App Store Submission: Application failed codesign verification

  • 9
  • Problem
  • Updated 6 years ago
After building the app and attempting to use Application Loader to submit it to the App Store, I'm receiving the following error:

"Application failed codesign verification. The signature was invalid, or it was not signed with an Apple submission certificate."

I created the signing key with a Distribution Certificate and an App Store Distribution Provisioning Profile.

Please see the attached images.

Here's the app I'm trying to build: https://build.phonegap.com/apps/20890

Please let me know what I can do to resolve this. We'd like to get it submitted today!

Thanks!











Photo of jacob

jacob

  • 6 Posts
  • 0 Reply Likes
  • anxious

Posted 9 years ago

  • 9
Photo of jacob

jacob

  • 6 Posts
  • 0 Reply Likes
Any ideas guys? I feel like I've exhausted all options for different attempts.
Photo of mobile

mobile

  • 3 Posts
  • 0 Reply Likes
We are having the exact same problem with our app:

https://build.phonegap.com/apps/20696

The ipa file does not appear to have any codesigning.
Photo of Ralf Gummerus

Ralf Gummerus

  • 37 Posts
  • 1 Reply Like
Hi,

Did you deploy with PhoneGap using the distribution certificate?

Regards
/Ralf
Photo of mobile

mobile

  • 3 Posts
  • 0 Reply Likes
We created a signing key in PhoneGap Build using a Distribution Certificate and an App Store Provisioning Profile.
Photo of jacob

jacob

  • 6 Posts
  • 0 Reply Likes
I also created a signing key in PhoneGap Build using a Distribution Certificate and an App Store Provisioning Profile.

Is PhoneGap Build supposed to be signing the app for distribution in the store? If so, it does not appear to be working. Is there something we're overlooking?

Thanks in advance!
Photo of Ralf Gummerus

Ralf Gummerus

  • 37 Posts
  • 1 Reply Like
Some of us are waiting for a resolution to the ADHOC distribution problem i.e. an intent to deploy with a distribution certificate and an ADHOC profile. That one is not resolved and it does sound like the root cause is common to both ADHOC and the Appstore.

Regards
/Ralf
Photo of Hardeep Shoker

Hardeep Shoker

  • 1941 Posts
  • 89 Reply Likes
Hello,

This is an issue we are currently investigating (both Adhoc and Appstore submissions). We have had successful build that have been submitted into the Appstore, however as there has been some concerns about signing we will look into either resolving the issues or providing a better explanation on how to sign apps with build.

Thanks for you patience,

Hardeep Shoker
Photo of Ralf Gummerus

Ralf Gummerus

  • 37 Posts
  • 1 Reply Like
Hi,
I have designed, built and installed a couple of mobile webs and now some apps for the Iphone. I have only used my developer license so far but is thinking about getting further on towards adhoc apps and of course the app store. I do not think I do understand how to use the distribution license with ADHOC provisioning because it has been failing. I am developing on Windows so to get my p12 certificate I use openSSL to produce the Certificate Signing request for the Apple provisioning and later the p12 certificate.

I thought that it would be the same procedure with the distribution license so I did give it the same treatment with OpenSSL to produce a p12 certificate, then the mobileprovisioning file from the provisioning section of Apple IOS dev.

Lastly building with PhoneGap build using the ADHOC provisioning file and the p12 certicate produced with the distribution license. The build completes normally, the app IPA file loads and shows up in Itunes but when syncing and during the IPA upload, Itunes reports:

the app ... was not installed on the iPhone because an unknown error occurred (0xE800801C)

Any ideas on the matter ( .i.e. building for ADHOC distribution to the Iphone )?

Regards
/Ralf

This reply was created from a merged topic originally titled
Problems with Apple Iphone ADHOC distribution.
Photo of Issac Kelly

Issac Kelly

  • 4 Posts
  • 0 Reply Likes
I'm able to build my app with a developer profile, but not an adhock distribution profile. App is 3107 - but I don't have any better error message.

This reply was created from a merged topic originally titled
iPhone developer profile works, adhoc distribution doesn't/.
Photo of Hardeep Shoker

Hardeep Shoker

  • 1941 Posts
  • 89 Reply Likes
Hey Everyone,

Alright, so I tested both Appstore distribution and Adhoc Distribution and was able to get them both successfully working. I took a couple hours however I was able to verify that both PhoneGap Build and xcode were signing them with the mentioned profiles. One tip that I can give is to test that your combination of key/cert/provision are correct via the Xcode organizer->Archive->Validate. If you are able to validate through this and produce a valid ipa file through Xcode however not able to via build I am willing to look into the problem further with you.

Feel free to leave your comments. Or ask any questions on how I produced these results.

Hardeep Shoker
Photo of Hardeep Shoker

Hardeep Shoker

  • 1941 Posts
  • 89 Reply Likes
Here is also another resource that I took a read into.

http://boga.wordpress.com/2008/07/16/...
Photo of Ralf Gummerus

Ralf Gummerus

  • 37 Posts
  • 1 Reply Like
Hi Hardeep,

Did you notice what Miklos Fazeka said about ADHOC distribution?

BEGIN QUOTE
-------------------
I just couldn’t get Ad Hoc profiles to work. I always have this error in my iPhone console log:
entitlement 'get-task-allow' has value not permitted by provisioning profile
I’ve tried following every step of the iPhone Developer Portal Program Guide PDF, and i still get this.
In iTunes i either get a 0xE8000001 or 0xE8000013 when trying to install an application with an AdHoc provisioning profile.
-------------------
END QUOTE

Well, this is what I got and still is getting as of today's ADHOC deploy attempt. To be exact:
the app ... was not installed on the iPhone because an unknown error occurred (0xE800801C)

I will try to to see if this problem is machine dependent / ITunes dependent so I will try to install on a Win 7/64 machine with ITunes 10.4

Regards
/Ralf
Photo of Hardeep Shoker

Hardeep Shoker

  • 1941 Posts
  • 89 Reply Likes
Hey Ralf and Miklos,

This may be of some help.

http://boga.wordpress.com/2008/07/16/...

Scroll down to the Adhoc section, you can create the file via File->New File->Entitlements

Hardeep Shoker
Photo of Ralf Gummerus

Ralf Gummerus

  • 37 Posts
  • 1 Reply Like
Hi Hardeep,

I do not think I understand. As I am developing on Windows and not Apple, I develop my apps based on HTML5, JQuery, JQuery Mobile. My development systems are Dreamweaver CS5.5 / handcoding / finally deploying with PhoneGap. I am of course looking at using Eclipse with PhoneGap too.

IPhone is of course not the only Smartphone but I believe a great value in PhoneGap deploy is being able to bypass most of the developer tools and especially from Apple. The whole thing is based on wrapping plain web technology to work from within the UIWebView.

Seem t be piece of cake, but how if you are not having the Apple tools?

So what do I have to do produce those new documents and make those proposed changes (please se info below - its a little bit long but I'll include it):

/Ralf --- SEE BELOW FOR HOW TO FIX ADHOC AND OBSERVE THE DATE!!! ----

goose says:
August 23, 2008 at 2:46 am

FINALLY!!!

DipDog3 at the following page:
http://forums.macrumors.com/archive/i...

SOLVED my problem with Ad Hoc Distribution...

First, look at your ad-hoc provisioning file in text edit (just view it, don’t overwrite it!)

If it does NOT contain a line that says “get-task-allow” then you need to go to the program portal and get a NEW ad-hoc provisioning profile.
There is a workaround where you can use the provisioning profile without this key, but Apple apparently has added this key to the ad-hoc provisions, and you might as well have the latest.

However, that is not the final fix.

The next thing you have to do is add a new file to the root of your project ... file, new file, iphone, code signing, entitlements. Call it “dist.plist” ...

Open that file, and it will say “get-task-allow” with a checkmark for “true” — this needs to be FALSE. Uncheck the checkbox, or if in text mode, type in “false”

OK, almost there!!!

Open the target build info window and where it says “Code Signing Entitlements” add “dist.plist”

CLEAN THE BUILD

BUILD AND GO

ENJOY.
Photo of crazydog115

crazydog115

  • 39 Posts
  • 0 Reply Likes
I'm still stuck with the problem the OP has. I'm not using Ad Hoc distribution, but I get the following messages:
Application failed codesign verification. The signature was invalid, or it was not signed with an Apple submission certificate.

Unable to extract entitlements from application (path to application)


I'm not sure what I'm doing wrong here. I created a Provisioning Profile and a Certificate for that profile, used those to create a Key in PhoneGap Build, waited for a build, and attempted to submit the created ipa...I'm not using XCode so I have nothing in my "Archives" section to verify, and I'm all out of ideas. =/
Photo of Hardeep Shoker

Hardeep Shoker

  • 1941 Posts
  • 89 Reply Likes
Hey CrazyDog,

Just wanted to get this cleared out, which method worked for you? Using Build or Xcode?

Hardeep Shoker
Photo of crazydog115

crazydog115

  • 39 Posts
  • 0 Reply Likes
XCode.
Photo of Hardeep Shoker

Hardeep Shoker

  • 1941 Posts
  • 89 Reply Likes
What is the app id? Also if you are willing to send me the mobile provisioning profile and key I used in xcode (hardeep.shoker@nitobi.com) I would be willing to work through the issue.

Hardeep Shoker
Photo of Ralf Gummerus

Ralf Gummerus

  • 37 Posts
  • 1 Reply Like
Hi what is the status on this issue?

did you succeed in deploy crazydog115's app for release?

Regards
/Ralf
Photo of crazydog115

crazydog115

  • 39 Posts
  • 0 Reply Likes
No - we could not get the Application Loader to accept an app built on Build.
Photo of Ralf Gummerus

Ralf Gummerus

  • 37 Posts
  • 1 Reply Like
Hi,
There are only 2 cases where the "Entitlements.plist" file is needed:
1) For ADHOC distribution
2) Keychain data sharing

Apart from the cases above NO "Entitlements.plist" file is needed. If you don't need it, don't include it, because an invalid one is a roadblock.

For ADHOC distribution an incomplete "Entitlements.plist" file where only the "get-task-allow" key is included will render it valid for ADHOC distribution.

Example of a valid "Entitlements.plist" file below:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "apple.com/DTDs/PropertyList-1.0.dtd">;
<plist version="1.0">
<dict>
<key>get-task-allow</key><false/>
</dict>
</plist>


( BUT IS IT JUST TO STICK IT INTO THE WEB ROOT AND PHONEGAP DEPLOY? IT APPEARS TO BE THAT SIMPLE.)

With respect to the ADHOC distribution profile, I checked it out and it comes with the matching "get-task-allow" key. so no bother with that one.

But at the end of the day, I do not know if I really need ADHOC distribution. I will try tomorrow, including the "Entitlements.plist" file when doing my daily deploy.

What I do know is that I must get all the way to the AppStore with my products (apps) without no other Apple tools than certificate handling and the distribution profiles.

Regards
/Ralf
Photo of Ralf Gummerus

Ralf Gummerus

  • 37 Posts
  • 1 Reply Like
Hello everybody,
I am giving up on trying to successfully building for ADHOC. I added the Entitlements.plist xml file to my package in the root, rebuilt it with my Adhoc provisioning file and tried to install with Itunes trough my older XP (32bit) and my newer Win 7 (64bit) computers using Itunes 10.4 and with an IPhone 3 (4.3.5).

ITunes uploads but install stalls and finishes with the same error message:

"the app ... was not installed on the iPhone because an unknown error occurred (0xE800801C)"

The Iphone log file contains these error messages after a failed install:
(log from the Iphone Configuration Utility)

Jul 26 14:02:02 unknown installd[101] <Error>: 0122a000 verify_signer_identity: Could not copy validate signature: -402620388
Jul 26 14:02:02 unknown installd[101] <Error>: 0122a000 preflight_application_install: Could not verify executable at /var/tmp/install_staging.74NRyG/foo_extracted/Payload/memoryZen.app
Jul 26 14:02:02 unknown installd[101] <Error>: 0122a000 install_application: Could not preflight application install
Jul 26 14:02:02 unknown mobile_installation_proxy[136] <Error>: handle_install: Installation failed
Jul 26 14:02:02 unknown mobile_installation_proxy[136] <Error>: secure_send_error: Could not send error response to host
Jul 26 14:02:03 unknown installd[101] <Error>: 0122a000 handle_install: API failed
Jul 26 14:02:03 unknown installd[101] <Error>: 0122a000 send_message: failed to send mach message of 71 bytes: 10000003
Jul 26 14:02:03 unknown installd[101] <Error>: 0122a000 send_error: Could not send error response to client


I do not know what more I can do.

Regards
/Ralf
Photo of Ralf Gummerus

Ralf Gummerus

  • 37 Posts
  • 1 Reply Like
Hi again from DieHard,
This time I tried to install for Adhoc using the Iphone "Configuration Utility". Here I am getting this error message:

Could not install application on device. Error: No code signature found

This is a little more clear and seem to correspond to the Iphone log entry:

ul 26 14:02:02 unknown installd[101] : 0122a000 verify_signer_identity: Could not copy validate signature: -402620388

So behind all this hazzle so far it is a code signing problem that prevents the Adhoc install.

Regards
/Ralf
Photo of harrells

harrells

  • 4 Posts
  • 0 Reply Likes
Hello,

I have been receiving the following message when I attempt to use Application Loader to upload the IPA generated by PhoneGap Build for review in the AppStore:

Application failed codesign verification. The signature was invalid, or it was not signed with an Apple submission certificate.


Yes I'm using a distribution certificate and provisioning profile.

Please let me know if you can diagnose this issue. Much appreciated!

My app ID is 23034

This reply was created from a merged topic originally titled
AppStore Submission Failure: "Application failed codesign verification...".
Photo of harrells

harrells

  • 4 Posts
  • 0 Reply Likes
Update:

Considering Apple requires submissions to go through their App Loader anyways, I just built the app with vanilla PhoneGap and XCode. Submitted, approved, and available now on the app store.

Yes, it required a bit more work, but I was also able to add a useful plugin and add iPad support.

Until the issues with PGB get fleshed out, I think I will stick to this method at least for iOS. Will probably need to do the same for Android ...
Photo of Dharma Ferrari

Dharma Ferrari

  • 1 Post
  • 0 Reply Likes
jacob, have you resolved that problem?
Photo of Hardeep Shoker

Hardeep Shoker

  • 1941 Posts
  • 89 Reply Likes
Hello Everyone,

Just wanted to give you an update that we are looking into a solution to resolve the issue.

Hang tight,

Hardeep Shoker
Photo of ripvanwinkle44

ripvanwinkle44

  • 31 Posts
  • 0 Reply Likes
Just had an app submission fail for: "Application failed codesign verification. The signature was invalid...". Any headway on a resolution?

Thanks,

L
Photo of Hardeep Shoker

Hardeep Shoker

  • 1941 Posts
  • 89 Reply Likes
Hello,

Sorry this was put on the back burner while other issues were addressed; however I'm implementing a solution at the moment. Hopefully we should have a fix soon.

Thanks for your patience,

Hardeep Shoker
Photo of ripvanwinkle44

ripvanwinkle44

  • 31 Posts
  • 0 Reply Likes
When I attempted to upload via Application Loader the submission failed for three reasons:
1. "com.phonegap.www differs from reserved bundle identifier".
2. "Apple failed Codesign verification. The signature was invalid or was not signed with an Apple submission certificate".
3. "Unable to extract codesigning entitlements from your application. Please make sure application is a valid Mach executable that's properly codesigned".

I solved the first problem by going into the info.plist file via Xcode (after uncompressing the .ipa file) and changing the Bundle ID to match what Apple has on the iOS Provisioning Portal (10 character prefix) (why wouldn't that be done programmatically? Apple will never recognize " com.phonegap.www" as its ID). Compressed the folder again, resubmitted via Application Loader. The first error did not repeat but errors 2 and 3 did. I can see the info.plist file in the uncompressed folder but where in the entitlements.plist file??? Isn't that where the codesigning takes place?

Need a resolution on these matters soon please. App submission is delayed until resolved.
Photo of ripvanwinkle44

ripvanwinkle44

  • 31 Posts
  • 0 Reply Likes
correction: sentence should read "where is the entitlements.plist file?".