Upload application to app store

[ksotik]

Hi! I'm using ST 2 final release for my iPad application. I successfully build package with SDK Tools for ad-hoc testing with another testers. But when I starts upload my app to app store via Application Loader I have an errors:

1. Application failed codesign verification. The signature was invalid, contains disallowed entitlements, or it was not signed with an iPhone Distribution Certificate.
2. Unable to extract entitlements from application: /var/folders/95/2cbz4s_d7x726x9t30db2d_80000gn/T/...../stbuild_template

appstore-error.jpg
I'm using app store distribution profile & distribution certificate for this build.

json-preset for sencha tool:

{
        "applicationName":"***hidden***",
        "applicationId":"com.***hidden***",
        "outputPath":"/***hidden***/Projects/iPad/build",
        "iconName":"icon.png",
        "versionString":"1.0",
        "inputPath":"/***hidden***/Projects/iPad/project",
        "configuration":"Release",
        "platform":"iOS",
        "deviceType":"iPad",
        "certificatePath":"***hidden***/dev_cert.p12",
        "certificatePassword":"***hidden***",
        "certificateAlias":"iPhone Distribution: ***hidden***",
        "provisionProfile":"***hidden***/DistrAppStore.mobileprovision",
        "rawConfig":"<key>Entitlements</key><false/>",
        "orientations": [
                "landscapeLeft",
                "landscapeRight"
        ]
}

Also, I'm trying to resign app with codesign manually. My script for this:

sencha package ipad_appstore.json
rm -r "***hidden***.app/_CodeSignature"
cp "***hidden***/DistrAppStore.mobileprovision" "***hidden***.app/embedded.mobileprovision"
chmod a+x "***hidden***.app/stbuild_template"
codesign -f -dvvv -s "iPhone Distribution: ***hidden***" "***hidden***.app"
mkdir Payload
mv "***hidden***.app" $_
zip -y -r "***hidden***.ipa" Payload

Please, help...

[ksotik]

Whats wrong with binary stbuild_template?
Or may be something wrong with cerficiate? But i'm trying many times to create new certificates & profiles with deleting previous and nothing to be changed.
Anybody knows what it can be?

[thedigital]

Hello,

i've the same problem. Can somebody help us, please?

[gkatz]

I am not sure but is it possible you used the dev cert instead of the dist cert?
If I recall correctly they are different and the path you used says dev cert.

[thedigital]

i used definitly the dist cert... :-(

[jarrednicholls]

I think the issue is that we're not accounting for a default Entitlements.plist which gets embedded into the code signature within the binary. You can manually sign via "codesign" + a default Entitlements.plist to get around this on OS X. For Windows users, we'll have to remedy that as well of course w/ a future release.

Try the following workaround --

Create an Entitlements.plist file that has the following contents:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>get-task-allow</key>
	<false/>
</dict>
</plist>

Run codesign again, pointing to the Entitlements.plist:

codesign -f -dvvv -s "iPhone Distribution: ***hidden***" --entitlements "/path/to/Entitlements.plist" "***hidden***.app"

Retry the submission at that point - let me know how that goes.

[thedigital]

Thanks for the workaround. Now my only Problem ist the following:

Application failed codesign verification.  The signature was invalid, contains disallowed entitlements, or it was not signed with an iPhone Distribution Certificate.

[jarrednicholls]

Thanks for the workaround. Now my only Problem ist the following:

Application failed codesign verification.  The signature was invalid, contains disallowed entitlements, or it was not signed with an iPhone Distribution Certificate.

Just to confirm, you are still using your app store prov. profile and not the ad-hoc one? Still figuring what's missing from Entitlements.plist for your app...there's usually more info when it's ad-hoc or a wildcarded app ID.

Would you be willing to share some of the information about your configuration (.json) with me privately? jarred [at] sencha.com.

[jarrednicholls]

Note that some people have had issues where the above error message would be displayed that was caused by something as unrelated as their app ID/name being formatted badly - having nothing to do with entitlements.

[jarrednicholls]

thedigital was able to get his application code signature verified by using the following Entitlements.plist scheme (replace [APP_ID] with your application ID accordingly)

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>application-identifier</key>
	<string>[APP_ID]</string>
	<key>get-task-allow</key>
	<false/>
</dict>
</plist>

So the entire workaround on OS X is as follows:

Try the following workaround --

Create an Entitlements.plist file that has the following contents:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>application-identifier</key>
	<string>[APP_ID]</string>
	<key>get-task-allow</key>
	<false/>
</dict>
</plist>

Run codesign again, pointing to the Entitlements.plist:

codesign -f -dvvv -s "iPhone Distribution: ***hidden***" --entitlements "/path/to/Entitlements.plist" "***hidden***.app"

Retry the submission at that point - let me know how that goes.