Skip to content

Releases: nowsecure/node-applesign

2.5.0

29 Nov 01:41
Compare
Choose a tag to compare
  • Add -A, --all-dirs option to pack everything, not just Payload/
  • Never throw in session for proper finalization
  • Avoid renaming app groups if -c and -m are passed (#74)
  • Avoid signing bitcode-only ipas
  • Make insert_dylib warning fit in one line

2.4.0

29 Nov 01:43
Compare
Choose a tag to compare
  • Implement -a,--all to resign all binaries even if not referenced
  • Alphabetically sort internal config options
  • Add -H/--allow-http to inject NSAppTransportSecurity.NSAllowsArbitraryLoads=true

2.3.1

29 Nov 01:45
Compare
Choose a tag to compare
  • Fix issues reported by semistandard
  • Upgrade mocha to fix 6 vulnerabilities reported by npm audit
  • Add try/catch around readFileSync for filterLibraries (fixes regression introduced in c29d4bc)

2.3.0

05 Jun 16:44
Compare
Choose a tag to compare
  • Fix problem with apps with lot of large filenames, exceeding the execProgram maxBuffer
    • No maxBuffer is used at all
    • Stdin fd is closed to avoid hangs when unzip aims to interact with the user because of truncated zip files
  • Added -O (--osversion) flag to force a specific MinimumOSVersion
  • Add --noclean (-n) flag to not remove the temporary files created by the resigning process
  • Skip signing non-referenced binaries. (makes yalu and liberios IPAs happy)

2.2.0

29 Nov 01:48
Compare
Choose a tag to compare
  • Update plist and simple-plist dependencies
  • Fix #45 - Refactor Applesign constructor to support async initialization to call findInPaths
  • Fix #70 - Specify minimum NodeJS version required
  • Massage even more entitlements

codename: Orphaned Injections

11 Oct 22:24
Compare
Choose a tag to compare

This release comes with some interesting bug fixes related to the support of library injection and the resigning of IPAs containing orphaned libraries.

  • Library injection now uses an absolute filesystem path that is accessible via USB on non-jailbroken devices and can be used to deploy the blobs.
  • The injected library is always chmodded as executable
  • IPAs may contain libraries that are not referenced by any other bin, those ones, the orphaned has been ignored since now, producing invalid IPAs according to installd.

Enjoy!

1.1.0

22 Sep 00:43
Compare
Choose a tag to compare
  • Fix race condition in --insert dylib command
  • Suffix temporary directory with UUID.v4

1.0.0

21 Sep 23:33
Compare
Choose a tag to compare
  • verify no symlinks are found inside the ipa
  • entitlements mangling is not enabled by default (api change)
  • confirmed that -I works to insert libraries
  • add —version commandline flag
  • updated example and README

0.8.2

17 Aug 23:33
Compare
Choose a tag to compare
  • Fix entitlements massaging
  • Add -E to use generic entitlements
  • Better --force-family and fix --entitlements
  • Fix #26 - Expose signFile API accessible via --single
  • Add --force-family to force iPhone UIDeviceFamily, old -f is now -u --unfair