mobileconfig

mobileconfig

Create and sign iOS mobileconfig configuration files.

Currently the module is able to auto configure and sign the following configuration payloads:

• com.apple.mail.managed eg. e-mail accounts (IMAP only at this point)

Paylod signing is handled by jsrsasign which is a JavaScript only crypto library. This means that you can generate your mobileconfig files even in Windows.

Usage

Require the module

var mobileconfig = require('mobileconfig');

Generate and sign Email configuration

Generate and sign Email account configuration with

mobileconfig.getSignedEmailConfig(options, callback)

Where

• options is the options object for the account data with following properties
  • emailAddress is the address to be configured
  • organization is an optional name of the signing organization
  • identifier is a reverse-DNS style identifier (eg. com.example.myprofile) for the profile
  • displayName is an optional name for the profile
  • displayDescription is a optional description for the profile
  • accountName is an optional name for the email account
  • accountName is an optional description for the email account
  • imap is the incoming IMAP configuration data with the following properties
    • hostname is the hostname of the server
    • port is an optional port number for the server (standard port is used if not set)
    • secure is a boolean that indicates if the server should use TLS/SSL (true) or not (false) when connecting (does not affect STARTTLS usage)
    • username is the username of the email account
    • password is the password for the account
  • smtp is the outgoing SMTP configuration data
    • hostname is the hostname of the server
    • port is an optional port number for the server (standard port is used if not set)
    • secure is a boolean that indicates if the server should use TLS/SSL (true) or not (false) when connecting (does not affect STARTTLS usage)
    • username is the username of the email account. If missing then no authentication is used for SMTP
    • password is the password for the account. If missing then IMAP password is used for SMTP as well
  • keys includes the key and the certificate for signing the configuration file. See signing configuration for details of this object
• callback (err, data) is the callback function to run once the configuration is generated. err is an Error object that is returned if an error occurs. data is the signed DER file as Buffer object, store it as name.mobileconfig to use

Signing configuration

Signing configuration object defines the signing process and includes the following properties

• key is the private key in PEM format
• cert is the certificate in PEM format to use
• ca is an array of certificate authority certs in PEM format
• hashAlg defines the hash algorithm
  • "sha256" (default)
  • "sha512"
  • "sha384"
  • "sha224"
  • "sha1"
  • "md5"
  • "ripemd160"
• sigAlg defines the signature algorithm
  • "SHA256withRSA" (default)
  • "SHA512withRSA"
  • "SHA384withRSA"
  • "SHA224withRSA"
  • "SHA1withRSA"
  • "MD5withRSA"
  • "RIPEMD160withRSA"
  • "SHA256withECDSA"
  • "SHA512withECDSA"
  • "SHA384withECDSA"
  • "SHA224withECDSA"
  • "SHA1withECDSA"
  • "SHA256withSA"
  • "SHA512withSA"
  • "SHA384withSA"
  • "SHA224withSA"
  • "SHA1withDSA"

NB You can use the same key and cert that you use for your HTTPS server. If the certificate is valid, then the profile is displayed as "Verified" in a green font, otherwise it is displayed as "Unverified"/"Not Verified" in a red font.

Example

var mobileconfig = require('mobileconfig');
var options = {
    emailAddress: '[e-mail]',
    identifier: 'com.my.company',
    imap: {
        hostname: 'imap.gmail.com',
        secure: true,
        username: '[e-mail]',
        password: 'mypass'
    },
    smtp: {
        hostname: 'smtp.gmail.com',
        port: 587,
        secure: false,
        username: '[e-mail]',
        password: false // use the same password as for IMAP
    },
    keys: {
        key: '-----BEGIN PRIVATE KEY-----...',
        cert: '-----BEGIN CERTIFICATE-----...'
    }
};
mobileconfig.getSignedEmailConfig(options, function(err, data){
    console.log(err || data);
});

Profile settings generated by this example used in iOS

Profile settings generated by this example used in OSX

See full featured example here

License

MIT