#lang pollen

◊h3{Manually sign the binary}

◊h3{Resign the binary}
◊section{
◊p{
Resign the binary is an important step after modifing a binary. The idevice will reject a falsy signed binary. To install a modified binary, we need to resign the binary. This problem is not easy because Apple checks the application certificate online. We must register a certificate online and use it to sign our application. Registering a certificate online can only be done through Xcode.
}

◊p{
Signin with Apple if haven't done so. Use Xcode and create a project, set signer to yourself and sign type to development. Build and install the app on a device. Go to the build folder, collect the embedded.mobileprovision file. Find the identity used to sign the binary and sign with that identity.
}

◊pre{
security find-identity -p codesigning -v
# copy the text or hash --> IDENTITY
security cms -D -i embedded.mobileprovision > profile.plist
/usr/libexec/PlistBuddy -x -c 'Print :Entitlements' profile.plist > entitlements.plist
codesign -fs IDENTITY --entitlements entitlements.plist BINARY
}
}