*.framework; do + echo "Signing framework: $(basename "$framework")" + codesign --force --sign "$SIGNING_IDENTITY" "$framework" +done + +# Sign the packet tunnel extension with its entitlements +echo "Signing PacketTunnel.appex" +codesign --force --sign "$SIGNING_IDENTITY" \ + --entitlements "$PACKET_TUNNEL_ENTITLEMENTS" \ + "$APP_PATH/PlugIns/PacketTunnel.appex" + +# Sign the main app with its entitlements +echo "Signing MullvadVPN.app" +codesign --force --sign "$SIGNING_IDENTITY" \ + --entitlements "$APP_ENTITLEMENTS" \ + "$APP_PATH" + +########################################### +# Export IPA +########################################### + xcodebuild \ -exportArchive \ -archivePath "$XCODE_ARCHIVE_DIR" \ |