jtool help

Used for discussing the various tools in the book as well as encouraging members to share tools

jtool help

Postby breakmyapple » Sun Feb 18, 2018 3:46 pm

hey guys
Im having some trouble with jtool. I cant seem to figure out how to get it to sign an app.
no matter what command i use or file I target. It keeps returning unable to open file.
any help would be very appreciated. I only started using it today so its a bit new :roll:
thanks in advance
breakmyapple
 
Posts: 6
Joined: Sun Feb 18, 2018 3:35 pm

Re: jtool help

Postby morpheus » Sun Feb 18, 2018 5:06 pm

http://newosxbook.com/tools/jtool.html#darncool

shows how to code sign. Basically, the right command to use it

jtool --sign --inplace --ent ent.xml file

where file is the file to sign and ent.xml is entitlements you want to embed.
morpheus
Site Admin
 
Posts: 738
Joined: Thu Apr 11, 2013 6:24 pm

Re: jtool help

Postby breakmyapple » Sun Feb 18, 2018 7:52 pm

thanks for the quick response and spoon feeding lol
sorry im still a little confused. . .so Im typing something like :
ARCH=arm64 jtool --sign --inplace --ent /var/mobile/applications/kodi.app/kodi ent.xml
i get unable to find/open entitlement file for signing ?
i know it something really silly but im just dont know what
thanks again for helping a noob gain some knowledge man
breakmyapple
 
Posts: 6
Joined: Sun Feb 18, 2018 3:35 pm

Re: jtool help

Postby breakmyapple » Mon Feb 19, 2018 9:48 am

I get kind of get it now it runs if I leave the --ent and ent.xml out something like this:
Code: Select all
JDEBUG=1 ARCH=arm64 jtool --sign --inplace /var/mobile/Applications/Kodi.app/Kodi


I get a read out to say it's signed but the app still won't open.
So I add back the -- ent and ent.xml part and I get unable to find /open entitlements?
A bit further forward but still in the dark lol
breakmyapple
 
Posts: 6
Joined: Sun Feb 18, 2018 3:35 pm

Re: jtool help

Postby acura » Mon Feb 19, 2018 11:45 am

breakmyapple wrote:I get kind of get it now it runs if I leave the --ent and ent.xml out something like this:
Code: Select all
JDEBUG=1 ARCH=arm64 jtool --sign --inplace /var/mobile/Applications/Kodi.app/Kodi


I get a read out to say it's signed but the app still won't open.
So I add back the -- ent and ent.xml part and I get unable to find /open entitlements?
A bit further forward but still in the dark lol


Seems like you don’t have an ent.xml with the entitlements needed for your binary.
Do you have any?

Maybe you can try with a simple one:
jtool —ent /jb/bin/ls > ent.xml

This will give you a platform entitlement you can start to try with.
acura
 
Posts: 20
Joined: Thu Feb 15, 2018 9:16 pm

Re: jtool help

Postby breakmyapple » Mon Feb 19, 2018 1:56 pm

acura wrote:Seems like you don’t have an ent.xml with the entitlements needed for your binary.
Do you have any?

Maybe you can try with a simple one:
jtool —ent /jb/bin/ls > ent.xml

This will give you a platform entitlement you can start to try with.


Thanks for the help
I ran the command to create the xml it would seem there’s one now.
Because when I sign the app it returns ent.xml is empty file ?

update:
ive got it going now I was typing the ent.xml in the wrong place.
I was typing: JDEBUG=1 ARCH=arm64 jtool --sign --inplace --ent /var/mobile/Applications/Kodi.app/Kodi ent.xml
that was returning the xml was empty.
i changed it to: JDEBUG=1 ARCH=64 jtool --sign --inplace --ent ent.xml /var/mobile/Applications/Kodi.app/Kodi
then it returned that it was signing but the app is still not signed ?

update 2:
i think it might be signed now i checked with --sig and it returned this :
Code: Select all
Blob at offset: 93144320 (728080 bytes) is an embedded signature
Code Directory (728013 bytes)
      Version:     20001
      Flags:       none
      CodeLimit:   0x58d4500
      Identifier:  /var/mobile/Applications/Kodi.app/Kodi (0x58)
      CDHash:        e153261ebf31e14616f9fac3a9f4560a978883b73dd33ca7cc9d4b1a7cff92c5 (computed)
      # of Hashes: 22741 code + 5 special
      Hashes @301 size: 32 Type: SHA-256
 Empty requirement set (12 bytes)
Entitlements (8 bytes) :
--

Im assuming that means its signed but i dont understand why the app wont open ?
breakmyapple
 
Posts: 6
Joined: Sun Feb 18, 2018 3:35 pm

Re: jtool help

Postby acura » Mon Feb 19, 2018 3:51 pm

Where have you found Kodi.app?
acura
 
Posts: 20
Joined: Thu Feb 15, 2018 9:16 pm

Re: jtool help

Postby breakmyapple » Mon Feb 19, 2018 5:26 pm

acura wrote:Where have you found Kodi.app?

i built it with xcode and unzipped the .ipa to get to the .app
breakmyapple
 
Posts: 6
Joined: Sun Feb 18, 2018 3:35 pm

Re: jtool help

Postby acura » Tue Feb 20, 2018 12:49 pm

breakmyapple wrote:
acura wrote:Where have you found Kodi.app?

i built it with xcode and unzipped the .ipa to get to the .app

So I guess this is of interest for you?
viewtopic.php?f=12&t=19331
viewtopic.php?f=12&t=17404
acura
 
Posts: 20
Joined: Thu Feb 15, 2018 9:16 pm

Re: jtool help

Postby breakmyapple » Tue Feb 20, 2018 9:03 pm

I’m on 10.2.2 and have app sync
My understanding of it was that I could sign the app jtool
I know I can make a cert with Xcode and sign with iresign
but wanted to learn how to use this tool
Thanks anyway
breakmyapple
 
Posts: 6
Joined: Sun Feb 18, 2018 3:35 pm

Next

Return to Tools

Who is online

Users browsing this forum: Google [Bot] and 5 guests