Skip to content

Conversation

@hugeBlack
Copy link

Changes

  • Add a URL Scheme so other apps (specifically LiveContainer) can get the certificate without injecting a certificate stealer
  1. The app constructs a callback url like this:
livecontainer://certificate?cert=$(BASE64_CERT)&password=$(PASSWORD)

Where $(BASE64_CERT) and $(PASSWORD) are placeholders SideStore will replace with base64 encoded certificate data and password.

Considering in most circumstances the password is actually empty for certificate stored in Keychain, only $(BASE64_CERT) is required

  1. The app URL encode the link and send it to SideStore like this:
sidestore://certificate?callback_template=livecontainer%3A%2F%2Fcertificate%3Fcert%3D%24%28BASE64_CERT%29%26password%3D%24%28PASSWORD%29
  1. SideStore parses the URL and decode the callback URL template
  2. SideStore opens a prompt asking user if the export is permitted
  3. SideStore replaces the placeholders with actual URL encoded base64 encoded certificate data and password, and open it

@github-actions
Copy link

Builds for this Pull Request are available at
SideStore-0.6.2-pr.959+4534534.ipa
SideStore-0.6.2-pr.959+4534534-dSYM
Have a nice day.

Copy link

@stossy11 stossy11 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me.

@nythepegasus nythepegasus merged commit 0e3c3dd into SideStore:develop Apr 20, 2025
1 check passed
khcrysalis added a commit to khcrysalis/Feather that referenced this pull request Jun 26, 2025
khcrysalis added a commit to khcrysalis/Feather that referenced this pull request Jun 26, 2025
WolfMan0070000 pushed a commit to WolfMan0070000/Baba_IOS_app that referenced this pull request Aug 22, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants