Re: iOS "Invalid Entitlements"
annnd it looks like this might be a case of the issue being related to appID's being case sensitive. ugh. On Thu, Jul 13, 2017 at 12:47 PM, Mike Kerner wrote: > Trying to debug invalid entitlements, and I'm not seeing the problem. > Compiles fine, codesigns fine. I don't run into an issue until > installing on a physical device. > I have checked the physical device's UDID to confirm that it is in the > ProvisionedDevices section > relevant output from codesign: > > get-task-allow > > > > aps-environment > > production > > > relevant output from security cms > > get-task-allow > > > > ps-environment > > production > > com.apple.developer.default-data-protection > > NSFileProtectionComplete > > > -- On the first day, God created the heavens and the Earth On the second day, God created the oceans. On the third day, God put the animals on hold for a few hours, and did a little diving. And God said, "This is good." ___ use-livecode mailing list use-livecode@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-livecode
Re: iOS "Invalid Entitlements"
Trying to debug invalid entitlements, and I'm not seeing the problem. Compiles fine, codesigns fine. I don't run into an issue until installing on a physical device. I have checked the physical device's UDID to confirm that it is in the ProvisionedDevices section relevant output from codesign: get-task-allow aps-environment production relevant output from security cms get-task-allow ps-environment production com.apple.developer.default-data-protection NSFileProtectionComplete ___ use-livecode mailing list use-livecode@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-livecode
Re: iOS "Invalid Entitlements"
Thank you Panos; back on track here. IMHO in future might lead with this solution on any query about entitlements. Assume user has enough experience to use cmd line until further notified. but here's my harrowing tale, in case it is helpful… I went in unusual circles yesterday: I had reverted my whole app to a commit made on GIT on the 17th of March, and moved back to using 8.1.3, because I thought our "nightly" branch that I was working on in 9dp5 was irrevocably corrupted.. that’s where (old commit in 8.1.3) I was unable to do a build with the latest provisioning profile and SA settings applied to the main/binary stack. (see my email to support, which is resolved now). using codesign and security cmd for the app that was built on that old commit with 8.1.3: did not show any problems with entitlements… still it would not load without the invalid entitlements error. Aside: the stack files of my main stack were quite messed up from cherry picking this stack and moving it from branch to branch etc. it listed files that did not exist in the tree; one script I added to the tree was a .livecodescript that did not have the proper declaration on line 1.. etc. This whole stack files business needs more thought/refinement for a collaborative GIT environment. (anyone solve this? please post as separate thread on handling your stack files via GIT.) So I spent half a day getting nowhere in this old commit "roll-back" branch, using 8.1.3 stable OK I thought,"we have nothing to lose here, it is only getting worse. Let me go back to the nightly branch in 9dp5, because I know I was able to build iOS standalones with that mainstack in 9dp5…" (despite other issues) So I commit all my changes to the "roll-back" branch; check out nightly; do a thorough examination of my stack files and the working tree. clean up everything there. Save, go to SA settings, by now the provisioning profile had changed… so I selected the new provisioning profile (same one that was used for the build on the "roll-back" branch in 8.1.3) and built the standalone… got the usual first session failure to find resource (can you PLEEEZE fix that?) ran it again, got a successful build. cross fingers, go to xCode to add to my phone and BOING!@ it works now. Yay! OK so I run codesign against that build; and also security cms against that same build/embedded.mobileprovision now, here's the "kicker" :- the output is *exactly* the same as the build that was created in 8.1.3 that fails with the invalid entitlements error message! But, built now with 9dp5 it works. My "gut" is telling me that either the main stack/or the cRevStandalonesettings in the rollback commit is corrupt very deep internally OR 8.1.3 is doing something wrong when building the standalone. Really just a hunch, could be totally wrong. But the good news is: having your stack files not matching the working tree seems to have been a big problem… because now, I have 100% fully functional, no bugs app on my iPhone. Jai Ganesha! after a full week of spinning… we are back on track! now, off to test on Android… Thank God for a GIT work flow! -- On 4/8/17, 3:42 AM, "use-livecode on behalf of panagiotis merakos via use-livecode" wrote: Hmm ok. Then you could probably check which entitlements are included in the standalone, and see if there is any that is not included in the provisioning profile. To do that: 1. Use the codesign tool to check the entitlements on the .app bundle: Type in a terminal: codesign -d --entitlements :- /path/to/yourApp.app 2. Use the security tool to check the entitlements of the app's embedded provisioning profile: Type in a terminal: security cms -D -i /path/to/yourApp.app/embedded.mobileprovision - Then see if there is an entitlement that is present in (1) but not in (2). Best, Panos ___ use-livecode mailing list use-livecode@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-livecode
Re: iOS "Invalid Entitlements"
Hmm ok. Then you could probably check which entitlements are included in the standalone, and see if there is any that is not included in the provisioning profile. To do that: 1. Use the codesign tool to check the entitlements on the .app bundle: Type in a terminal: codesign -d --entitlements :- /path/to/yourApp.app 2. Use the security tool to check the entitlements of the app's embedded provisioning profile: Type in a terminal: security cms -D -i /path/to/yourApp.app/embedded.mobileprovision - Then see if there is an entitlement that is present in (1) but not in (2). Best, Panos -- On Sat, Apr 8, 2017 at 5:31 AM, Sannyasin Brahmanathaswami via use-livecode wrote: > Hmm none of these are true, but we still get invalid entitlements. > > 1) this is an adhoc distribution profile for use with registered UDIDs ; > "Beta Version" is unchecked in the SA settings > 2) mergHK inclusion does not even appear in the inclusions options (8.1.3) > 3) "In App Purchase" is not enabled in the profile > 4) "In App Purchase" does not even appear anywhere in the Standalone > Settings for iOS I may be missing something but I sure don't see it. > ergo I can't have it checked on, if it is not there to check… > 5) push notifications is not enabled on profile and not checked in the iOS > SA settings > > Here is what I have that worked before… > > http://wiki.hindu.org/uploads/iOS-SA-Settings-Apr17.jpg > > I even tried with all these set to n/a Location services, microphone and > WiFi > > and *still* get the "Invalid Entitlements" msg > > BR > > > On 4/7/17, 6:16 AM, "use-livecode on behalf of panagiotis merakos via > use-livecode" use-livecode@lists.runrev.com> wrote: > > The cases where I had seen this "Invalid Entitlements" error are the > following: > > 1. "Beta-version" is checked in iOS standalone settings BUT the > provisioning profile is a development one (and not a distribution one) > > 2. The mergHK inclusion is checked in Inclusions, but the provisioning > profile I use does not include entitlements for HealthKit. > > 3. The "In App Purchase" is checked in iOS standalone settings BUT the > provisioning profile I used does not include entitlements for In App > Purchase. > > 4. The "Push Notifications" is checked in iOS standalone settings BUT > the > provisioning profile I used does not include entitlements for Push > Notification. > > Best, > Panos > > ___ > use-livecode mailing list > use-livecode@lists.runrev.com > Please visit this url to subscribe, unsubscribe and manage your > subscription preferences: > http://lists.runrev.com/mailman/listinfo/use-livecode ___ use-livecode mailing list use-livecode@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-livecode
Re: iOS "Invalid Entitlements"
Hmm none of these are true, but we still get invalid entitlements. 1) this is an adhoc distribution profile for use with registered UDIDs ; "Beta Version" is unchecked in the SA settings 2) mergHK inclusion does not even appear in the inclusions options (8.1.3) 3) "In App Purchase" is not enabled in the profile 4) "In App Purchase" does not even appear anywhere in the Standalone Settings for iOS I may be missing something but I sure don't see it. ergo I can't have it checked on, if it is not there to check… 5) push notifications is not enabled on profile and not checked in the iOS SA settings Here is what I have that worked before… http://wiki.hindu.org/uploads/iOS-SA-Settings-Apr17.jpg I even tried with all these set to n/a Location services, microphone and WiFi and *still* get the "Invalid Entitlements" msg BR On 4/7/17, 6:16 AM, "use-livecode on behalf of panagiotis merakos via use-livecode" wrote: The cases where I had seen this "Invalid Entitlements" error are the following: 1. "Beta-version" is checked in iOS standalone settings BUT the provisioning profile is a development one (and not a distribution one) 2. The mergHK inclusion is checked in Inclusions, but the provisioning profile I use does not include entitlements for HealthKit. 3. The "In App Purchase" is checked in iOS standalone settings BUT the provisioning profile I used does not include entitlements for In App Purchase. 4. The "Push Notifications" is checked in iOS standalone settings BUT the provisioning profile I used does not include entitlements for Push Notification. Best, Panos ___ use-livecode mailing list use-livecode@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-livecode
Re: iOS "Invalid entitlements"
The cases where I had seen this "Invalid Entitlements" error are the following: 1. "Beta-version" is checked in iOS standalone settings BUT the provisioning profile is a development one (and not a distribution one) 2. The mergHK inclusion is checked in Inclusions, but the provisioning profile I use does not include entitlements for HealthKit. 3. The "In App Purchase" is checked in iOS standalone settings BUT the provisioning profile I used does not include entitlements for In App Purchase. 4. The "Push Notifications" is checked in iOS standalone settings BUT the provisioning profile I used does not include entitlements for Push Notification. Best, Panos -- On Fri, Apr 7, 2017 at 3:34 PM, Sannyasin Brahmanathaswami via use-livecode wrote: > No I had not checked that… it was not needed two weeks ago, when I was > successfully building in 9.dp5.. . but I just tried checking that and still > get the same message… > > "invalid entitlements… missing… do not match" > > if there is a single line with http:// anywhere in our code, wiill this > trigger a failure if ATS is not disabled? > I'm not seeing anything unusual in the info.plist -- disclaimer: I'm not > trained to know exactly what to look for, but at least inter-app-audio > services are not present in the info.plist, on Slashdot there was a post > that someone who actually had to include that in their app profile because > xCode was expecting it by default, but we are not generating the info.plist > from xCode, right? LC generates it? > > There must be *some* way to diagnose this, yes/no? > > BR > > On 4/6/17, 8:12 PM, "use-livecode on behalf of panagiotis merakos via > use-livecode" use-livecode@lists.runrev.com> wrote: > > Have you checked the "beta version" in the standalone application > settings > for ios? > > On 7 Apr 2017 06:04, "Sannyasin Brahmanathaswami via use-livecode" < > use-livecode@lists.runrev.com> wrote: > > >I was having difficulty with a stack and deleted all the stack files > in > >the list and put empty into cRevStandaloneSettings > > > >and started fresh. > > > >Now I am getting "invalid entitlements" when trying to install on my > >iPhone. > > > > ___ > use-livecode mailing list > use-livecode@lists.runrev.com > Please visit this url to subscribe, unsubscribe and manage your > subscription preferences: > http://lists.runrev.com/mailman/listinfo/use-livecode > ___ use-livecode mailing list use-livecode@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-livecode
Re: iOS "Invalid entitlements"
No I had not checked that… it was not needed two weeks ago, when I was successfully building in 9.dp5.. . but I just tried checking that and still get the same message… "invalid entitlements… missing… do not match" if there is a single line with http:// anywhere in our code, wiill this trigger a failure if ATS is not disabled? I'm not seeing anything unusual in the info.plist -- disclaimer: I'm not trained to know exactly what to look for, but at least inter-app-audio services are not present in the info.plist, on Slashdot there was a post that someone who actually had to include that in their app profile because xCode was expecting it by default, but we are not generating the info.plist from xCode, right? LC generates it? There must be *some* way to diagnose this, yes/no? BR On 4/6/17, 8:12 PM, "use-livecode on behalf of panagiotis merakos via use-livecode" wrote: Have you checked the "beta version" in the standalone application settings for ios? On 7 Apr 2017 06:04, "Sannyasin Brahmanathaswami via use-livecode" < use-livecode@lists.runrev.com> wrote: >I was having difficulty with a stack and deleted all the stack files in >the list and put empty into cRevStandaloneSettings > >and started fresh. > >Now I am getting "invalid entitlements" when trying to install on my >iPhone. > ___ use-livecode mailing list use-livecode@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-livecode
Re: iOS "Invalid entitlements"
Have you checked the "beta version" in the standalone application settings
for ios?
On 7 Apr 2017 06:04, "Sannyasin Brahmanathaswami via use-livecode" <
use-livecode@lists.runrev.com> wrote:
> I was having difficulty with a stack and deleted all the stack files in
> the list and put empty into cRevStandaloneSettings
>
> and started fresh.
>
> Now I am getting "invalid entitlements" when trying to install on my
> iPhone.
>
> I did have a new user and I added their UDID, cleaned up all my old
> profiles and certs, current certificate is valid until Oct 2017, I disabled
> "inter-app-audio" in the app ID services and rebuilt the provisioning
> profile.
>
> Still no go on attempting to put on my phone… SA builder runs fine… xCode
> is giving me the old message:
>
> ===
> The executable was signed with invalid entitlements.
> The entitlements specified… …invalid … not permitted…
> do not match those specified in your Provision profile.
> ===
>
> I was very careful to take a snap shot of my SA setting before wiping them.
>
> All I can think of is perhaps there is some inclusion that I turned on
> that is causing the issue? It was the first time I saw inter-app-audio on
> in the Apple developer portal, for the services for my app ID… Perhaps it
> was there before as I have not had to go in for months… but I'm not seeing
> that in the info.plist anywhere. So I don't think it is an issue, unless
> xCode retains a memory/cache of a previous provisioning profile? I did go
> through xCode perferences, user agent, and made sure everything was
> refreshed there with one and only one latest cert and profile active.
>
> If you have check an inclusion that only applies to desktop ("Database")
> could that cause it?
>
> I set the SA to auto detect for necessary inclusions, but that takes a
> lng time.
>
> Mac Sierra
> xCode 8.2.1
> LC 9dp5
>
>
>
>
> ___
> use-livecode mailing list
> use-livecode@lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your
> subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode
iOS "Invalid entitlements"
I was having difficulty with a stack and deleted all the stack files in the
list and put empty into cRevStandaloneSettings
and started fresh.
Now I am getting "invalid entitlements" when trying to install on my iPhone.
I did have a new user and I added their UDID, cleaned up all my old profiles
and certs, current certificate is valid until Oct 2017, I disabled
"inter-app-audio" in the app ID services and rebuilt the provisioning profile.
Still no go on attempting to put on my phone… SA builder runs fine… xCode is
giving me the old message:
===
The executable was signed with invalid entitlements.
The entitlements specified… …invalid … not permitted…
do not match those specified in your Provision profile.
===
I was very careful to take a snap shot of my SA setting before wiping them.
All I can think of is perhaps there is some inclusion that I turned on that is
causing the issue? It was the first time I saw inter-app-audio on in the Apple
developer portal, for the services for my app ID… Perhaps it was there before
as I have not had to go in for months… but I'm not seeing that in the
info.plist anywhere. So I don't think it is an issue, unless xCode retains a
memory/cache of a previous provisioning profile? I did go through xCode
perferences, user agent, and made sure everything was refreshed there with one
and only one latest cert and profile active.
If you have check an inclusion that only applies to desktop ("Database") could
that cause it?
I set the SA to auto detect for necessary inclusions, but that takes a lng
time.
Mac Sierra
xCode 8.2.1
LC 9dp5
___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode
