OS X 10.11 Network Extension Invalid Code Signing Entitlements

Question

Sunshiny OP

Created Feb ’16

Replies 2

Boosts 0

Views 1.1k

Participants 1

Hi, Apple.

I created Mac distribution profiles for OS X Container App and OS X Packet Tunnel Provider.

And here is my projects' settings:

Xcode - Building Settings - Code Signing - Code Signing Identity - Release - 3rd Party Mac Developer Application: xxxxxx (T5N*****)

Xcode - Building Settings - Code Signing - Provisioning Profile - Release - Generated Distribution Profiles (Container app and OS X Packet Tunnel Provider) from Apple Developer Center

And when I was submiting it to iTunes Connect, it told me 'Invalid Code Signing Entitlement, key 'com.apple.developer.networking.HotspotHelper' is not supported on MAC OS X'. But my app doesn't need 'com.apple.developer.networking.HotspotHelper' entitlement, it just generated by Apple Developer Profile Distrubtion system. I can't submit my app to iTunes Connect.

Please tell me how to resolve this problem.

> codesign -d --entitlements :- xxx.app            
Executable=/Users/USER/Library/Developer/Xcode/DerivedData/xxxVPN-ecyoxdpkmfgtadhgpkyzjsgjiuvk/Build/Products/Debug/xxx.app/Contents/MacOS/xxx
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>com.apple.application-identifier</key>
  <string>T5N7***.XXX-VPN</string>
  <key>com.apple.developer.networking.networkextension</key>
  <array>
  <string>packet-tunnel-provider</string>
  <string>app-proxy-provider</string>
  <string>content-filter-provider</string>
  </array>
  <key>com.apple.developer.networking.vpn.api</key>
  <array>
  <string>allow-vpn</string>
  </array>
  <key>com.apple.developer.team-identifier</key>
  <string>T5N7***</string>
  <key>com.apple.security.app-sandbox</key>
  <true/>
</dict>
</plist>

Boost

Answer 1

Sunshiny OP

Feb ’16

I guess this is Apple's bug.

For OS X, 'com.apple.developer.networking.HotspotHelper' should not be contained in provisioning profile.

0

Answer 2

Sunshiny OP

Feb ’16

Distribution profile:

<key>Entitlements</key>
  <dict>
  <key>keychain-access-groups</key>
  <array>
  <string>T5N7******.*</string>
  <string>com.apple.managed.vpn.shared</string>
  </array>
  <key>com.apple.application-identifier</key>
  <string>T5N7******.xxx-VPN</string>
  <key>com.apple.developer.team-identifier</key>
  <string>T5N7******</string>
  <key>com.apple.developer.networking.vpn.api</key>
  <array>
  <string>allow-vpn</string>
  </array>


  <key>com.apple.developer.networking.networkextension</key>
  <array>
  <string>packet-tunnel-provider</string>
  <string>app-proxy-provider</string>
  <string>content-filter-provider</string>
  </array>
  <key>com.apple.developer.networking.HotspotHelper</key>
  <true/>
</dict>

Xcode:

iTunes Store operation failed.

Invalid Code Signing Entitlements. Your application bundle's signature contains code signing entitlements that are not supported on Mac OS X. Specifically, key 'com.apple.developer.networking.HotspotHelper' in 'xxx-VPNxxxxxxxx' is not supported.

0