Quantcast

iOS "Invalid entitlements"

classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

iOS "Invalid entitlements"

prothero--- via use-livecode
I was having difficulty with a stack and deleted all the stack files in the list and put empty into cRevStandaloneSettings

and started fresh.

Now I am getting "invalid entitlements" when trying to install on my iPhone.

I did have a new user and I added their UDID, cleaned up all my old profiles and certs, current certificate is valid until Oct 2017, I disabled "inter-app-audio" in the app ID services and rebuilt the provisioning profile.

Still no go on attempting to put on my phone… SA builder runs fine… xCode is giving me the old message:

=======
The executable was signed with invalid entitlements.
The entitlements specified… …invalid … not permitted…
do not match those specified in your Provision profile.
=======

I was very careful to take a snap shot of my SA setting before wiping them.

All I can think of is perhaps there is some inclusion that I turned on that is causing the issue? It was the first time I saw inter-app-audio on in the Apple developer portal, for the services for my app ID… Perhaps it was there before as I have not had to go in for months… but I'm not seeing that in the info.plist anywhere. So I don't think it is an issue, unless xCode retains a memory/cache of a previous provisioning profile? I did go through xCode perferences, user agent, and made sure everything was refreshed there with one and only one latest cert and profile active.

If you have check an inclusion that only applies to desktop ("Database") could that cause it?

I set the SA to auto detect for necessary inclusions, but that takes a loooong time.

Mac Sierra
xCode 8.2.1
LC 9dp5




_______________________________________________
use-livecode mailing list
[hidden email]
Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: iOS "Invalid entitlements"

prothero--- via use-livecode
Have you checked the "beta version" in the standalone application settings
for ios?

On 7 Apr 2017 06:04, "Sannyasin Brahmanathaswami via use-livecode" <
[hidden email]> wrote:

> I was having difficulty with a stack and deleted all the stack files in
> the list and put empty into cRevStandaloneSettings
>
> and started fresh.
>
> Now I am getting "invalid entitlements" when trying to install on my
> iPhone.
>
> I did have a new user and I added their UDID, cleaned up all my old
> profiles and certs, current certificate is valid until Oct 2017, I disabled
> "inter-app-audio" in the app ID services and rebuilt the provisioning
> profile.
>
> Still no go on attempting to put on my phone… SA builder runs fine… xCode
> is giving me the old message:
>
> =======
> The executable was signed with invalid entitlements.
> The entitlements specified… …invalid … not permitted…
> do not match those specified in your Provision profile.
> =======
>
> I was very careful to take a snap shot of my SA setting before wiping them.
>
> All I can think of is perhaps there is some inclusion that I turned on
> that is causing the issue? It was the first time I saw inter-app-audio on
> in the Apple developer portal, for the services for my app ID… Perhaps it
> was there before as I have not had to go in for months… but I'm not seeing
> that in the info.plist anywhere. So I don't think it is an issue, unless
> xCode retains a memory/cache of a previous provisioning profile? I did go
> through xCode perferences, user agent, and made sure everything was
> refreshed there with one and only one latest cert and profile active.
>
> If you have check an inclusion that only applies to desktop ("Database")
> could that cause it?
>
> I set the SA to auto detect for necessary inclusions, but that takes a
> loooong time.
>
> Mac Sierra
> xCode 8.2.1
> LC 9dp5
>
>
>
>
> _______________________________________________
> use-livecode mailing list
> [hidden email]
> Please visit this url to subscribe, unsubscribe and manage your
> subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
_______________________________________________
use-livecode mailing list
[hidden email]
Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: iOS "Invalid entitlements"

prothero--- via use-livecode
No I had not checked that… it was not needed two weeks ago, when I was successfully building in 9.dp5.. . but I just tried checking that and still get the same message…

"invalid entitlements… missing… do not match"

if there is a single line with http:// anywhere in our code, wiill this trigger a failure if ATS is not disabled?
I'm not seeing anything unusual in the info.plist -- disclaimer: I'm not trained to know exactly what to look for, but at least inter-app-audio services are not present in the info.plist, on Slashdot there was a post that someone who actually had to include that in their app profile because xCode was expecting it by default, but we are not generating the info.plist from xCode, right? LC generates it?

There must be *some* way to diagnose this, yes/no?

BR

On 4/6/17, 8:12 PM, "use-livecode on behalf of panagiotis merakos via use-livecode" <[hidden email] on behalf of [hidden email]> wrote:

    Have you checked the "beta version" in the standalone application settings
    for ios?
   
    On 7 Apr 2017 06:04, "Sannyasin Brahmanathaswami via use-livecode" <
    [hidden email]> wrote:
   
    >I was having difficulty with a stack and deleted all the stack files in
    >the list and put empty into cRevStandaloneSettings
    >
    >and started fresh.
    >
    >Now I am getting "invalid entitlements" when trying to install on my
    >iPhone.
    >

_______________________________________________
use-livecode mailing list
[hidden email]
Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: iOS "Invalid entitlements"

prothero--- via use-livecode
The cases where I had seen this "Invalid Entitlements" error are the
following:

1. "Beta-version" is checked in iOS standalone settings BUT the
provisioning profile is a development one (and not a distribution one)

2. The mergHK inclusion is checked in Inclusions, but the provisioning
profile I use does not include entitlements for HealthKit.

3. The "In App Purchase" is checked in iOS standalone settings BUT the
provisioning profile I used does not include entitlements for In App
Purchase.

4. The "Push Notifications" is checked in iOS standalone settings BUT the
provisioning profile I used does not include entitlements for Push
Notification.

Best,
Panos
--



On Fri, Apr 7, 2017 at 3:34 PM, Sannyasin Brahmanathaswami via use-livecode
<[hidden email]> wrote:

> No I had not checked that… it was not needed two weeks ago, when I was
> successfully building in 9.dp5.. . but I just tried checking that and still
> get the same message…
>
> "invalid entitlements… missing… do not match"
>
> if there is a single line with http:// anywhere in our code, wiill this
> trigger a failure if ATS is not disabled?
> I'm not seeing anything unusual in the info.plist -- disclaimer: I'm not
> trained to know exactly what to look for, but at least inter-app-audio
> services are not present in the info.plist, on Slashdot there was a post
> that someone who actually had to include that in their app profile because
> xCode was expecting it by default, but we are not generating the info.plist
> from xCode, right? LC generates it?
>
> There must be *some* way to diagnose this, yes/no?
>
> BR
>
> On 4/6/17, 8:12 PM, "use-livecode on behalf of panagiotis merakos via
> use-livecode" <[hidden email] on behalf of
> [hidden email]> wrote:
>
>     Have you checked the "beta version" in the standalone application
> settings
>     for ios?
>
>     On 7 Apr 2017 06:04, "Sannyasin Brahmanathaswami via use-livecode" <
>     [hidden email]> wrote:
>
>     >I was having difficulty with a stack and deleted all the stack files
> in
>     >the list and put empty into cRevStandaloneSettings
>     >
>     >and started fresh.
>     >
>     >Now I am getting "invalid entitlements" when trying to install on my
>     >iPhone.
>     >
>
> _______________________________________________
> use-livecode mailing list
> [hidden email]
> Please visit this url to subscribe, unsubscribe and manage your
> subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
>
_______________________________________________
use-livecode mailing list
[hidden email]
Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: iOS "Invalid Entitlements"

prothero--- via use-livecode
In reply to this post by prothero--- via use-livecode
Hmm none of these are true, but we still get invalid entitlements.

1) this is an adhoc distribution profile for use with registered UDIDs ;  "Beta Version" is unchecked in the SA settings
2) mergHK inclusion does not even appear in the inclusions options (8.1.3)
3) "In App Purchase" is not enabled in the profile
4) "In App Purchase" does not even appear anywhere in the Standalone Settings for iOS I may be missing something but I sure don't see it.
  ergo I can't have it checked on, if it is not there to check…
5) push notifications is not enabled on profile and not checked in the iOS SA settings

Here is what I have that worked before…

http://wiki.hindu.org/uploads/iOS-SA-Settings-Apr17.jpg

I even tried with all these set to n/a  Location services, microphone and WiFi

and *still* get the "Invalid Entitlements" msg

BR
 

On 4/7/17, 6:16 AM, "use-livecode on behalf of panagiotis merakos via use-livecode" <[hidden email] on behalf of [hidden email]> wrote:

    The cases where I had seen this "Invalid Entitlements" error are the
    following:
   
    1. "Beta-version" is checked in iOS standalone settings BUT the
    provisioning profile is a development one (and not a distribution one)
   
    2. The mergHK inclusion is checked in Inclusions, but the provisioning
    profile I use does not include entitlements for HealthKit.
   
    3. The "In App Purchase" is checked in iOS standalone settings BUT the
    provisioning profile I used does not include entitlements for In App
    Purchase.
   
    4. The "Push Notifications" is checked in iOS standalone settings BUT the
    provisioning profile I used does not include entitlements for Push
    Notification.
   
    Best,
    Panos

_______________________________________________
use-livecode mailing list
[hidden email]
Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: iOS "Invalid Entitlements"

prothero--- via use-livecode
Hmm ok. Then you could probably check which entitlements are included in
the standalone, and see if there is any that is not included in the
provisioning profile. To do that:

1. Use the codesign tool to check the entitlements on the .app bundle:
Type in a terminal:

codesign -d --entitlements :- /path/to/yourApp.app

2. Use the security tool to check the entitlements of the app's embedded
provisioning profile:
Type in a terminal:

security cms -D -i /path/to/yourApp.app/embedded.mobileprovision

- Then see if there is an entitlement that is present in (1) but not in (2).

Best,
Panos
--

On Sat, Apr 8, 2017 at 5:31 AM, Sannyasin Brahmanathaswami via use-livecode
<[hidden email]> wrote:

> Hmm none of these are true, but we still get invalid entitlements.
>
> 1) this is an adhoc distribution profile for use with registered UDIDs ;
> "Beta Version" is unchecked in the SA settings
> 2) mergHK inclusion does not even appear in the inclusions options (8.1.3)
> 3) "In App Purchase" is not enabled in the profile
> 4) "In App Purchase" does not even appear anywhere in the Standalone
> Settings for iOS I may be missing something but I sure don't see it.
>   ergo I can't have it checked on, if it is not there to check…
> 5) push notifications is not enabled on profile and not checked in the iOS
> SA settings
>
> Here is what I have that worked before…
>
> http://wiki.hindu.org/uploads/iOS-SA-Settings-Apr17.jpg
>
> I even tried with all these set to n/a  Location services, microphone and
> WiFi
>
> and *still* get the "Invalid Entitlements" msg
>
> BR
>
>
> On 4/7/17, 6:16 AM, "use-livecode on behalf of panagiotis merakos via
> use-livecode" <[hidden email] on behalf of
> [hidden email]> wrote:
>
>     The cases where I had seen this "Invalid Entitlements" error are the
>     following:
>
>     1. "Beta-version" is checked in iOS standalone settings BUT the
>     provisioning profile is a development one (and not a distribution one)
>
>     2. The mergHK inclusion is checked in Inclusions, but the provisioning
>     profile I use does not include entitlements for HealthKit.
>
>     3. The "In App Purchase" is checked in iOS standalone settings BUT the
>     provisioning profile I used does not include entitlements for In App
>     Purchase.
>
>     4. The "Push Notifications" is checked in iOS standalone settings BUT
> the
>     provisioning profile I used does not include entitlements for Push
>     Notification.
>
>     Best,
>     Panos
>
> _______________________________________________
> use-livecode mailing list
> [hidden email]
> Please visit this url to subscribe, unsubscribe and manage your
> subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
_______________________________________________
use-livecode mailing list
[hidden email]
Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: iOS "Invalid Entitlements"

prothero--- via use-livecode
Thank you Panos; back on track here.

IMHO in future might lead with this solution on any query about entitlements. Assume user has enough experience to use cmd line until further notified.

but here's my harrowing tale, in case it is helpful…

I went in unusual circles yesterday: I had reverted my whole app to a commit made on GIT on the 17th of March, and moved back to using 8.1.3, because I thought our "nightly" branch that I was working on in 9dp5 was irrevocably corrupted..

that’s where (old commit in 8.1.3)  I was unable to do a build with the latest provisioning profile and SA settings applied to the main/binary stack.  (see my email to support, which is resolved now).  

using codesign and security cmd for the app that was built on that old commit with 8.1.3: did not show any problems with entitlements… still it would not load without the invalid entitlements error.

Aside: the stack files of my main stack were quite messed up from cherry picking this stack and moving it from branch to branch etc.  it listed files that did not exist in the tree; one script I added to the tree was a .livecodescript that did not have the proper declaration on line 1.. etc. This whole stack files business needs more thought/refinement for a collaborative GIT environment.  (anyone solve this? please post as separate thread on handling your stack files via GIT.)

So I spent half a day getting nowhere in this old commit "roll-back" branch, using 8.1.3 stable

OK I thought,"we have nothing to lose here, it is only getting worse. Let me go back to the nightly branch in 9dp5, because I know I was able to build iOS standalones with that mainstack in 9dp5…" (despite other issues)

 So I  commit all my changes to the "roll-back" branch; check out nightly; do a thorough examination of my stack files and the working tree. clean up everything there. Save, go to SA settings, by now the provisioning profile had changed… so I selected the new provisioning profile (same one that was used for the build on the "roll-back" branch in 8.1.3)  and built the standalone… got the usual first session failure to find resource (can you PLEEEZE fix that?) ran it again, got a successful build. cross fingers, go to xCode to add to my phone and BOING!@ it works now.  Yay!

OK so I run codesign against that build; and also security cms against that same build/embedded.mobileprovision

now, here's the "kicker" :- the output is *exactly* the same as the build that was created in 8.1.3 that fails with the invalid entitlements error message!

 But, built now with 9dp5  it works. My "gut" is telling me that either the main stack/or the cRevStandalonesettings in the rollback commit is corrupt very deep internally OR  8.1.3  is doing something wrong when building the standalone.  Really just a hunch, could be totally wrong.

But the good news is: having your stack files not matching the working tree seems to have been a big problem… because now, I have 100% fully functional, no bugs app on my iPhone. Jai Ganesha! after a full week of spinning… we are back on track!

now, off to test on  Android…

Thank God for a GIT work flow!
--------------
 

On 4/8/17, 3:42 AM, "use-livecode on behalf of panagiotis merakos via use-livecode" <[hidden email] on behalf of [hidden email]> wrote:

    Hmm ok. Then you could probably check which entitlements are included in
    the standalone, and see if there is any that is not included in the
    provisioning profile. To do that:
   
    1. Use the codesign tool to check the entitlements on the .app bundle:
    Type in a terminal:
   
    codesign -d --entitlements :- /path/to/yourApp.app
   
    2. Use the security tool to check the entitlements of the app's embedded
    provisioning profile:
    Type in a terminal:
   
    security cms -D -i /path/to/yourApp.app/embedded.mobileprovision
   
    - Then see if there is an entitlement that is present in (1) but not in (2).
   
    Best,
    Panos

_______________________________________________
use-livecode mailing list
[hidden email]
Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode
Loading...