KSign
What is Anti-Revoke DNS?
Anti-Revoke DNS is a configuration profile that prevents revocation of certificates used by sideloaded or enterprise-signed apps.
It works by blocking or redirecting your device’s requests to Apple's OCSP revocation servers (mainly ocsp.apple.com). This stops the revocation check from completing.
- Greatly extends the lifetime of sideloaded apps
- Compatible with most signing services
- Reduces need to re-sign or reinstall apps frequently
- One-time setup — works across Wi-Fi networks
- Download and install the DNS profile below
- Go to Settings → Profile Downloaded → Install
- Enter your passcode if prompted
- Go to Settings → General → VPN & Device Management and ensure the profile is enabled/trusted
- For Wi-Fi: Go to Settings → Wi-Fi → tap (i) next to your network → Configure DNS → Manual — verify your custom DNS servers are listed and active
- Restart apps or toggle Airplane Mode briefly if needed.
File: anti-revoke-dns.mobileconfig (~4-8 KB)
Compatible with iOS 14 and later
• This method only blocks certificate revocation checks.
• Effectiveness may vary over time as Apple updates iOS.
• For best results, avoid unnecessary full device restarts.
Download All Certificates
Get all Certs in One ZIP file
📝 How to Extract
- Tap the Download button above to get the ZIP file.
- Save the file, then move it to "On My iPhone" inside the Files app.
- Locate the ZIP file in "On My iPhone".
- Tap once on the ZIP file to automatically extract the certificates.
LATEST KSign iOS 26 Install IPA with New DNS and Certificate (No PC)
Complete guide to installing KSign on iOS 26, setting up Anti-Revoke DNS, and signing IPAs without a computer.
Getting Started with KSign
Complete guide to installing KSign, trusting the enterprise certificate, and navigating the main interface.
How to Use Anti-Revoke DNS
Learn how to block OCSP checks to prevent your apps from crashing or getting revoked by Apple.
Importing Custom Certificates (P12)
Step-by-step tutorial on importing your own .p12 and .mobileprovision files for signing apps.