blob: 4080a28a27e519fa9413c6cdc61b2f363c8152ff [file] [log] [blame]
/*
* ideviceprovision.c
* Simple utility to install, get, or remove provisioning profiles
* to/from idevices
*
* Copyright (c) 2012-2016 Nikias Bassen, All Rights Reserved.
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 2.1 of the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this library; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
*/
#ifdef HAVE_CONFIG_H
#include <config.h>
#endif
#define TOOL_NAME "ideviceprovision"
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <getopt.h>
#include <sys/stat.h>
#include <errno.h>
#ifndef WIN32
#include <signal.h>
#endif
#ifdef WIN32
#include <windows.h>
#else
#include <arpa/inet.h>
#endif
#include <libimobiledevice/libimobiledevice.h>
#include <libimobiledevice/lockdown.h>
#include <libimobiledevice/misagent.h>
#include <plist/plist.h>
static void print_usage(int argc, char **argv, int is_error)
{
char *name = strrchr(argv[0], '/');
fprintf(is_error ? stderr : stdout, "Usage: %s [OPTIONS] COMMAND\n", (name ? name + 1: argv[0]));
fprintf(is_error ? stderr : stdout,
"\n"
"Manage provisioning profiles on a device.\n"
"\n"
"Where COMMAND is one of:\n"
" install FILE Installs the provisioning profile specified by FILE.\n"
" A valid .mobileprovision file is expected.\n"
" list Get a list of all provisioning profiles on the device.\n"
" copy PATH Retrieves all provisioning profiles from the device and\n"
" stores them into the existing directory specified by PATH.\n"
" The files will be stored as UUID.mobileprovision\n"
" copy UUID PATH Retrieves the provisioning profile identified by UUID\n"
" from the device and stores it into the existing directory\n"
" specified by PATH. The file will be stored as UUID.mobileprovision.\n"
" remove UUID Removes the provisioning profile identified by UUID.\n"
" remove-all Removes all installed provisioning profiles.\n"
" dump FILE Prints detailed information about the provisioning profile\n"
" specified by FILE.\n"
"\n"
"The following OPTIONS are accepted:\n"
" -u, --udid UDID target specific device by UDID\n"
" -n, --network connect to network device\n"
" -x, --xml print XML output when using the 'dump' command\n"
" -d, --debug enable communication debugging\n"
" -h, --help prints usage information\n"
" -v, --version prints version information\n"
"\n"
"Homepage: <" PACKAGE_URL ">\n"
"Bug Reports: <" PACKAGE_BUGREPORT ">\n"
);
}
enum {
OP_INSTALL,
OP_LIST,
OP_COPY,
OP_REMOVE,
OP_DUMP,
NUM_OPS
};
#define ASN1_SEQUENCE 0x30
#define ASN1_CONTAINER 0xA0
#define ASN1_OBJECT_IDENTIFIER 0x06
#define ASN1_OCTET_STRING 0x04
static void asn1_next_item(unsigned char** p)
{
char bsize = *(*p+1);
if (bsize & 0x80) {
*p += 2 + (bsize & 0xF);
} else {
*p += 3;
}
}
static size_t asn1_item_get_size(const unsigned char* p)
{
size_t res = 0;
char bsize = *(p+1);
if (bsize & 0x80) {
uint16_t ws = 0;
uint32_t ds = 0;
switch (bsize & 0xF) {
case 2:
ws = *(uint16_t*)(p+2);
res = ntohs(ws);
break;
case 3:
ds = *(uint32_t*)(p+2);
res = ntohl(ds) >> 8;
break;
case 4:
ds = *(uint32_t*)(p+2);
res = ntohl(ds);
break;
default:
fprintf(stderr, "ERROR: Invalid or unimplemented byte size %d\n", bsize & 0xF);
break;
}
} else {
res = (int)bsize;
}
return res;
}
static void asn1_skip_item(unsigned char** p)
{
size_t sz = asn1_item_get_size(*p);
*p += 2;
*p += sz;
}
static plist_t profile_get_embedded_plist(plist_t profile)
{
if (plist_get_node_type(profile) != PLIST_DATA) {
fprintf(stderr, "%s: unexpected plist node type for profile (PLIST_DATA expected)\n", __func__);
return NULL;
}
char* bbuf = NULL;
uint64_t blen = 0;
plist_get_data_val(profile, &bbuf, &blen);
if (!bbuf) {
fprintf(stderr, "%s: could not get data value from plist node\n", __func__);
return NULL;
}
unsigned char* pp = (unsigned char*)bbuf;
if (*pp != ASN1_SEQUENCE) {
free(bbuf);
fprintf(stderr, "%s: unexpected profile data (0)\n", __func__);
return NULL;
}
size_t slen = asn1_item_get_size(pp);
char bsize = *(pp+1);
if (bsize & 0x80) {
slen += 2 + (bsize & 0xF);
} else {
slen += 3;
}
if (slen != blen) {
free(bbuf);
fprintf(stderr, "%s: unexpected profile data (1)\n", __func__);
return NULL;
}
asn1_next_item(&pp);
if (*pp != ASN1_OBJECT_IDENTIFIER) {
free(bbuf);
fprintf(stderr, "%s: unexpected profile data (2)\n", __func__);
return NULL;
}
asn1_skip_item(&pp);
if (*pp != ASN1_CONTAINER) {
free(bbuf);
fprintf(stderr, "%s: unexpected profile data (3)\n", __func__);
return NULL;
}
asn1_next_item(&pp);
if (*pp != ASN1_SEQUENCE) {
free(bbuf);
fprintf(stderr, "%s: unexpected profile data (4)\n", __func__);
return NULL;
}
asn1_next_item(&pp);
int k = 0;
// go to the 3rd element (skip 2)
while (k < 2) {
asn1_skip_item(&pp);
k++;
}
if (*pp != ASN1_SEQUENCE) {
free(bbuf);
fprintf(stderr, "%s: unexpected profile data (5)\n", __func__);
return NULL;
}
asn1_next_item(&pp);
if (*pp != ASN1_OBJECT_IDENTIFIER) {
free(bbuf);
fprintf(stderr, "%s: unexpected profile data (6)\n", __func__);
return NULL;
}
asn1_skip_item(&pp);
if (*pp != ASN1_CONTAINER) {
free(bbuf);
fprintf(stderr, "%s: unexpected profile data (7)\n", __func__);
return NULL;
}
asn1_next_item(&pp);
if (*pp != ASN1_OCTET_STRING) {
free(bbuf);
fprintf(stderr, "%s: unexpected profile data (8)\n", __func__);
return NULL;
}
slen = asn1_item_get_size(pp);
asn1_next_item(&pp);
plist_t pl = NULL;
plist_from_xml((char*)pp, slen, &pl);
free(bbuf);
return pl;
}
static int profile_read_from_file(const char* path, unsigned char **profile_data, unsigned int *profile_size)
{
FILE* f = fopen(path, "rb");
if (!f) {
fprintf(stderr, "Could not open file '%s'\n", path);
return -1;
}
fseek(f, 0, SEEK_END);
long int size = ftell(f);
fseek(f, 0, SEEK_SET);
if (size >= 0x1000000) {
fprintf(stderr, "The file '%s' is too large for processing.\n", path);
fclose(f);
return -1;
}
unsigned char* buf = malloc(size);
if (!buf) {
fprintf(stderr, "Could not allocate memory...\n");
fclose(f);
return -1;
}
long int cur = 0;
while (cur < size) {
ssize_t r = fread(buf+cur, 1, 512, f);
if (r <= 0) {
break;
}
cur += r;
}
fclose(f);
if (cur != size) {
free(buf);
fprintf(stderr, "Could not read in file '%s' (size %ld read %ld)\n", path, size, cur);
return -1;
}
*profile_data = buf;
*profile_size = (unsigned int)size;
return 0;
}
int main(int argc, char *argv[])
{
lockdownd_client_t client = NULL;
lockdownd_error_t ldret = LOCKDOWN_E_UNKNOWN_ERROR;
lockdownd_service_descriptor_t service = NULL;
idevice_t device = NULL;
idevice_error_t ret = IDEVICE_E_UNKNOWN_ERROR;
int res = 0;
int i;
int op = -1;
int output_xml = 0;
const char* udid = NULL;
const char* param = NULL;
const char* param2 = NULL;
int use_network = 0;
int c = 0;
const struct option longopts[] = {
{ "debug", no_argument, NULL, 'd' },
{ "help", no_argument, NULL, 'h' },
{ "udid", required_argument, NULL, 'u' },
{ "network", no_argument, NULL, 'n' },
{ "version", no_argument, NULL, 'v' },
{ "xml", no_argument, NULL, 'x' },
{ NULL, 0, NULL, 0}
};
#ifndef WIN32
signal(SIGPIPE, SIG_IGN);
#endif
/* parse cmdline args */
while ((c = getopt_long(argc, argv, "dhu:nvx", longopts, NULL)) != -1) {
switch (c) {
case 'd':
idevice_set_debug_level(1);
break;
case 'u':
if (!*optarg) {
fprintf(stderr, "ERROR: UDID argument must not be empty!\n");
print_usage(argc, argv, 1);
return 2;
}
udid = optarg;
break;
case 'n':
use_network = 1;
break;
case 'h':
print_usage(argc, argv, 0);
return 0;
case 'v':
printf("%s %s\n", TOOL_NAME, PACKAGE_VERSION);
return 0;
case 'x':
output_xml = 1;
break;
default:
print_usage(argc, argv, 1);
return 2;
}
}
argc -= optind;
argv += optind;
if (!argv[0]) {
fprintf(stderr, "ERROR: Missing command.\n");
print_usage(argc+optind, argv-optind, 1);
return 2;
}
i = 0;
if (!strcmp(argv[i], "install")) {
op = OP_INSTALL;
i++;
if (!argv[i] || !*argv[i]) {
fprintf(stderr, "Missing argument for 'install' command.\n");
print_usage(argc+optind, argv-optind, 1);
return 2;
}
param = argv[i];
}
else if (!strcmp(argv[i], "list")) {
op = OP_LIST;
}
else if (!strcmp(argv[i], "copy")) {
op = OP_COPY;
i++;
if (!argv[i] || !*argv[i]) {
fprintf(stderr, "Missing argument for 'copy' command.\n");
print_usage(argc+optind, argv-optind, 1);
return 2;
}
param = argv[i];
i++;
if (argv[i] && (strlen(argv[i]) > 0)) {
param2 = argv[i];
}
}
else if (!strcmp(argv[i], "remove")) {
op = OP_REMOVE;
i++;
if (!argv[i] || !*argv[i]) {
fprintf(stderr, "Missing argument for 'remove' command.\n");
print_usage(argc+optind, argv-optind, 1);
return 2;
}
param = argv[i];
}
else if (!strcmp(argv[i], "remove-all")) {
op = OP_REMOVE;
}
else if (!strcmp(argv[i], "dump")) {
op = OP_DUMP;
i++;
if (!argv[i] || !*argv[i]) {
fprintf(stderr, "Missing argument for 'remove' command.\n");
print_usage(argc+optind, argv-optind, 1);
return 2;
}
param = argv[i];
}
if ((op == -1) || (op >= NUM_OPS)) {
fprintf(stderr, "ERROR: Unsupported command '%s'\n", argv[i]);
print_usage(argc+optind, argv-optind, 1);
return 2;
}
if (op == OP_DUMP) {
unsigned char* profile_data = NULL;
unsigned int profile_size = 0;
if (profile_read_from_file(param, &profile_data, &profile_size) != 0) {
return -1;
}
plist_t pdata = plist_new_data((char*)profile_data, profile_size);
plist_t pl = profile_get_embedded_plist(pdata);
plist_free(pdata);
free(profile_data);
if (pl) {
if (output_xml) {
char* xml = NULL;
uint32_t xlen = 0;
plist_to_xml(pl, &xml, &xlen);
if (xml) {
printf("%s\n", xml);
free(xml);
}
} else {
if (pl && (plist_get_node_type(pl) == PLIST_DICT)) {
plist_write_to_stream(pl, stdout, PLIST_FORMAT_LIMD, 0);
} else {
fprintf(stderr, "ERROR: unexpected node type in profile plist (not PLIST_DICT)\n");
res = -1;
}
}
} else {
fprintf(stderr, "ERROR: could not extract embedded plist from profile!\n");
}
plist_free(pl);
return res;
}
if (op == OP_COPY) {
struct stat st;
const char *checkdir = (param2) ? param2 : param;
if ((stat(checkdir, &st) < 0) || !S_ISDIR(st.st_mode)) {
fprintf(stderr, "ERROR: %s does not exist or is not a directory!\n", checkdir);
return -1;
}
}
ret = idevice_new_with_options(&device, udid, (use_network) ? IDEVICE_LOOKUP_NETWORK : IDEVICE_LOOKUP_USBMUX);
if (ret != IDEVICE_E_SUCCESS) {
if (udid) {
printf("No device found with udid %s.\n", udid);
} else {
printf("No device found.\n");
}
return -1;
}
if (LOCKDOWN_E_SUCCESS != (ldret = lockdownd_client_new_with_handshake(device, &client, TOOL_NAME))) {
fprintf(stderr, "ERROR: Could not connect to lockdownd, error code %d\n", ldret);
idevice_free(device);
return -1;
}
plist_t pver = NULL;
char *pver_s = NULL;
lockdownd_get_value(client, NULL, "ProductVersion", &pver);
if (pver && plist_get_node_type(pver) == PLIST_STRING) {
plist_get_string_val(pver, &pver_s);
}
plist_free(pver);
int product_version_major = 0;
int product_version_minor = 0;
int product_version_patch = 0;
if (pver_s) {
sscanf(pver_s, "%d.%d.%d", &product_version_major, &product_version_minor, &product_version_patch);
free(pver_s);
}
if (product_version_major == 0) {
fprintf(stderr, "ERROR: Could not determine the device's ProductVersion\n");
lockdownd_client_free(client);
idevice_free(device);
return -1;
}
int product_version = ((product_version_major & 0xFF) << 16) | ((product_version_minor & 0xFF) << 8) | (product_version_patch & 0xFF);
lockdownd_error_t lerr = lockdownd_start_service(client, MISAGENT_SERVICE_NAME, &service);
if (lerr != LOCKDOWN_E_SUCCESS) {
fprintf(stderr, "Could not start service %s: %s\n", MISAGENT_SERVICE_NAME, lockdownd_strerror(lerr));
lockdownd_client_free(client);
idevice_free(device);
return -1;
}
lockdownd_client_free(client);
client = NULL;
misagent_client_t mis = NULL;
if (misagent_client_new(device, service, &mis) != MISAGENT_E_SUCCESS) {
fprintf(stderr, "Could not connect to %s on device\n", MISAGENT_SERVICE_NAME);
if (service)
lockdownd_service_descriptor_free(service);
lockdownd_client_free(client);
idevice_free(device);
return -1;
}
if (service)
lockdownd_service_descriptor_free(service);
switch (op) {
case OP_INSTALL:
{
unsigned char* profile_data = NULL;
unsigned int profile_size = 0;
if (profile_read_from_file(param, &profile_data, &profile_size) != 0) {
break;
}
uint64_t psize = profile_size;
plist_t pdata = plist_new_data((const char*)profile_data, psize);
free(profile_data);
if (misagent_install(mis, pdata) == MISAGENT_E_SUCCESS) {
printf("Profile '%s' installed successfully.\n", param);
} else {
int sc = misagent_get_status_code(mis);
fprintf(stderr, "Could not install profile '%s', status code: 0x%x\n", param, sc);
}
}
break;
case OP_LIST:
case OP_COPY:
{
plist_t profiles = NULL;
misagent_error_t merr;
if (product_version < 0x090300) {
merr = misagent_copy(mis, &profiles);
} else {
merr = misagent_copy_all(mis, &profiles);
}
if (merr == MISAGENT_E_SUCCESS) {
int found_match = 0;
uint32_t num_profiles = plist_array_get_size(profiles);
if (op == OP_LIST || !param2) {
printf("Device has %d provisioning %s installed:\n", num_profiles, (num_profiles == 1) ? "profile" : "profiles");
}
uint32_t j;
for (j = 0; !found_match && j < num_profiles; j++) {
char* p_name = NULL;
char* p_uuid = NULL;
plist_t profile = plist_array_get_item(profiles, j);
plist_t pl = profile_get_embedded_plist(profile);
if (pl && (plist_get_node_type(pl) == PLIST_DICT)) {
plist_t node;
node = plist_dict_get_item(pl, "Name");
if (node && (plist_get_node_type(node) == PLIST_STRING)) {
plist_get_string_val(node, &p_name);
}
node = plist_dict_get_item(pl, "UUID");
if (node && (plist_get_node_type(node) == PLIST_STRING)) {
plist_get_string_val(node, &p_uuid);
}
}
if (param2) {
if (p_uuid && !strcmp(p_uuid, param)) {
found_match = 1;
} else {
free(p_uuid);
free(p_name);
continue;
}
}
printf("%s - %s\n", (p_uuid) ? p_uuid : "(unknown id)", (p_name) ? p_name : "(no name)");
if (op == OP_COPY) {
char pfname[512];
if (p_uuid) {
sprintf(pfname, "%s/%s.mobileprovision", (param2) ? param2 : param, p_uuid);
} else {
sprintf(pfname, "%s/profile%d.mobileprovision", (param2) ? param2 : param, j);
}
FILE* f = fopen(pfname, "wb");
if (f) {
char* dt = NULL;
uint64_t ds = 0;
plist_get_data_val(profile, &dt, &ds);
fwrite(dt, 1, ds, f);
fclose(f);
printf(" => %s\n", pfname);
} else {
fprintf(stderr, "Could not open '%s' for writing: %s\n", pfname, strerror(errno));
}
}
free(p_uuid);
free(p_name);
}
if (param2 && !found_match) {
fprintf(stderr, "Profile '%s' was not found on the device.\n", param);
res = -1;
}
} else {
int sc = misagent_get_status_code(mis);
fprintf(stderr, "Could not get installed profiles from device, status code: 0x%x\n", sc);
res = -1;
}
plist_free(profiles);
}
break;
case OP_REMOVE:
if (param) {
/* remove specified provisioning profile */
if (misagent_remove(mis, param) == MISAGENT_E_SUCCESS) {
printf("Profile '%s' removed.\n", param);
} else {
int sc = misagent_get_status_code(mis);
fprintf(stderr, "Could not remove profile '%s', status code 0x%x\n", param, sc);
}
} else {
/* remove all provisioning profiles */
plist_t profiles = NULL;
misagent_error_t merr;
if (product_version < 0x090300) {
merr = misagent_copy(mis, &profiles);
} else {
merr = misagent_copy_all(mis, &profiles);
}
if (merr == MISAGENT_E_SUCCESS) {
uint32_t j;
uint32_t num_removed = 0;
for (j = 0; j < plist_array_get_size(profiles); j++) {
char* p_name = NULL;
char* p_uuid = NULL;
plist_t profile = plist_array_get_item(profiles, j);
plist_t pl = profile_get_embedded_plist(profile);
if (pl && (plist_get_node_type(pl) == PLIST_DICT)) {
plist_t node;
node = plist_dict_get_item(pl, "Name");
if (node && (plist_get_node_type(node) == PLIST_STRING)) {
plist_get_string_val(node, &p_name);
}
node = plist_dict_get_item(pl, "UUID");
if (node && (plist_get_node_type(node) == PLIST_STRING)) {
plist_get_string_val(node, &p_uuid);
}
}
if (p_uuid) {
if (misagent_remove(mis, p_uuid) == MISAGENT_E_SUCCESS) {
printf("OK profile removed: %s - %s\n", p_uuid, (p_name) ? p_name : "(no name)");
num_removed++;
} else {
int sc = misagent_get_status_code(mis);
printf("FAIL profile not removed: %s - %s (status code 0x%x)\n", p_uuid, (p_name) ? p_name : "(no name)", sc);
}
}
free(p_name);
free(p_uuid);
}
printf("%d profiles removed.\n", num_removed);
} else {
int sc = misagent_get_status_code(mis);
fprintf(stderr, "Could not get installed profiles from device, status code: 0x%x\n", sc);
res = -1;
}
plist_free(profiles);
}
break;
default:
break;
}
misagent_client_free(mis);
idevice_free(device);
return res;
}