sha256 signing support #72
Conversation
parameters - Removed get_codedirectories in favor of get_blobs
|
@justindhill I haven't seen any updates on this. Does it work for ios 11? |
|
@dabear - sorry, I have no idea. My company ended up using Mac hardware for our workflow because we had other dependencies on the Apple toolchain. We are using codesign, so my isign efforts have taken a back seat. @neilk mentioned to me a while back that Sauce Labs may be taking on maintenance of this project, but I haven't heard anything in a while. I'm sure they would be grateful if you gave it a try and reported back. |
|
@justindhill's summary is correct. Unfortunately since I'm not a Sauce Labs employee any more I can't update the official |
|
Hi all, just a notice that Sauce Labs is evaluating options concerning maintainership and the intention is not to let this project languish. Stay tuned! |
|
@jlipps This is an excellent project and I hope it continues. |
@neilk - I took a stab at adding sha256 support to the signature. Interestingly, I didn't need to modify the
set_signaturemethod at all. Just had to update the special slots on the sha256 CodeDirectory blob and re-hash them. This allowed me to install on iOS 10.Maybe it's my lack of understanding of MachO, but I find this to be really odd. It seems to me that you should need to do something different when creating the CodeDirectory signature, or maybe look for another blob wrapper for the sha256 signature. Perhaps Apple is just not enforcing this at the moment? Or maybe it's my test setup?
Anyway, have a look and let me know what you think.