Is ios certificate sharing reliable?

First, let's explain what a shared certificate is. Are shared certificates reliable?

Here I will say that there are three ways to install ios packaged applications:

First, it is the most formal and commonly used method to use the certificate of an ordinary Apple account (including personal and company accounts) to package and put it on the appstore. The user downloads and installs on the appstore.

The second is to use the certificate of the enterprise account to package and upload it to the internal test distribution platform, such as Banana Cloud or Dandelion, generate a QR code for installation, and the user scans the code to install. However, this kind of certificate cannot be shared with too many people. It is very difficult to apply for enterprise accounts in China, and if Apple finds that a large number of users install apps packaged with enterprise accounts, Apple will ban the accounts. After the accounts are banned, the originally installed apps will lose their signatures and cannot be opened. The official certificate also requires the user to go to the settings and click on the trust certificate to open the app.

The third is to use the certificate of the ordinary Apple account (including personal and company type accounts) and use the ad hoc type profile file to package the ipa file (but this type of description file needs to add the udid of the test device (iphone) to the profile file , can be installed), and then uploaded to the internal test distribution platforms such as Banana Cloud or Dandelion. However, this packaging method cannot be provided to the majority of Internet users.

Therefore, if you want to let real users use it, it is still unreliable to buy a shared certificate. The application needs to be put on the app store. If it is used for internal testing, the second and third points can be used.

Next, let me introduce the formal creation process of the certificate, which is suitable for the creation process of the above three certificates.

First of all, if you do not have an Apple developer account, you need to refer to the following article to open an Apple developer account first:

https://blog.csdn.net/handsome0916/article/details/130267123

Then, you can refer to the following process to generate a p12 certificate:

1. Log in to the Apple developer website, enter the account console, click the Certificates menu, and then click the small blue plus sign on the right to start creating a cer certificate.

 

2. When creating, he will ask you to choose the type of certificate. Do not choose the dev or apple type. You need to choose the ios distribution ad hoc and app store type. Note that whether it is a real device test or a shelf, you must choose this type, do not Select the dev type.

3. During the process of creating a cer certificate, it will ask us to upload a csr file, as shown below:

4. For this csr file, we can use the Banana Cloud Compilation tool to generate:

https://www.yunedit.com/createcert 

Entering the creation interface of Banana Cloud Editor is very simple, and it is a fool-like operation. After creating the csr file, download it to your local computer.

 5. Go back to the Apple developer website, continue the interface of the third step just now, upload the csr file just generated to generate a cer certificate, and then download the cer certificate to your local computer.

6. Switch back to Banana Cloud Compilation, upload the cer file in the same record, and then use the export p12 certificate function to export the certificate.

So far, the p12 certificate generation process has been completed.

Next, let's introduce how to generate the certificate profile file:

1. Enter the Apple Developer Center, click the Identifies menu, and generate an appId named by the package name. If it has already been created, you can skip this step.

 

2. Click the profiles menu to create a profile file. During the process of creating a profile, it will ask you to select the type of profile. If we create it for the first time here, I suggest you select the app store type. If it is an enterprise account, select the in house type . Then during the creation process, it will also ask us to select the appId and cer certificate that have been created in the previous steps. Here we need to make mistakes slowly. If you choose the wrong one, you will be prompted that the certificate does not match the profile, and it will be difficult for you to troubleshoot the problem.

At this point, the certificate profile file can be successfully created.

If what you want to create is not an app store type, but an ad hoc type profile file for testing, don’t put it on the shelves yet. Then you can see the following two steps:

3. Click the devices menu, add the udid of the test device here. To test the udid of the device, you can use the udid tool compiled by Banana Cloud to get it:

https://www.yunedit.com/udid

4. When creating a profile, select the ad hoc type, and there will be an extra step in the creation process, the step of selecting devices.

Guess you like

Origin blog.csdn.net/handsome0916/article/details/130419568