Fix #76 - Verify identity of mobileprovisioning if both provided

nowsecure · Nov 23, 2018 · 99c920a · 99c920a
1 parent 34f3a43
commit 99c920a
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/index.js b/index.js
@@ -22,7 +22,11 @@ module.exports = class Applesign {
         throw new Error('Version passed to -O must be numeric');
       }
     }
-    if (opt.mobileprovision && !opt.identity) {
+    if (opt.mobileprovision && opt.identity) {
+      if (idprov(opt.mobileprovision) !== opt.identity) {
+        throw new Error('MobileProvisioningVersion doesn\'t match the given identity');
+      }
+    } else if (opt.mobileprovision && !opt.identity) {
       opt.identity = idprov(opt.mobileprovision);
     }
     return {