CODEWITHSUNDEEP
iosprovisioning-profileipain-house-distributionenterprise-distribution
San9211
San9211

Reputation: 191

Is it safe to share iOS distribution certificate with third party developer?

We have an enterprise developer account and for an app we are working with an external developer.

External developer needs to be able to build ipa files for us.

From a security point of view, is it safe/recommended for us to share the distribution certificate (and the private key) and a provisioning profile so they can build ipa files?

If we share distribution certificate (and the private key) will there be any problem ?

Upvotes: 3

Views: 4114

Answers (1)

barryjones
barryjones

Reputation: 2309

You should not be sharing your private key. This is not safe. Please read through this article. https://developer.apple.com/library/ios/documentation/IDEs/Conceptual/AppDistributionGuide/MaintainingCertificates/MaintainingCertificates.html

It clearly states "Worse, if someone else has your private key, that person may be able to impersonate you. In the wrong hands, someone might attempt to distribute an app that contains malicious code. Not only could that cause the app to be rejected, it could also mean your developer credentials could be revoked by Apple. Private keys are stored only in the keychain and can’t be retrieved if lost."

Upvotes: 5

Related Questions