Block Apple's certificate verification servers to prevent your sideloaded apps from being revoked. A DNS-based solution that works directly on your device.
This profile blocks Apple's OCSP (Online Certificate Status Protocol) servers. While this prevents app revocation, it may affect other certificate-related functions on your device.
A DNS-based solution to prevent certificate revocation for sideloaded iOS apps
The profile configures your device's DNS settings to redirect Apple's certificate verification servers to localhost (127.0.0.1), effectively blocking revocation checks without affecting normal app functionality.
Follow these steps to install the DNS Revoke Blocker on your iOS device
Tap the install button below to download the DNS configuration profile to your iOS device. The profile will be saved to your device.
Go to Settings app, you should see "Profile Downloaded" notification at the top. Tap on it to begin installation.
Tap on "Profile Downloaded" and follow the prompts to install. You may need to enter your device passcode for security verification.
After installation, go to Settings > General > VPN & Device Management and enable the DNS profile you just installed.
⚠️ IMPORTANT: You MUST restart your device after installation. The DNS profile will NOT work until you restart. Simply power off your device and turn it back on.
These Apple servers are redirected to localhost to prevent certificate revocation checks
Secondary certificate verification server
Blocking these servers only prevents certificate revocation checks. Your apps will continue to function normally, and you can still access the App Store and other Apple services.