codesign -d --entitlements :- /path/to/appproxy
Warning: Specifying ':' in the path is deprecated and will not work in a future release
``<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "https://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0">
<dict>
<key>com.apple.application-identifier</key>
<string>{TEAMID}.com.xxx.AppProxy</string>
<key>com.apple.developer.networking.networkextension</key>
<array><string>app-proxy-provider-systemextension</string></array>
<key>com.apple.developer.team-identifier</key><string>{TEAMID}</string>
<key>com.apple.security.app-sandbox</key><true/>
<key>com.apple.security.application-groups</key>
<array>
<string>{TEAMID}.group.com.xxx</string>
</array>
<key>com.apple.security.network.client</key><true/>
<key>com.apple.security.network.server</key><true/>
</dict></plist>``
security cms -D -i /path/to/profile
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>AppIDName</key>
<string>xxx AppProxy</string>
<key>ApplicationIdentifierPrefix</key>
<array>
<string>{TEAMID}</string>
</array>
<key>CreationDate</key>
<date>2023-08-02T01:55:16Z</date>
<key>Platform</key>
<array>
<string>OSX</string>
</array>
<key>IsXcodeManaged</key>
<false/>
<key>DeveloperCertificates</key>
<array>
<data>xxx</data>
</array>
<key>DER-Encoded-Profile</key>
<data>xxx</data>
<key>PPQCheck</key>
<false/>
<key>Entitlements</key>
<dict>
<key>com.apple.developer.system-extension.install</key>
<true/>
<key>com.apple.developer.networking.networkextension</key>
<array>
<string>packet-tunnel-provider-systemextension</string>
<string>app-proxy-provider-systemextension</string>
<string>content-filter-provider-systemextension</string>
<string>dns-proxy-systemextension</string>
<string>dns-settings</string>
<string>relay</string>
</array>
<key>com.apple.developer.networking.vpn.api</key>
<array>
<string>allow-vpn</string>
</array>
<key>com.apple.application-identifier</key>
<string>{TEAMID}com.xxx.AppProxy</string>
<key>keychain-access-groups</key>
<array>
<string>{TEAMID}.*</string>
</array>
<key>com.apple.developer.team-identifier</key>
<string>{TEAMID}</string>
</dict>
<key>ExpirationDate</key>
<date>2041-07-28T01:55:16Z</date>
<key>Name</key>
<string>xxx DeveloperID AppProxy</string>
<key>ProvisionsAllDevices</key>
<true/>
<key>TeamIdentifier</key>
<array>
<string>{TEAMID}</string>
</array>
<key>TeamName</key>
<string>xxx</string>
<key>TimeToLive</key>
<integer>6570</integer>
<key>UUID</key>
<string>xxxx</string>
<key>Version</key>
<integer>1</integer>
</dict>
</plist>
