IOS 12 support please

[SergeKZ]

please add support ios 12

[Tatsh]

What doesn't work on iOS 12?

I do not have a device here to test with. I don't suspect there are any issues building this project for iOS 12.

Also, we cannot do anything if the jailbreak you are using has invalid kernel patches for this purpose.

[talfstad]

in 12.1.1 here's my error:

This causes an immediate exit with a stdout message Killed: 9

[Tatsh]

That is a strange error as I do not see why a jailbroken iOS would ever care about code signing. Jailbreaks are supposed to patch AMFI. Maybe you have to inject Clutch into the cache?

CT policy refers to certificate transparency policy.

[JoniVR]

@Tatsh
This worked for me.

easy copy pasta:

# safe place to work in
cd /private/var/mobile/Documents

# Get the ent from bash and save it
ldid -e `which bash` > ent.xml

# sign Clutch with the ent. "-Sent.xml" is the correct usage
ldid -Sent.xml `which Clutch`

# inject into trust cache
inject `which Clutch`

[Tatsh]

What is the output of

ldid -e `which bash`

?

[JoniVR]

<?xml version="1.0" encoding="UTF-8"?>             
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> 
<plist version="1.0">                              
<dict>                                             
        <key>platform-application</key>            
        <true/>                                    
        <key>com.apple.private.skip-library-validation</key>                                           
        <true/>                                    
        <key>com.apple.private.security.no-container</key>                                             
        <true/>                                    
</dict>                                            
</plist>

[Tatsh]

Maybe we can sign with those during the build process on macOS but I am not sure. Usually if you sign with com.apple.private. stuff on macOS the binary is never allowed to run because only Apple can sign with those entitlements, but since you have to run inject it probably works around that.

[JoniVR]

Could give it a shot yes, either that or add the steps on how to do it manually on device to the documentation perhaps?

[insomnia417]

ios12.1.1b3 can't work too.

[GL8666]

@Tatsh
This worked for me.

easy copy pasta:

# safe place to work in
cd /private/var/mobile/Documents

# Get the ent from bash and save it
ldid -e `which bash` > ent.xml

# sign Clutch with the ent. "-Sent.xml" is the correct usage
ldid -Sent.xml `which Clutch`

# inject into trust cache
inject `which Clutch`

It's work for me too

[Tatsh]

The changes are in. If this is good @SergeKZ , please close the bug (or I will close it after a time).