{"id":13574,"date":"2016-02-16T15:32:40","date_gmt":"2016-02-16T20:32:40","guid":{"rendered":"http:\/\/mjtsai.com\/blog\/?p=13574"},"modified":"2023-05-29T10:16:56","modified_gmt":"2023-05-29T14:16:56","slug":"more-mac-app-store-certificate-problems","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2016\/02\/16\/more-mac-app-store-certificate-problems\/","title":{"rendered":"More Mac App Store Certificate Problems"},"content":{"rendered":"

Keith Gugliotto<\/a>:<\/p>\n

\n

Beginning February 14th, many of our users who purchased from the Mac App Store have experienced an issue where the application crashes while opening. What we know, so far, is this is another certificate issue on Apple’s end, preventing applications from properly validating a Mac App Store receipt.<\/p>\n

[…]<\/p>\n

The official word from Apple is that, in general, restarting the Mac in question should resolve the issue. In addition, for OS X El Capitan users, Apple says updating to OS X 10.11.2 or later is required, and OS X Snow Leopard users should be sure the Mac App Store Update for OS X Snow Leopard is installed. While what we have here is technically similar to what happened last November, it’s not quite the same and, being on Apple’s end, not something we could’ve prepared for. We’re grateful for your patience and understanding!<\/p>\n

We’re not seeing the issue in-house, but we’ve learned a restart does not resolve the issue – reinstalling the application itself does.<\/p>\n<\/blockquote>\n\n

Jeff Johnson<\/a>:<\/p>\n

On 2 different machines, I had to delete the apps entirely and re-download them from MAS in order to get them to work. Quality.<\/p><\/blockquote>\n\n

Russell Ivanovic<\/a>:<\/p>\n

\n

Some of my Mac apps won’t open today. I know why, and I know a re-install fixes it…but…sigh. Mac App Store: It Just Works*<\/p>\n<\/blockquote>\n\n

Jason Simms<\/a>:<\/p>\n

\n

Yet another Mac App Store delight: today, several apps stopped opening (some say \"verifying\", some do nothing). Fixed by redownloading.<\/p>\n<\/blockquote>\n\n

Peter Cohen<\/a>:<\/p>\n

This CF is still biting me, months later<\/p><\/blockquote>\n\n

Rich Trouton<\/a>:<\/p>\n

\n

Mac admins who have previously downloaded installers from the Mac App Store<\/a> may be seeing some of those installers displaying warning messages and\/or failing to install as of this morning.<\/p>\n

[…]<\/p>\n

In the case of applications where the needed version is no longer available from the MAS, or the application itself is no longer available, there are two ways to handle this issue[…]<\/p>\n<\/blockquote>\n\n

Unlike in November, I have not seen these problems on my Macs.<\/p>\n\n

Previously: WWDR Intermediate Certificate Expiration<\/a>, No One Minding the Store<\/a>.<\/p>\n\n

Update (2016-02-16): Gregg Keizer<\/a>:<\/p>\n

Apple’s support document […] added a caveat about OS X apps. “Users running OS X El Capitan (v10.11 or v10.11.1) may receive a notification that your Mac app is damaged if it utilizes receipt validation to request a new receipt from Apple,” the document said. “They can resolve this issue by restarting their Mac or updating to OS X El Capitan (v10.11.2) or later.”<\/p>\n

Computerworld<\/em> staffers running the latest El Capitan beta—OS X 10.11.4—encountered dead apps early Tuesday, including Byword, a text editor; the Fantastical 2 calendar; and Clear Day, a weather app. Some apps threw out a request for the Apple ID password used to access the Mac App Store—in some cases only a fleeting dialog box—but other apps just would not launch.<\/p>\n

Restarting the Mac did not help.<\/p><\/blockquote>\n

Rob Griffiths<\/a>:<\/p>\n

We’re paying 30% for the privilege of explaining to Apple’s App Store customers why their purchased apps don’t work.<\/p><\/blockquote>\n

Rich Siegel<\/a>:<\/p>\n

If you have a product in the Mac App Store, be advised that the MAS had a certificate expiration over the weekend. Brace for impact.<\/p><\/blockquote>\n

Paul Hagstrom<\/a>:<\/p>\n

Yep. That was my guess—several MAS apps just started silently failing to launch. Reinstall fixes it, but... grr.<\/p><\/blockquote>\n

James Knight<\/a>:<\/p>\n

ah is that why none of my apps work :(<\/p><\/blockquote>\n

Bad Uncle Leo<\/a>:<\/p>\n

Yup, tried to do an El Cap re-install last night, “damaged Install” & can’t re-install<\/p><\/blockquote>\n

Steve Steiner<\/a>:<\/p>\n

I would like to have thought they’d have this worked out after the last debacle but I would have been a fool to have done so.<\/p><\/blockquote>\n

Update (2016-02-17): The certificate problems seem to also be affecting FoldingText<\/a>.<\/p>\n\n

Wade Cosgrove<\/a>:<\/p>\n

As a developer this is absolutely unacceptable and as a user it’s even worse (silent launch failure)! <\/p><\/blockquote>\n\n

Phil Schiller<\/a> (via Cédric Luthi<\/a>):<\/p>\n

Developers were notified in advance and support was set up to help (always can do better)<\/p><\/blockquote>\n

This seems to miss the points that users<\/em> were not notified, that we’ve heard reports of support not being familiar with the issue, and that Apple’s recommended remedy doesn’t always work.<\/p>\n\n

Wade<\/a> Cosgrove<\/a>:<\/p>\n

This tech note does not reflect my experience. I am running 10.11.3 and experienced the issue after cold boot on Monday.<\/p><\/blockquote>\n

As far as I know customers have never received anything from Apple explaining these failures or how to resolve them.<\/p><\/blockquote>\n\n

Rich<\/a> Siegel<\/a>:<\/p>\n

This is hard to do 140ch at a time. :-) But alas “we warned you” doesn’t take the edge off the customer’s pain…<\/p><\/blockquote>\n

…and time & time again, customers come to us angry about something we couldn’t possibly have dealt with in advance.<\/p><\/blockquote>\n\n

Daniel Jalkut<\/a>:<\/p>\n

FWIW I believe Apple has prepared admirably for this but the specific issue Wade called out seems out of developer hands.<\/p><\/blockquote>\n\n

Ashkan Farhadtouski<\/a>:<\/p>\n

Delete and reinstall is not a solution. If purchased directly this wouldn’t have been a problem.<\/p><\/blockquote>\n\n

Mike Ash<\/a>:<\/p>\n

The problem was clearly announced, in the bottom of a drawer in a disused lavatory with a sign saying Beware of the Leopard.<\/p><\/blockquote>\n\n

It was working for me for several days after February 14, but starting this evening ReadKit will not launch<\/a> for me. It reports (silently, in Console): “Failed to check receipt signature: No valid signer”. Neither of Apple’s two pieces of advice—that the OS will tell me the app is damaged and that I should restart—worked, but deleting and reinstalling did.<\/p>\n\n

Update (2016-02-18): Adam Knight<\/a>:<\/p>\n

YAY! Another day that none of my Mac App Store programs will open. Thanks, Apple.<\/p><\/blockquote>\n\n

My understanding<\/a> is that the developer’s only responsibility was to make sure that their receipt validation code works with the new certificate. In cases where users are having problems, the apps don’t seem to be getting to that point. Receipt validation is (correctly) failing because of receipts signed with the expired certificate. The store is then supposed to download a new receipt signed with the new certificate. This is not happening. [Update (2016-02-20): See these<\/a> comments<\/a>. I now think that the app’s receipt validation is incorrectly<\/em> failing and that the system is (incorrectly) not downloading a new receipt.]<\/p>\n\n

Update (2016-02-19): David Foltz<\/a>:<\/p>\n

@gte I know it’s not your fault. But Napkin failed to launch today. Had to reinstall. Is this @mjtsai’s fault? ;)<\/p><\/blockquote>\n\n

Update (2016-02-20): Apple has significantly added to its page about the certificate expiration<\/a>:<\/p>\n

In some scenarios, an app purchased from the Mac App Store that utilizes receipt validation may fail to launch (exiting with a 173 error code) since it considers a local receipt that includes the expired WWDR Intermediate certificate invalid. OS X regards the receipt as valid when the updated WWDR Intermediate is present on your system and therefore does not request an updated receipt for the application.<\/p>\n

To resolve this issue, delete the renewed, non-expired WWDR Intermediate certificate from your System and\/or Login keychain within the Keychain Access application. After re-launching the application, you will be prompted for your Mac App Store login credentials in order to obtain a new receipt for the application. After you have launched your application and obtained a valid receipt, you can re-install the renewed certificate to continue your development. This issue will be fixed in a forthcoming update to OS X El Capitan.<\/p><\/blockquote>\n\n

Update (2016-02-22): Wolf<\/a> Rentzsch<\/a>:<\/p>\n

my list of Mac App Store Apps had to delete+reinstall due to Valentine’s Day Cert Massacre: BusyCal, Divvy, Fruit Juice, FoldingText, Shush<\/p><\/blockquote>\n

personal toll would have been higher but every chance I get I move my apps from Mac App Store to Direct. Don’t care if need to re-purchase<\/p><\/blockquote>","protected":false},"excerpt":{"rendered":"

Keith Gugliotto: Beginning February 14th, many of our users who purchased from the Mac App Store have experienced an issue where the application crashes while opening. What we know, so far, is this is another certificate issue on Apple’s end, preventing applications from properly validating a Mac App Store receipt. […] The official word from […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2023-05-29T14:16:59Z","apple_news_api_id":"e0e85132-ff64-450c-8e74-cf01e663cd1f","apple_news_api_modified_at":"2023-05-29T14:16:59Z","apple_news_api_revision":"AAAAAAAAAAD\/\/\/\/\/\/\/\/\/\/w==","apple_news_api_share_url":"https:\/\/apple.news\/A4OhRMv9kRQyOdM8B5mPNHw","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[2392,131,1583,30,39,1199,1372,1227],"class_list":["post-13574","post","type-post","status-publish","format-standard","hentry","category-technology","tag-app-store-receipt-validation","tag-bug","tag-keychain","tag-mac","tag-macappstore","tag-mac-os-x-10-11","tag-phil-schiller","tag-top-posts"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/13574","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=13574"}],"version-history":[{"count":19,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/13574\/revisions"}],"predecessor-version":[{"id":13661,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/13574\/revisions\/13661"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=13574"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=13574"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=13574"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}