Signed ipa with vpn permission of Plugins could not work?

[dawei101]

After run with below command

zsign -c ./pem.pem -k ./key key.key -m ./x.mobileprovision -o ./out.ipa -z 9 ./ipa.ipa

After sign it , the app could open, and ui is ok. But vpn is not work. Why ? does anything I forget?

Thanks

[xujimu]

I have the same problem. Have you solved it

[dawei101]

Not yet

[xujimu]

Not yet

I have successfully made the VPN work. It required modifying zsign; the plugin needed a separate mobileprovision for signing in order to function

[dawei101]

Wow ~~ that's cool !!!
Would you like to commit the modification with a new pull request ?

Thanks!

[xujimu]

Wow ~~ that's cool !!! Would you like to commit the modification with a new pull request ?

Thanks!

The modified source code can only apply to your own app. Simply put, an app including a VPN has a main app and a sub-app. You can unzip your IPA and find a "xxxx.appex" under the PlugIns folder. You can extract it, create a new identity in the developer backend, use the new identity to sign the "xxxx.appex" folder, and then put it back to the main app. When signing the main app, you need to exclude the "xxxx.appex" folder. This may indeed require modifications to zsign.

[qqizai]

Wow ~~ that's cool !!! Would you like to commit the modification with a new pull request ?
Thanks!

The modified source code can only apply to your own app. Simply put, an app including a VPN has a main app and a sub-app. You can unzip your IPA and find a "xxxx.appex" under the PlugIns folder. You can extract it, create a new identity in the developer backend, use the new identity to sign the "xxxx.appex" folder, and then put it back to the main app. When signing the main app, you need to exclude the "xxxx.appex" folder. This may indeed require modifications to zsign.

Excuse me, How did you solve sign the plugin?

[hazmi-e205]

I don't have spare time to create a PR for now, but I have a patch to support it from my own project.
hazmi-e205/iDebugTool@f181e0f#diff-3bf1c9a7888dcaa281c252dd4138ed68ef3d4551a2d0c4dc226b5053398c5400

I hope it can help you guys to expand the features of this powerful tool. Cheers...

[qqizai]

Wow ~~ that's cool !!! Would you like to commit the modification with a new pull request ?
Thanks!

The modified source code can only apply to your own app. Simply put, an app including a VPN has a main app and a sub-app. You can unzip your IPA and find a "xxxx.appex" under the PlugIns folder. You can extract it, create a new identity in the developer backend, use the new identity to sign the "xxxx.appex" folder, and then put it back to the main app. When signing the main app, you need to exclude the "xxxx.appex" folder. This may indeed require modifications to zsign.

it work for me!!