Failed to bringup MACOS app with NetworkExtension

Hi,

I am not able to bringup macos vpn like app using NetworkExtension with system extension. It fails with these errors.


/usr/libexec/neagent (/System/Library/Frameworks/NeworkExtension.framework/Versions/A/NetworkExtension)

Provider is not signed with a Developer ID certificate


681: 0x66778 default 20:43:02.209506-0400 neagent Signature check failed: code failed to satisfy specified code requirement(s)

681: 0x66778 default 20:43:02.209734-0400 neagent Provider is not signed with a Developer ID certificate


/usr/libexec/neagent (/System/Library/Frameworks/NeworkExtension.framework/Versions/A/NetworkExtension)

Provider is not signed with a Developer ID certificate


Any help is appreciated.


Thanks-

Replies

How have your signed your product? Using Developer ID? Or Apple Development? For bringup I recommend Apple Development.

Share and Enjoy

Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

Thanks eskimo for your response. Initially, I used Apple Development for bringing up. It worked fine. Later, I wanted to sign with Developer ID certificate for wider distribution. PacketTunnel.systemextension is failing with this error.


I followed your Jan 14th response of this thread https://forums.developer.apple.com/thread/125508

to sign with Developer ID certificate. I dont get any error while signing or notarizing app with Apple.

It throws error while trying to bring up app. Thanks.

Hi eskimo, Can you provide some steps what needs to be setup for NEMachServiceName in Info.plist. I suspect this is root cause of the failure. I have configured it to PacketTunnelProvider bundleid. Is that right?


Error log:


807: 0x32de3 default 22:03:27.842000-0400 nesessionmanager Signature check failed: code failed to satisfy specified code requirement(s)


807: 0x32de3 error 22:03:27.842669-0400 nesessionmanager NEVPNTunnelPlugin(app bundleId[617]): Validation of the extension failed

5374: 0x1dfac default 22:03:27.852216-0400 vmnet-bridge Dynamic store changed

807: 0x32de3 default 22:03:27.852125-0400 nesessionmanager NESMVPNSession[Primary Tunnel:<app>:EA8AE281-C93C-4680-92CF-4E70068392EB:(null)] in state NESMVPNSessionStateStarting: plugin NEVPNTunnelPlugin(<app bundleID>[617]) started with PID 0 error (null)

807: 0x32de3 default 22:03:27.854466-0400 nesessionmanager NESMVPNSession[Primary Tunnel:<app>:EA8AE281-C93C-4680-92CF-4E70068392EB:(null)]: Leaving state NESMVPNSessionStateStarting

807: 0x32de3 default 22:03:27.854676-0400 nesessionmanager NESMVPNSession[Primary Tunnel:<app>:EA8AE281-C93C-4680-92CF-4E70068392EB:(null)]: Entering state NESMVPNSessionStateStopping, timeout 20 seconds

180: 0x3a9 default 22:03:27.847522-0400 configd network changed

807: 0x32de3 default 22:03:27.854935-0400 nesessionmanager <NESMServer: 0x7fd0ead0c730>: Request to uninstall session: NESMVPNSession[Primary Tunnel:Connect42:EA8AE281-C93C-4680-92CF-4E70068392EB:(null)]

807: 0x32de3 default 22:03:27.855108-0400 nesessionmanager NESMVPNSession[Primary Tunnel:<app>:EA8AE281-C93C-4680-92CF-4E70068392EB:(null)]: status changed to disconnecting

807: 0x32de3 default 22:03:27.855197-0400 nesessionmanager NESMVPNSession[Primary Tunnel:<app>:EA8AE281-C93C-4680-92CF-4E70068392EB:(null)]: Updated network agent (inactive, compulsory, not-user-activiated, not- kernel-activated)

Can you provide some steps what needs to be setup for

NEMachServiceName
in
Info.plist
.

See this thread.

Share and Enjoy

Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"