外部供应商开发的iOS内部发布的App [英] iOS in-house distribution of App developed by external vendor

问题描述

第3方开发了一个供我们在企业环境中私人使用的应用程序。现在是分发它的时候了，他们不想将其代码发送给我们。我觉得这会引起问题，因为必须将分发配置文件和证书发送给他们，这会破坏我们不允许的私钥。

A 3rd party has developed an App for private use in our enterprise environment. Now its come time to distribute it and they don't want to send us their code. I have a feeling this will cause an issue because the distribution profile and certificate would have to be sent to them compromising our private key which we couldn't allow.

这是吗？

编辑：作为旁注，如果每个用户只能使用私钥，我可以向他们发送私钥应用程序，即仅具有该应用程序包ID的应用程序，并且在一个企业许可下我们可以拥有具有不同私钥的不同应用程序。

as a side note, I'm ok with sending them a private key if it only is useable per App, ie only with that App bundle ID and we can have different Apps with different private keys under the one enterprise licence.

推荐答案

您必须与第三方共享您的开发人员证书（使用私钥（.p12）进行分发）才能使用您的配置文件。但是正如您提到的，您可以使用完整的限定符（例如com.yourcompany.appname）作为捆绑标识符来限制供应配置文件。但这并不意味着他们不能使用预配置文件，而是可以更新捆绑包标识符来测试其应用。

You had to share your developer certificate (Distribution with your private key (.p12)) with the third party in order to use your provisioning profile. But as you mentioned you could use complete qualifier like com.yourcompany.appname as a bundle identifier to restrict the provisioning profile. But it does not mean that they can't use the provisioning file, they could update bundle identifier to test their app.

开发人员证书和预配置文件随附于到期日日期，这可能是您的最终希望。

Developer certificate and provisioning profile are comes with the expiry date which could be your final hope.

如果我建议的话，我建议您信任您的开发人员。我确实使用证书来管理几个客户，而且我不会滥用。

If I may suggest, I suggest you to trust your developers. I do manage couple of clients with certificate and I don't misuse.

我还建议您在合同中添加一条条款，以免滥用您的供应或分发证书。聪明的开发人员不需要证书，因为我们知道如何在不进行代码签名的情况下修补xcode以在设备上运行。

I also suggest you to add a clause in your contract not to misuse your provisioning or distribution certificates. Clever developers don't need certificate as we know how to patch xcode to run on device without code signing.

这篇关于外部供应商开发的iOS内部发布的App的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！