How to re-sign the ION iOS app | NAGRAVISION Documentation Portal

This page describes the steps required to re-sign an iOS app using a different bundle ID and developer account.

Assumptions

XCode 10+ installed on Mac
Original .ipa file downloaded (named in this guide as <original>.ipa). This must be an .ipa file that was originally exported and signed for AppStore deployment.
App ID set up in the Apple developer account for the new app (named in this guide as new.app.id)
Distribution certificates created in the Apple developer account and private keys installed on local key chain (certificate named in this guide as distribution certificate name)
Distribution (AppStore) provisioning profiles set up in the Apple developer account for the new App ID and downloaded to the local machine (named in this guide as Jado.mobileprovision)
Team ID is known (visible in the Apple developer account portal membership tab (named in this guide as newteamid)

How to re-sign the OpenTV ION iOS app

Rename <original>.ipa to <original>.zip
Double-click the zip to extract the zip contents. A folder (named Root in this example) with Payload and SwiftSupport subfolders will be extracted.
Navigate to the folder containing Root in Terminal.
Remove the existing code signature by executing command:
Bash
```
rm -r Root/Payload/Jado.app/_CodeSignature
```
Right-click on Root/Payload/Jado.app and select Show Package Contents.
Open Root/Payload/Jado.app/Info.plist.
Change the CFBundleIdentifier (BundleIdentifier) value to new.app.id
Copy new provisioning profiles (Jado.mobileprovision) by executing command:
Bash
```
cp Jado.mobileprovision Root/Payload/Jado.app/embedded.mobileprovision
```

Create a file named entitlements.xml with contents:

XML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
   <dict>
      <key>application-identifier</key>
      <string>newteamid.new.app.id</string>
      <key>aps-environment</key>
      <string>production</string>
      <key>com.apple.developer.team-identifier</key>
      <string>newteamid</string>
      <key>beta-reports-active</key>
      <true/>
      <key>com.apple.external-accessory.wireless-configuration</key>
      <true/>
      <key>get-task-allow</key>
      <false/>
   </dict>
</plist>

Ensure that the value of application-identifier is set to your team and App ID, for example:

XML

<key>application-identifier</key>
<string>QHDQWE45DU.com.nagra.jado</string>

and the value of com.apple.developer.team-identifier is set to your team ID, for example:

<key>com.apple.developer.team-identifier</key>
<string>QHDQWE45DU</string>

Sign each file within the Payload/Jado.app/Frameworks folder with the following command:

Bash

find Root/Payload \( -name "*.framework" -o -name "*.dylib" \) -exec  codesign -f --deep -s "distribution certificate name""{}" \;

Sign the app with command:

Bash

codesign --entitlements entitlements.xml -f --deep -s "distribution certificate name" Root/Payload/Jado.app/

Change the directory to Root.
Zip the Payload folder and create the new .ipa file by executing command:
Bash
```
zip -qr resigned.ipa Payload/ SwiftSupport/
```
Upload <resigned>.ipa using Application Loader.