Wednesday, June 15, 2022

Recent Questions - Ask Different

Recent Questions - Ask Different

iCloud not synching, cloudd reporting "TIC SSL Trust Error"

Posted: 15 Jun 2022 05:41 AM PDT

I am running three Macs with macOS 10.13.6. All are in the same LAN, all are set up to connect to iCloud with the same account.

On one Mac, iCloud works fully (with all services).

On the other two, I am able to sign in to iCloud, but none of the synching services (Safari bookmarks, iCloud Drive, Notes etc.) work. They used to work fine in April (6 weeks ago).

Looking at errors in Console.app, I find these probably related messages:

fault   13:49:45.008478 +0300   apsd    Failed entitlement check 'com.apple.private.secure-apsclient' for <private>  fault   13:49:45.009632 +0300   apsd    Failed entitlement check 'com.apple.private.aps-connection-initiate' for <private>    error   13:49:45.359596 +0300   identityservicesd   ENGroupID initWithDataRepresentation - wrong data size -- Failed {data: (null)}    error   13:49:47.298499 +0300   cloudpaird  cloudpaird: sendResponderPairingMessage: Device info needed from CloudKit    error   13:49:47.459322 +0300   identityservicesd   ENGroupID initWithDataRepresentation - wrong data size -- Failed {data: (null)}  fault   13:49:48.809973 +0300   identityservicesd   Dropping message! {guid: <private>, processError: (null), decryptionError <private>    error   13:49:50.853389 +0300   cloudd  TIC SSL Trust Error [113:0x7fce1c461350]: 3:0  error   13:49:50.853854 +0300   cloudd  Task <BD314808-6292-4966-8170-6963A206C3DC>.<7> HTTP load failed (error code: -1202 [3:-9807])  error   13:49:50.853975 +0300   cloudd  Task <BD314808-6292-4966-8170-6963A206C3DC>.<7> finished with error - code: -1202  error   13:49:50.856458 +0300   cloudd  NetworkingError, NSURLErrorDomain/-1202/NSUnderlyingError, kCFErrorDomainCFNetwork/-1202 CFStreamUnderlyingError _kCFStreamErrorDomainSSL/-9807

On the Mac where it's working, I see instead:

default 14:06:19.167843 +0200   cloudd  TIC Enabling TLS [1476:0x7fc86511ae50]  default 14:06:19.168069 +0200   cloudd  TIC TCP Conn Start [1476:0x7fc86511ae50]

Apparently, there is a general SSL authentication issue causing the troubles. But I cannot find out what's causing the SSL issue. Googling only finds a few indidents where developers run into the "TIC SSL Trust Error", but there it's suggested that their own SSL setup is wrong, over which they have control. But in my case it's Apple's server and client, so I am not directly involved in the chain of this connection.

I've tried a few things blindly such as:

  • Log out of iCloud, reboot, log in again.
  • Log in to a different account, as suggested in this answer.
  • Disable the Mac's Firewall (and Little Snitch, too).
  • Perform all system updates (such as latest Safari and Security updates).
  • Re-install macOS 10.13.6 over the current installation (via Recovery), as I wondered if some system file's code signatures or entitlements got lost.
  • Look at the Keychains, first deleting all expired Certificates, then even delete all manually trusted Certs (i.e. such that were previous untrusted and I manually changed that).
  • Log out of iCloud, log in to another Mac user account and log in to iCloud there (so that my normal user's Keychains can't be the culprit).

Nothing made a difference. The "TIC SSL Trust Error" keeps appearing in the log.

As I can log in to iCloud, SSL generally works. I can also access web sites with https without problems, including icloud.com.

iMessage (Messages.app) works fine, too.

I wonder if there's a way to get more information about which part of the SSL cert trust chain is the issue here.

Also, is there a way to reset the entire Certificate system, perhaps, so that I can start with the bare minimum?

Important Carrier Message "Unlock iPhone to view message"

Posted: 15 Jun 2022 04:07 AM PDT

Yesterday I made an update to the latest iOS version. Now I have to unlock the phone to enter the passcode for Mobile ID (2FA authentication).

Before the update, I could enter the Mobile ID passcode without unlocking.

How can I reset to the previous behavior?

Protect access to your company data and applications with a comprehensive end-to-end solution for two-factor authentication (2FA). Simple installation and high compatibility allow quick set-up at home and abroad so you can log on to online applications securely, wherever you are.

enter image description here

Pending Transaction doesn't disappear out of Apple Wallet

Posted: 15 Jun 2022 04:20 AM PDT

I made a purchase through the Apple Store app using Apple Pay and my Apple Card. After 45 days the pending transaction still appears along with the final charge. All of my reports in Apple Wallet show the total of both charges even though I only made one purchase.

How do I remove this duplicate pending transaction?

MDict can‘t load more than 122 files as group

Posted: 15 Jun 2022 04:02 AM PDT

I had issue with MDict which others or the developer of app can't reproduce.

I can't load more than 122 files as groups.

If i using more than 122 dict files, app can't show, it shows fail to open file. The files not corrupt, all of them works for others and developer.

The issue only when loading all files together as group.

I reinstalled new macos, issue doesn't solve it.

Here is log file of app: Should be normal way;

Found dictionary:/Users/**/Downloads/pro/****, added to list

Open file failed, reason:No such file or directory  Open file failed, reason:No such file or directory  Open file failed, reason:Too many open files  Open file failed, reason:Too many open files  Fail to load dict:/Users/**/Downloads/pro/*****, Error:Fail to open file

Files is ok, if i opened only one file is ok. I appreciate for helping.

Cannot enable or disable Mail plug-ins

Posted: 15 Jun 2022 03:32 AM PDT

I have two Mail.app plug-ins installed: "GPGMailLoader.mailbundle" and "Smallcubed MailSuite.mailbundle". Currenly, GPG is enabled, and works, and MailSuite is disabled.

However, when I toggle either plugin (i.e. MailSuite to on or GPG to off), and restart Mail, the change hasn't taken. So I cannot use MailSuite, nor disable GPG.

I have tried:

  • Reinstalling MacOS Mojave in-place (did not fix).
  • Creating a new user (everything works for new user).

How can I further investigate this?

How to change .webloc file icon?

Posted: 15 Jun 2022 04:14 AM PDT

Chrome is my default web browser.

Sometimes, I drag URLs from the Chrome address bar to the desktop.

When I do this, they always take the Safari "webloc" icon.

How can I pick another icon, like Chrome?

I'd like to do this for ALL such webloc files. I'm aware that, by turning on file extensions and deleting a single file's "webloc", this could be done. But I'd like it to be the case across the board.

Thanks.

How to configure Xcode to fetch swift dependencies over ssh using a private key which is stored on a Yubikey ( HSM , gpg --card-status )

Posted: 15 Jun 2022 03:29 AM PDT

Problem currently is that I find no way to simply configure or instruct Xcode to check out source code or dependencies over git+ssh using ssh agent.

Does Xcode at all supports using the ssh-agent?

I have not found any possibility to configure it without refering to its private key. (usually referred to ~/.ssh/id_rsa etc around on the web)

Sadly I have no way of referring to the private key in Xcode when it is stored inaccessible for anyone else then the Yubikey (HSM).

Meta information:

My gpg-agent is configured into my environment and works flawless in the terminal with some simple setup:

export GPG_TTY=$(tty)  gpg-connect-agent updatestartuptty /bye  unset SSH_AGENT_PID  export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket)

(See https://www.engineerbetter.com/blog/yubikey-ssh/ for details on yubikey setup)

gpg --card-status lists that my keypair is available, and it works in the terminal as ssh-agent -L lists my public key and I can use it to ssh into remote hosts accepting my ssh key or issue git clone.. in the terminal.

Emacs GUI won't start when launched from the Terminal

Posted: 15 Jun 2022 03:54 AM PDT

When I type

brew install emacs

at the Terminal, the following message displays:

Warning: emacs 25.3 is already installed

However, when I type

emacs &

the only thing that happens is that the following message is displayed:

[1] 21302

but the Emacs GUI isn't launched. I have another apple computer where typing

emacs &

launches the Emacs GUI. How can I make the Emacs GUI launch by executing a command from the Terminal?

macOS Sierra Version 10.12.6

What does the 2 stand for in "iPhone (2)" in find my iPhone app?

Posted: 15 Jun 2022 05:03 AM PDT

Under the 'Find my iPhone' app, one of our phones listed now has a 2 beside it:
iPhone (2)
Listed like the above. What does that mean?

How to manually create a working .webloc file?

Posted: 15 Jun 2022 04:24 AM PDT

So I created a .webloc file using a .vncloc file as a template (standard xml/plist format), but instead of opening in a Safari window, it is downloading the html of the website into a file.

My goal is to eventually write a cronjob that keeps the URL of a server with a dynamic IP address up to date in the file (in dropbox) so that I can just double-click it anytime and get the correct server page.

The contents of the file look like this:

<?xml version="1.0" encoding="UTF-8"?>  <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">  <plist version="1.0">  <dict>      <key>URL</key>      <string>http://**ipaddress...**:**port...**/</string>  </dict>  </plist>

How do I get the .webloc file to actually open and display in Safari, as if I were to have entered the URL myself?

Email encryption options on an iPhone

Posted: 15 Jun 2022 03:55 AM PDT

I've started taking security more seriously lately. (Why only now you may ask? Because I'm a trusting fool that's why.) I've now got emails signing automatically and encrypting where I have their key.

Previously I only did this when necessary, but I'm trying to breed a sense of change around me and taking my own medicine seems sensible. I have no issue with GPG in Thunderbird, Outlook, or on Android with K9 Mail & APG, but I have no idea how to handle GPG on IOS.

I can't accept there's no way, it seems ridiculous, or maybe I'm approaching the problem wrong and there is a more appropriate route than GPG that's better supported?
Posted by at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)