Add support for non-jailbroken users

[Matchstic]

To add support for non-jailbroken users, we need the following tasks to be completed:

• Implement an approach to install locally provisioned applications, without utilising itms-services.
• (Re)-implement automatic background signing via Background App Refresh.
• Allow resigning ReProvision itself when in a sandboxed state (not necessary for jailbroken users).
• Require users to supply the corresponding .ipa of an application that should be re-signed (again, not necessary for jailbroken users).

For the first task, it would be worth looking into how Xcode installs locally provisioned applications to the device via OTA. Heck, could even see if we can communicate directly to lockdownd via libimobiledevice from the sandbox, but not expecting this would work.

[malhaar]

.. Resign broken on iOS 12, requires nonempty CMS data .. Application installs fine but won't launch ..
.. Application can be installed using local web server and itms but requires server with ssl as manifest needs to be delivered over ssl ..

[malhaar]

• CT Evaluation Failing And Requires LeafAnchor (APPLE_IOS_OID), IssuerCN, CertificateCN Verification, which is verified CodeRequirementsBlob ..
• CMSData should be signed and with Full chain ..

[xurayg]

Yes on iOS 12 It broken... Any plan on it ? Tried Cydia Impactor 0.9.51 , It worked fine on iOS 12.

[chexo3]

I heard there's a CoreTrust bypass for iOS 12 public now. Perhaps this could be useful here?

[chexo3]

For stock devices, that is. You'd have to write some software to do what Cydia utils would do for this app, but it'd be very convenient. Also, Cydia Extender works on stock devices via a paid account and some vpn trickery, but maybe that would be useful for people with a dev account.

[Matchstic]

The least amount of work for this, the better. ;P Since CoreTrust just verifies the CMS blob, and that is what actually fails on an iOS 12 blob, I’m fairly sure that’s all I need to fix. The next hardest thing is finding the time!

…

On 4 Feb 2019, at 14:19, chexo3 ***@***.***> wrote: For stock devices, that is. You'd have to write some software to do what Cydia utils would do for this app, but it'd be very convenient. Also, Cydia Extender works on stock devices via a paid account and some vpn trickery, but maybe that would be useful for people with a dev account. — You are receiving this because you were assigned. Reply to this email directly, view it on GitHub, or mute the thread.

[chexo3]

At this point you can probably just exploit iOS much the same way a jailbreak does, and just not do much of anything permanent.

[Matchstic]

If I’m going to be honest, I don’t want the overhead of having to re-release a new version of ReProvision every time a new tfp0 exploit comes out. Plus, then I’m tied to whatever iOS versions are jailbroken anyway. The spirit of this particular thread is to have the app running without any need for any exploit. That’s not to say I don’t get what you’re saying; it would help to just inject whatever entitlements are needed using such an exploit. But... I’d rather not!

…

On 4 Feb 2019, at 17:09, Matt Clarke ***@***.***> wrote: actually

[burt111]

Any update on this or any progress even without a daemon resigning

[Matchstic]

No update; I’m not treating it as a priority to be honest.

…

On 8 Apr 2019, at 12:58, burt111 ***@***.***> wrote: Any update on this or any progress even without a daemon resigning — You are receiving this because you were assigned. Reply to this email directly, view it on GitHub, or mute the thread.

[hardcoreandroid]

Good luck, this would be helpful.

[Matchstic]

Closing, this is now covered by AltSign