-
Re: KeyChainStore returns 34018 error
eskimo Aug 6, 2015 1:39 AM (in response to ashisha)Error -34018 is not publicly documented but it translates to
errSecMissingEntitlement
. There are two causes of this error:build-time entitlement problems
a hard-to-reproduce runtime bug
The second problem is covered by a long-running thread elsewhere on DevForums. However, it sounds like you're hitting this problem every time, in which case you have a build-time problem. Run the following command over the app binary to confirm that it's built with the entitlements you're expecting.
$ codesign -d --entitlements :- /path/to/your.app
Share and Enjoy
—
Quinn "The Eskimo!"
Apple Developer Relations, Developer Technical Support, Core OS/Hardwarelet myEmail = "eskimo" + "1" + "@apple.com"
-
Re: KeyChainStore returns 34018 error
omarojo Nov 30, 2015 4:27 PM (in response to eskimo)so I run the command.
- $ codesign -d --entitlements :- /path/to/your.app
and what? What is that useful for? how do I know I have the right entitlements, the my entitlements need special configuration so that KeyChain works? I dont understand.
-
Re: KeyChainStore returns 34018 error
Noami Dec 7, 2015 4:15 AM (in response to omarojo)There is no way to solve this as its an Apple bug.
The only way is killing the app, cleaning your device memory (by closing other apps from background) and restarting the app again.
There is no future resolution for this bug.
-
Re: KeyChainStore returns 34018 error
eskimo Dec 8, 2015 2:00 AM (in response to Noami)There is no way to solve this as its an Apple bug.
It’s more subtle than that. There are actually two potential causes of this problem:
If the problem is 100% reproducible, it’s likely that your entitlements are set up incorrectly.
If your app works most of the time but you see this error on occasion, you’re hitting this OS bug.
Share and Enjoy
—
Quinn "The Eskimo!"
Apple Developer Relations, Developer Technical Support, Core OS/Hardwarelet myEmail = "eskimo" + "1" + "@apple.com"
-
Re: KeyChainStore returns 34018 error
Noami Dec 26, 2015 7:57 AM (in response to eskimo)Well, if its the second one I would still offer to apply a bug report. More reports, greater priority for the fix!
-
-
Re: KeyChainStore returns 34018 error
davidcc Nov 27, 2016 12:36 PM (in response to eskimo)"However, it sounds like you're hitting this problem every time, in which case you have a build-time problem. Run the following command over the app binary to confirm that it's built with the entitlements you're expecting."
$ codesign -d --entitlements :- /path/to/your.app
What IS the entitlement we should see in the Provisioning Profile and Entitlement plist to put this -34108 error away?
I used your command line above and
security cms -D -i /path/to/installed/.mobileprovision
yet am not sure what I'm looking for. (they are quite lengthy) I am assuming they are the
<key>keychain-access-groups</key> (profile)
<key>com.apple.security.application-groups</key> (plist)
-
Re: KeyChainStore returns 34018 error
eskimo Nov 28, 2016 12:49 AM (in response to davidcc)IMPORTANT Before looking into -34018 errors, make sure you read my Error -34018
errSecMissingEntitlement
pinned post.What IS the entitlement we should see in the Provisioning Profile and Entitlement plist …?
Ooo, you’re in luck, I just posted about this.
Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardwarelet myEmail = "eskimo" + "1" + "@apple.com"
-
Re: KeyChainStore returns 34018 error
davidcc Dec 3, 2016 12:01 PM (in response to eskimo)Ooo, you’re in luck, I just posted about this.
Thank you Quinn. That post helped me to notice in the provisioning profile:
<key>Entitlements</key> <dict> <key>keychain-access-groups</key> <array> <string>NKRQBLSUY2.*</string> </array> ....
Is the value for keychain-access-groups correct or should the string match the value in the provisioning profile? Which looks like:
<key>keychain-access-groups</key> <array> <string>NKRQBLSUY2.com.theCompany.theAppName.apps.shared</string> </array>
-
Re: KeyChainStore returns 34018 error
eskimo Dec 4, 2016 2:11 PM (in response to davidcc)I’ve responded over on your other thread.
Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardwarelet myEmail = "eskimo" + "1" + "@apple.com"
-
-
-