← Home

Documentation

Installing MapleSign

MapleSign itself must be sideloaded before you can sign other apps. Download the latest MapleSign.ipa from GitHub Releases and install with any tool you already use (AltStore, Sideloadly, etc.).

After first launch, grant Local Network permission when iOS asks — the install server needs it for Semi Local mode.

Apple Developer certificate

You need a paid Apple Developer account and a distribution certificate tied to a provisioning profile for the apps you want to sign.

  1. On a Mac, open Keychain Access and export your distribution certificate as a .p12 file. Set an export password — MapleSign will ask for it on import.
  2. From the Apple Developer portal, download the .mobileprovision that matches the certificate and app bundle IDs you plan to sign.
  3. In MapleSign → Settings → Certificate, import both files. MapleSign stores the password on-device and runs an OCSP revocation check.

If signing fails with a password error, re-import the .p12 and confirm the export password. After v1.0.3, credentials are kept in both Keychain and local storage for compatibility.

Signing an IPA

  1. Add an IPA via the Files picker, a direct URL, or the App Library.
  2. Open the app entry and configure options if needed (bundle ID, display name, dylibs).
  3. Tap Sign. Progress is shown inline; errors surface from the zsign handler.
  4. Signed IPAs appear in the Library tab, ready to install.

Installing a signed app

Default server mode is Semi Local (Settings → Server). When you tap Install:

  1. MapleSign starts its HTTPS server and generates an install manifest.
  2. iOS opens the install prompt via itms-services.
  3. Keep MapleSign in the foreground on the same Wi‑Fi network until the install completes.

If an app stays on “Ready”, ensure SSL certificates downloaded on launch (requires network once) and try again on a stable LAN. v1.0.4 adds a fallback install path after a short delay.

App Library

The App Library tab accepts AltStore-style source URLs (source.json). Add a repo URL, browse available apps, and download IPAs directly into MapleSign for signing.

Server modes

  • Semi Local — device serves the IPA; recommended default.
  • Fully Local — offline-oriented serving when configured.
  • External — pair with an external installer when you use that workflow.

For hosting a public install endpoint (e.g. on maplesign.net), see website/api/README.md in the repository for a Cloudflare Worker plist proxy pattern.

Troubleshooting

  • Sign fails immediately — certificate password empty or wrong; re-import .p12.
  • Install stuck on Ready — check Local Network access, same Wi‑Fi, Semi Local enabled; update to v1.0.4+.
  • Revoked certificate — MapleSign warns via OCSP; create a new cert in the developer portal.
  • Dutch UI on English device — fixed in v1.0.4 via forced English locale; reinstall if you are on an older build.

Report bugs on GitHub Issues with iOS version, MapleSign version, and steps to reproduce.