Cook 👨🏻🍳
Cook is a macOS command line tool wrapped around Riley Testut's AltSign to automate common iOS development tasks, such as managing iOS certificates, app identifiers, devices, provisioning profiles and resigning .ipa
files. It works with free Apple IDs (not enrolled in the developer program).
Usage
./cook [AUTHENTICATION] [RECIPE] [RECIPE_ARGUMENTS]
Generic arguments
-h, --help
prints usage information
-v, --verbose
enables verbose mode
-j, --json
use json output (all --output-* args are ignored in this mode)
Authentication
To authenticate you can pass the following arguments to any recipe:
--appleId
(your Apple ID's email) and --password
(Apple ID's Password).
If you prefer, you can set these environment variables instead: COOK_APPLEID_EMAIL
and COOK_APPLEID_PASSWORD
.
NOTE: Your Apple ID is never sent to anyone but Apple. Feel free to create a new Apple ID account to test it.
Recipes
-
create_certificate
Create certificate (.pem
or.p12
) with arguments:--machine-name Optional machine name (defaults to 'cook') --input-csr Optional path to an existing CSR file --output-pem Path/Directory where to save output PEM file --output-p12 Path/Directory where to save output p12 file --p12-password Optional P12 password, defaults to blank -f Force certificate revocation if needed
-
register_app
Register a new app with arguments:--app-name App name to register --app-bundle-id Bundle identifier to register -f Force removal of previous app if needed
-
register_device
Register device with arguments:--name Device name (use quotes if it contains spaces) --udid Device udid
-
update_profile
Update & download provisioning profile with arguments:--bundle-id Bundle identifier of the app --output-profile Path/Directory where to save updated profile -f Force remove app ID and then readd it
-
download_profiles
Download provisioning profiles with arguments:--bundle-id Optional, to specify an app's identifier (defaults to all apps) --output-folder Directory where to save the profiles
-
resign
Resign ipa file with arguments:--ipa Path to .ipa file to resign --output-ipa Optional path to resigned ipa (if not specified, original is overwritten) --p12 Optional path to P12 certificate to use for resigning --p12-password Optional P12 password --machine-name Optional machine name to use when adding certificate (defaults to 'cook', ignored if --p12 is specified) -f Revoke certificate (if --p12 is not specified) if needed, register app id if needed
JSON Mode
In JSON mode (-j, --json
flag), command output is formatted as JSON.
See possible JSON responses
'success': '0' or '1'
'error': Error description (if success is 0)
- create_certificate recipe
'pem_cert': Plain text PEM cert
'base64_p12_cert': Base 64 encoded P12 cert
'p12_password': Plain text P12 password
- update_profile recipe
'base_64_profile': Base 64 encoded mobileprovision
- download_profiles recipe
'profiles_count': Number of profiles downloaded
'base64_profile_i': i-th base 64 encoded mobileprovision (0<i<=profiles_count)
Sample usage
Here are some real world examples on how to use cook (authentication part is omitted):
See examples
-
Export
.pem
certificate generated using an existing.csr
file:./cook create_certificate --input-csr ~/desktop/req.csr --output-pem ~/desktop/cert.pem
-
Export
.p12
certificate with password123
:./cook create_certificate --output-p12 ~/desktop/cert.p12 -—p12-password "123"
-
Register app named
My Fancy App
with bundle identifiermy.fancy.app
:./cook register_app --app-name "My Fancy App" --app-bundle-id my.fancy.app
-
Register a device named
My iPhone 11 Pro
with udidDEVICE_UDID
:./cook register_device --name "My iPhone 11 Pro" --udid "DEVICE_UDID"
-
Update and export a provisioning profile for app with bundle identifier
my.fancy.app
:./cook update_profile --bundle-id my.fancy.app --output-profile ~/desktop/profile.mobileprovision
-
Download all existing provisioning profiles:
./cook download_profiles --output-folder ~/desktop/profiles/
-
Resign
.ipa
file using a local p12 certificate (obtained withcreate_certificate
recipe):./cook resign --ipa ./app.ipa --p12 ./cert.p12 --p12-password "123"
-
Resign
.ipa
file using a new certificate (-f
revokes current one if necessary)./cook resign --ipa ./app.ipa --output-ipa ./app_signed.ipa -f
Installation
Download latest cook.zip
release from the releases page to your downloads folder and unzip it.
If you haven't already, you should install and enable the Mail.app
plugin called CookMailPlugin
(this is needed to fetch the correct headers to communicate with Apple's servers).
See steps to install CookMailPlugin (only once):
Run the following commands:
$ cd ~/downloads/cook/
$ [sudo] mkdir -p /Library/Mail/Bundles
$ [sudo] cp -r CookMailPlugin.mailbundle /Library/Mail/Bundles
$ [sudo] defaults write "/Library/Preferences/com.apple.mail" EnableBundles 1
Then enable the plugin:
- Open
Mail.app
and from the Menu bar go toMail
->Preferences
- Click on
Manage Plug-ins...
- Enable
CookMailPlugin.mailbundle
- Click
Apply and Restart Mail
- Done!
![mail plugin Cook mail plugin](https://user-images.githubusercontent.com/11541888/71265083-c8fd9900-2345-11ea-9ac9-73031d9faf0e.png)
Once the plugin is installed and enabled, you can simply use cook from the command line:
$ cd ~/downloads/cook/
$ ./cook -h
NOTE: AltSign.framework
should always be in the same folder as cook
binary.
Build manually
Run the following commands:
$ cd ~/desktop
$ git clone https://github.com/n3d1117/cook.git --recurse-submodules
$ cd cook/
$ open cook.xcodeproj
Credits
- Riley Testut's AltSign framework (part of AltStore)
- Riley Testut's
AltPlugin.mailbundle
(part of AltServer) - Kabir Oberai for the authentication code in AltSign
- appdb for the idea!
License
Licensed under GNU General Public License v3.0. See LICENSE file for further information.