problem after resigned the ipa with keychain-access-group entitlement

[ansonlo]

I have a ipa which got the feature of keychain-access-group to access the specified certificate. My ipa embeded the expired dirtibution cert and provioning profile, so that i have to use iResign to resign the ipa with a new ditributions, but when i install this new ipa , it can startup, but it can't read the the specified certificate from the keychain-access-group , I'm so comfused it. If you know what anything wrong with it.

[guangmingwan]

my fork has resove this

[guangmingwan]

you need do

1. /usr/libexec/PlistBuddy -x -c 'Print :Entitlements' /dev/stdin <<< security cms -D -i '/path/to/your.mobileprovision' > /entitlements.plist
2. fill the plist path to iresign , where is "/path/to/entitlements.plist" my fork has resolve this https://github.com/guangmingwan/iReSignShell