It’s Cybersecurity Awareness Month! Join our interactive training session, or learn about security and AI from 1Password experts.
Forum Discussion
Former Member
4 years agoAutofill No Longer Working Xcode Developer or TestFlight Signed Builds?
I upgraded to 8.7.1 this morning and noticed that Autofill no longer works on builds I am testing via Xcode or build released in Test Flight. Builds that are released using DeveloperID signing or rel...
Former Member
4 years agoHi ag_Christian,
TestFlight Apps on macOS are signed by Apple in a process very similar to how released App Store apps are signed.
For that matter, Apps out of Xcode are signed too, but with a developer certificate. Thus, I'm not quite sure what rules are being applied when 1Password checks for "signed apps" (or perhaps it's all a red herring and none of this is the issue why Autofill is no longer working in these apps).
I assume you're looking for particular certificate authorities or intermediate certificates - something more than just the mere presence of a signature?
Here are the results from running codesign -d -vvv <OurApp>.app
on one of our TestFlight apps on macOS:
Executable=/Applications/<OurApp>.app/Contents/MacOS/<OurApp>
Identifier=com.<OurApp>
Format=app bundle with Mach-O universal (x86_64 arm64)
CodeDirectory v=20500 size=11703 flags=0x10000(runtime) hashes=354+7 location=embedded
Hash type=sha256 size=32
CandidateCDHash sha1=9912df38cbef2ad4d6e4aa7e99706b50d607fa5b
CandidateCDHashFull sha1=9912df38cbef2ad4d6e4aa7e99706b50d607fa5b
CandidateCDHash sha256=b39b86410dc5c791ee9434deeea8287be5fff016
CandidateCDHashFull sha256=b39b86410dc5c791ee9434deeea8287be5fff0167199d404e1f9c1e6935bade3
Hash choices=sha1,sha256
CMSDigest=d32900101ca1d9ea84247c63bc3073c3198ecf4405b1f7e1cb4fc42a4c445b81
CMSDigestType=2
CDHash=b39b86410dc5c791ee9434deeea8287be5fff016
Signature size=4745
Authority=TestFlight Beta Distribution
Authority=Apple Worldwide Developer Relations Certification Authority
Authority=Apple Root CA
Info.plist entries=42
TeamIdentifier=<OurTeam>
Runtime Version=15.4.0
Sealed Resources version=2 rules=13 files=120
Internal requirements count=1 size=124
Note the Authority=TestFlight Beta Distribution
certificate in the chain. A released App Store app signed by Apple would have Authority=Apple Mac OS Application Signing
in its place. Likewise, a development app from Xcode would have something like Authority=Apple Development: <Developer Name> (<Developer Team ID>)
.
However, all signatures are still derived from Apple Worldwide Developer Relations Certification Authority and the Apple Root CA in turn.