Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New ipsw verify command? #482

Open
2 tasks done
justtryingthingsout opened this issue Jun 2, 2024 · 1 comment
Open
2 tasks done

New ipsw verify command? #482

justtryingthingsout opened this issue Jun 2, 2024 · 1 comment
Assignees
Labels
enhancement New feature or request triage

Comments

@justtryingthingsout
Copy link

Is your feature request related to a problem? Please describe.

There is currently no way that I know of that allows for the verification of the disks inside of a IPSW using the root hashes, mtrees, and integrity catalogs, apart from a verification by a tool such as img4tool, which might be something worth implementing

Describe the solution you'd like

A ipsw verify command that allows for the verification of the dmgs inside of the ipsws, using the mtree, root hash, and integrity catalogs, as is done by Apple themselves. Could also include other ways of verification, such as the one implemented in img4tool.

Describe alternatives you've considered

Having no command for this, which is fine as well, as this might be a gimmick if img4tool suffices.

Search

  • I did search for other open and closed issues before opening this

Code of Conduct

  • I agree to follow this project's Code of Conduct

Additional context

No response

@blacktop
Copy link
Owner

blacktop commented Jun 2, 2024

I have also been thinking about verification cmds

Add calculated as well as reported hashes in the code signature for MachOs and the DSC (only w/ a flag or -V as it'll be SLOW for DSC etc)

Add a ipsw macho sign --verify cmd OR a ipsw verify macho subcmd if it makes more sense to have a verify category w/ subcmds

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request triage
Projects
None yet
Development

No branches or pull requests

2 participants