com.apple.developer.networking.networkextension entitlements don't match PP

Question

Created Nov ’20

Replies 4

Boosts 0

Views 1k

Participants 3

I'm seeing a similar problem to the one listed above:

My Xcode entitlements file contains:
<key>com.apple.developer.networking.networkextension</key>
<array>
<string>packet-tunnel-provider</string>
<string>app-proxy-provider</string>
<string>content-filter-provider</string>
<string>dns-proxy</string>
<string>dns-settings</string>
</array>

Whereas my Provisioning Profile shows these same attributes as:
<key>com.apple.developer.networking.networkextension</key>
<array>
<string>packet-tunnel-provider-systemextension</string>
<string>app-proxy-provider-systemextension</string>
<string>content-filter-provider-systemextension</string>
<string>dns-proxy-systemextension</string>
<string>dns-settings</string>
</array>

Notice the appended "-systemextension" suffix. I've checked the PP options available in my portal and also tried changing the Xcode entitlements. So far I don't see a way to make these match from either side to the other. Am I missing something, or this a bug in Xcode versus PPs generated from the developer portal?

Answered by psichel in 648273022

To deploy a NE provider outside of the Mac App Store it must be packaged as a system extension

How would this differ from the SimpleFirewall example?
Can you suggest a reference?

Thanks!

Boost

Answer 1

DTS Engineer OP

Apple

Nov ’20

You get the -systemextension suffix when you create a Developer ID provisioning profile. To deploy a NE provider outside of the Mac App Store it must be packaged as a system extension and its this variant of the entitlements that allow that code to run (on 10.15 and later).

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

0

Answer 2

psichel OP

Nov ’20

Accepted Answer

To deploy a NE provider outside of the Mac App Store it must be packaged as a system extension

How would this differ from the SimpleFirewall example?
Can you suggest a reference?

Thanks!

0

Answer 3

DTS Engineer OP

Apple

Nov ’20

How would this differ from the SimpleFirewall example?

SimpleFirewall is already based on a sysex, so the only difference relates to how you sign it. You need to:

Use a Developer ID profile
Sign with your Developer ID Application signing identity
Use the -systemextension on the entitlements in that signature

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

0

Answer 4

WangZiYuan OP

Nov ’20

According to eskimos said, Release Version has -systemextension suffix and Debug Version not have -systemextension suffix

0