iOS Certificate & IPA Signer

Generate a CSR

Creates an RSA-2048 key pair locally and a Certificate Signing Request to upload to the Apple Developer portal.

Email address Common name Country code

Download the .certSigningRequest and private.key.
developer.apple.com → Certificates, IDs & Profiles → Certificates → + → Apple Development / Distribution.
Upload the CSR, then download the issued .cer.

Convert .cer → .p12

Bundles Apple's certificate with your private key into a PKCS#12 file for signing.

Certificate from Apple (.cer) Private key (optional — auto-used if generated above in this tab) Password for the .p12

Sign an IPA

Provide your .p12, a matching .mobileprovision and the app.

IPA file

Certificate (.p12)

Profile (.mobileprovision)

.p12 password

New bundle ID (optional)

A real Mach-O code signature needs the native signer. Drop a zsign.wasm + vendor/zsign.js build into the project and this page switches from prep mode (profile embed, entitlement extraction, stale-signature strip, repack) to full signing automatically. See README.md.

OTA install manifest

iOS installs apps over the air from an itms-services:// link pointing at a manifest.plist. Both URLs must be HTTPS.

HTTPS URL of the signed .ipa HTTPS URL where manifest.plist will live

Bundle identifier

Version

Title

Icon URL (optional, 57×57 png)