Due to the recent migration of the machine where the enterprise package is stored, it was found that iOS14.5 and above cannot be successfully installed by scanning the QR code (itms-services protocol installation).
At first, I thought it was a problem with the migrated server environment. Later, after confirming that the old machine was not working, I started looking for information everywhere. (I have to look at Apple here, this kind of information cannot be found on the Develop website).
Ideas
We can use the "Keychain" App to generate the required .p12 files and then convert them into .key and .crt files.
Keychain App Operation
Maximum signing period is 7300 days
Export certificate
There is no need to enter a password here and click "OK". Then enter the password to export.
Convert p12 files to key and crt files
使用openssl命令导出.crt
openssl pkcs12 -in xxx.p12 -nokeys -out xxx.crt
使用openssl命令导出.key
openssl pkcs12 -in xxx.p12 -nocerts -nodes -out xxx.key
使用openssl命令导出.csr
openssl pkcs12 -in xxx.p12 -nokeys -out xxx.csr
使用openssl命令导出.cer
openssl x509 -in xxx.crt -out xxx.cer -outform der
Then replace the crt and key files of apache and restart the apache server. The mobile phone that needs to scan the QR code needs to install and trust the ·xxx.crt·certificate. Then just scan the code again and download it.