Can I publish a app Version thats successfully upload to the app store even when all iOS Distribution certificate are revoked?

Question

FelixQuehl OP

Created Feb ’22

Replies 1

Boosts 0

Participants 2

Lets assume the following case:

I uploaded a App Version to the app store
The upload is successful
I did not publish the app right away so I can do testing through TestFlight
Then I revoke the iOS Distribution certificate that was used for the upload
Without any need for a new version upload to the app store, I push the publish button for the already uploaded app version

When the "publish" button is pushed, is the app version that is already uploaded to the app store going to be published just fine, even as the originally used iOS Distribution certificate was revoked in the mean time after the upload?

Boost

Answer 1

DTS Engineer OP

Apple

Feb ’22

I suspect that this will work.

You have to remember that when a user downloads a copy of your app it’s not signed with your distribution signing identity. Rather, it’s signed with an Apple signing identity. It’s easiest to see this with a Mac App Store app:

% codesign -d -v "/Applications/Tap Forms 5.app"
…
Authority=Apple Mac OS Application Signing
Authority=Apple Worldwide Developer Relations Certification Authority
Authority=Apple Root CA
…

Your distribution signing identity is used by the App Store ingestion process to check the validity of your code at that stage. Once it’s in the App Store system, it doesn’t need to be checked again.

Having said that, I’ve not actually tried this (-: You should give it a whirl and let us know how you get along.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0