This bundle is invalid - Your archive contains paths that are not allowed: ( "entitlements.plist" ) about iresign

[blueishsilverbullet]

It is an intermittent bug in iResign which causes it to include entitlments.plist in application bundle. It is not even plist file but a dump of entitlements keys/values.

Here is a workaround, which SHOULD work:

1. Extract the ipa into a directory. Assuming your app is named as MyApp.ipa
   $ mkdir extract
   $ unzip -qo MyApp.ipa -d extract
2. You will notice the entitlements.plist at root of extract directory.
   $ cd extract
   $ ls
   BCSymbolMaps Payload SwiftSupport Symbols entitlements.plist
3. Delete the entitlements.plist and repackage your ipa
   $ rm entitlements.plist
   $ zip -qry ../MyApp.Fixed.ipa

After this, try submitting the MyApp.Fixed.ipa thru Application Loader. PM me if you have any resigning issues.

[joeljeske]

I am no longer trying to use iResign, but instead found FastLane, specifically sigh resign, to be a better and more comprehensive solution.

Thanks for the help however!

[lyndsey-ferguson]

We just faced this today. We had provided the mobileprovision file to re-sign an already signed app and that caused the code to write an entitlements.plist file. What we did was to not provide a path to the mobileprovision file and that did not write the entitlements.plist file inside the bundle.

[lyndsey-ferguson]

@maciekish please look into not writing the entitlements.plist file into the re-signed zip. From what I can see in docs, the file is not to be included in the ipa.

[prijupaul]

Any updates on this issue? Facing the same issue. Thanks.

[romrell4]

I have had this issue as well. I'd love to see the solution

[guarani]

@lyndsey-ferguson are you sure it's not needed? If I leave out the path to the Provisioning Profile, I get:
ERROR ITMS-90166: "Missing Code Signing Entitlements. No entitlements found in bundle 'com.example.app' for executable 'Payload/MyApp.app/MyApp'.""

[lyndsey-ferguson]

We didn't have any problems sending it to the App store without it. Perhaps your app actually includes its own entitlements file? If so, that seems to mean that resign should point to that file.

[joeljeske]

I am also getting this issue and do not know how to resign so I can upload via Application Loader. Any ideas?