Getting an unsigned plist / mobileconfig from a signed one in python on OS X with pyObjC

unsign_plist.py

import objc
from Foundation import NSBundle

Security_bundle = NSBundle.bundleWithIdentifier_('com.apple.security')

CMSDecoderRef = objc.createOpaquePointerType("CMSDecoderRef", b"^{CMSDecoder}", None)

functions = [('CMSDecoderCreate',          b'io^^{CMSDecoder}'),
             ('CMSDecoderUpdateMessage',   b'i^{CMSDecoder}*I'),
             ('CMSDecoderFinalizeMessage', b'i^{CMSDecoder}',),
             ('CMSDecoderCopyContent',     b'i^{CMSDecoder}o^^{__CFData}')]

objc.loadBundleFunctions(Security_bundle, globals(), functions)

f = open('Example.mobileconfig.signed', 'rb')
signed_plist = f.read()
f.close()

err, decoder = CMSDecoderCreate(None)
err = CMSDecoderUpdateMessage(decoder, signed_plist, len(signed_plist))
err = CMSDecoderFinalizeMessage(decoder)
err, unsigned_data = CMSDecoderCopyContent(decoder, None)

plist_bytes = unsigned_data.bytes().tobytes()

While not python, this stackexchange answer shows how to do the same thing with openssl cli: https://apple.stackexchange.com/a/105982

openssl smime -inform DER -verify -in ~/Settings.mobileconfig -noverify -out ~/Unsigned.mobileconfig