Difference between revisions of "Ldid"

From iPhone Development Wiki
Jump to: navigation, search
(adding package name)
(Undo revision 5787 by CKatri (talk))
(Tag: Undo)
 
(13 intermediate revisions by 5 users not shown)
Line 1: Line 1:
 
{{DISPLAYTITLE:ldid}}
 
{{DISPLAYTITLE:ldid}}
  
'''ldid''' is a tool made by saurik for modifying a binary's entitlements easily. ldid also generates SHA1 hashes for the binary signature, so the iPhone kernel executes the binary.
+
'''ldid''' is a tool made by saurik for modifying a binary's entitlements easily. ldid also generates SHA1 and SHA256 hashes for the binary signature, so the iPhone kernel executes the binary. The package name in Cydia is "Link Identity Editor".
  
<code>ldid -e</code> dumps the binary's entitlements.
+
== Usage ==
  
<code>ldid -Sent.xml</code> sets the binary's entitlements.
+
<code>ldid -e <binary></code> dumps the binary's entitlements.  
  
The package name in Cydia is "Link Identity Editor", hosted by the Cydia/Telesphoreo repository.
+
<code>ldid -Sent.xml <binary></code> sets the binary's entitlements, where <code>ent.xml</code> is the path to an entitlements file.
  
== Links ==
+
<code>ldid -S <binary></code> pseudo-signs a binary with no entitlements.
  
* [http://www.saurik.com/id/8 Bypassing iPhone Code Signatures] - saurik's original article that explains ldid
+
For example, if you wanted to add the entitlements in a file on your desktop named <code>Entitlements.xml</code> to <code>debugserver</code> in your current directory, you would run:
* Source: [http://gitweb.saurik.com/ldid.git http://gitweb.saurik.com/ldid.git]
+
 
 +
<code>ldid -S/Users/you/Desktop/Entitlements.xml ./debugserver</code>
 +
 
 +
=== Man page ===
 +
 
 +
<pre>
 +
LDID(1) FreeBSD General Commands Manual       LDID(1)
 +
 
 +
NAME
 +
    ldid – Link Identity Editor
 +
 
 +
SYNOPSIS
 +
    ldid [-aDdehMPqu] [-Acputype:subtype]
 +
  [-C[adhoc | enforcement | expires |
 +
  hard | host | kill | library-validation | restrict | runtime]]
 +
  [-Kkey.p12] [-r | -Sfile | -s] [-Ttimestamp] file ...
 +
 
 +
DESCRIPTION
 +
    ldid adds SHA1 and SHA256 hashes to a Mach-O file so that they can be run
 +
    on a system that has validation but not signature verification.
 +
 
 +
    -a      Print the CPU types and subtypes in hexadecimal.
 +
 
 +
    -Acputype:subtype
 +
      When used with -a, -D, -e, -h, -q, or -u, only act on the slice
 +
      specified by cputype and subtype.  cputype and subtype should
 +
      both be integers.
 +
 
 +
    -C[adhoc | enforcement | expires | hard | host | kill |
 +
      library-validation | restrict | runtime]
 +
      Specify the option flags to embed in the code signature. See
 +
      codesign(1) for details about these options.
 +
 
 +
    -D      Reset the cryptid.
 +
 
 +
    -d      Print the cryptid in the binaries if it exists.  For
 +
      compatibility reasons it also acts as -h, but this will be
 +
      removed in the future.
 +
 
 +
    -e      Print the entitlements in each slice, or the slice specified by
 +
      -A, to stdout.
 +
 
 +
    -h      Print information about the signature, such as hash types,
 +
      flags, CDHash, and CodeDirectory version to stdout.
 +
 
 +
    -Kkey.p12
 +
      Sign using the identity in key.p12.  This will give the binary a
 +
      valid signature so that it can be run on a system with signature
 +
      validation.  key.p12 must not have a password.
 +
 
 +
    -M      When used with -S, merge the new and existing entitlements
 +
      instead of replacing the existing entitlements, this is useful
 +
      for adding a few specific entitlements to a handful of binaries.
 +
 
 +
    -P      Mark the Mach-O as a platform binary.
 +
 
 +
    -Qfile  Embed the requirements found in file.
 +
 
 +
    -q      Print embedded requirements of the binaries.
 +
 
 +
    -r      Remove the signature from the Mach-O.
 +
 
 +
    -S[file]
 +
      Pseudo sign the Mach-O binaries. If file is specified then the
 +
      entitlements found in file will be embedded in the Mach-O.
 +
 
 +
    -s      Resign the Mach-O binaries while keeping the existing
 +
      entitlements.
 +
 
 +
    -Ttimestamp
 +
      When signing a dylib, set the timestamp to timestamp.  timestamp
 +
      should be an UNIX timestamp in seconds, if timestamp is a single
 +
      dash (‘-’), the timestamp will be set to a hash of the Mach-O
 +
      header.
 +
 
 +
    -u      If the binary was linked against UIKit, then print the UIKit
 +
      version that the Mach-O binaries was linked against.
 +
 
 +
EXAMPLES
 +
    The command:
 +
 
 +
  ldid -S file
 +
 
 +
    will fakesign file with no entitlements.
 +
 
 +
    The command:
 +
 
 +
  ldid -Cadhoc -K/path/to/key.p12 -Sent.xml file
 +
 
 +
    will sign file using the key in /path/to/key.p12 with the entitlements
 +
    found in ent.xml, and mark it as an adhoc signature.
 +
 
 +
    The command:
 +
 
 +
  ldid -Sent.xml -M file
 +
 
 +
    will add the entitlements in ent.xml to the entitlements already in file.
 +
 
 +
    The command:
 +
 
 +
  ldid -e file > ent.xml
 +
 
 +
    will save the entitlements found in each slice of file to ent.xml.
 +
 
 +
SEE ALSO
 +
    codesign(1)
 +
 
 +
HISTORY
 +
    The ldid utility was written by Jay "Saurik" Freeman.  iPhoneOS 1.2.0 and
 +
    2.0 support was added on April 6, 2008.  -S was added on June 13, 2008.
 +
    SHA256 support was added on August 25, 2016, fixing iOS 11 support.  iOS
 +
    14 support was added on July 31, 2020 by Kabir Oberai.  iOS 15 support
 +
    was added on June 11, 2021.
 +
 
 +
iPhoneDevWiki October 8, 2021 iPhoneDevWiki
 +
</pre>
 +
 
 +
== Installation ==
 +
 
 +
Via Brew or Fink, or from source:
 +
 
 +
<pre>git clone https://github.com/sbingner/ldid
 +
cd ldid
 +
git submodule update --init
 +
./make.sh
 +
cp -f ./ldid $THEOS/bin/ldid</pre>
 +
 
 +
=== Mirrors ===
 +
 
 +
* https://ac3xx.com/ldid
 +
* https://joedj.net/ldid
 +
* https://jontelang.com/guide/chapter2/ldid.html
 +
 
 +
== External links ==
 +
 
 +
* [[Code Signing]] - community maintained version of saurik's original article on ldid
 +
* Source: http://gitweb.saurik.com/ldid.git (git://git.saurik.com/ldid.git)

Latest revision as of 04:53, 23 March 2022


ldid is a tool made by saurik for modifying a binary's entitlements easily. ldid also generates SHA1 and SHA256 hashes for the binary signature, so the iPhone kernel executes the binary. The package name in Cydia is "Link Identity Editor".

Usage

ldid -e <binary> dumps the binary's entitlements.

ldid -Sent.xml <binary> sets the binary's entitlements, where ent.xml is the path to an entitlements file.

ldid -S <binary> pseudo-signs a binary with no entitlements.

For example, if you wanted to add the entitlements in a file on your desktop named Entitlements.xml to debugserver in your current directory, you would run:

ldid -S/Users/you/Desktop/Entitlements.xml ./debugserver

Man page

LDID(1) 		FreeBSD General Commands Manual 	       LDID(1)

NAME
     ldid – Link Identity Editor

SYNOPSIS
     ldid [-aDdehMPqu] [-Acputype:subtype]
	  [-C[adhoc | enforcement | expires |
	  hard | host | kill | library-validation | restrict | runtime]]
	  [-Kkey.p12] [-r | -Sfile | -s] [-Ttimestamp] file ...

DESCRIPTION
     ldid adds SHA1 and SHA256 hashes to a Mach-O file so that they can be run
     on a system that has validation but not signature verification.

     -a       Print the CPU types and subtypes in hexadecimal.

     -Acputype:subtype
	      When used with -a, -D, -e, -h, -q, or -u, only act on the slice
	      specified by cputype and subtype.  cputype and subtype should
	      both be integers.

     -C[adhoc | enforcement | expires | hard | host | kill |
	      library-validation | restrict | runtime]
	      Specify the option flags to embed in the code signature.	See
	      codesign(1) for details about these options.

     -D       Reset the cryptid.

     -d       Print the cryptid in the binaries if it exists.  For
	      compatibility reasons it also acts as -h, but this will be
	      removed in the future.

     -e       Print the entitlements in each slice, or the slice specified by
	      -A, to stdout.

     -h       Print information about the signature, such as hash types,
	      flags, CDHash, and CodeDirectory version to stdout.

     -Kkey.p12
	      Sign using the identity in key.p12.  This will give the binary a
	      valid signature so that it can be run on a system with signature
	      validation.  key.p12 must not have a password.

     -M       When used with -S, merge the new and existing entitlements
	      instead of replacing the existing entitlements, this is useful
	      for adding a few specific entitlements to a handful of binaries.

     -P       Mark the Mach-O as a platform binary.

     -Qfile   Embed the requirements found in file.

     -q       Print embedded requirements of the binaries.

     -r       Remove the signature from the Mach-O.

     -S[file]
	      Pseudo sign the Mach-O binaries.	If file is specified then the
	      entitlements found in file will be embedded in the Mach-O.

     -s       Resign the Mach-O binaries while keeping the existing
	      entitlements.

     -Ttimestamp
	      When signing a dylib, set the timestamp to timestamp.  timestamp
	      should be an UNIX timestamp in seconds, if timestamp is a single
	      dash (‘-’), the timestamp will be set to a hash of the Mach-O
	      header.

     -u       If the binary was linked against UIKit, then print the UIKit
	      version that the Mach-O binaries was linked against.

EXAMPLES
     The command:

	   ldid -S file

     will fakesign file with no entitlements.

     The command:

	   ldid -Cadhoc -K/path/to/key.p12 -Sent.xml file

     will sign file using the key in /path/to/key.p12 with the entitlements
     found in ent.xml, and mark it as an adhoc signature.

     The command:

	   ldid -Sent.xml -M file

     will add the entitlements in ent.xml to the entitlements already in file.

     The command:

	   ldid -e file > ent.xml

     will save the entitlements found in each slice of file to ent.xml.

SEE ALSO
     codesign(1)

HISTORY
     The ldid utility was written by Jay "Saurik" Freeman.  iPhoneOS 1.2.0 and
     2.0 support was added on April 6, 2008.  -S was added on June 13, 2008.
     SHA256 support was added on August 25, 2016, fixing iOS 11 support.  iOS
     14 support was added on July 31, 2020 by Kabir Oberai.  iOS 15 support
     was added on June 11, 2021.

iPhoneDevWiki			October 8, 2021 		 iPhoneDevWiki

Installation

Via Brew or Fink, or from source:

git clone https://github.com/sbingner/ldid
cd ldid
git submodule update --init
./make.sh
cp -f ./ldid $THEOS/bin/ldid

Mirrors

External links