Search results for

Apple Maps Guides

154,002 results found

Post

Replies

Boosts

Views

Activity

Reply to iOS mTLS Client Certificate Authentication Fails in TestFlight with Error -25303
[quote='876494022, ellinj, /thread/815390?answerId=876494022#876494022, /profile/ellinj'] Is there any Keychain support for non-X.509 certificate formats? [/quote] No. Or, more specifically, the keychain only supports X.509 for kSecClassCertificate items. That doesn’t stop you storing the raw data as kSecClassGenericPassword. As to what you should do, that depends on how you’re using the word “certificate”: Apple uses [1] certificate to refer to the signed wrapper around the public key. We then use digital identity to refer to the combination of a certificate and the private key that matches the public key in that certificate. See TN3161 Inside Code Signing: Certificates for more on this. However, it’s common for folks to use a single term, certificate, to refer to both the certificate and digital identity, with ‘hilarious’ confusion being the result. So, if you’re using certificate ‘correctly’ then the certificate contains just the public key and you can store it wherever you want [2]. OTOH, if your
3d
Reply to Linker nondeterminism (ld_new) involving branch islands
[quote='876460022, jamie_sq, /thread/805609?answerId=876460022#876460022, /profile/jamie_sq'] If it's possible to provide positive confirmation [/quote] Yep. My reading of FB20884404 is that we identified the underlying issue and rolled that fix into Xcode 26.4b1. You should’ve also been notified of the fix in Feedback Assistant. [quote='876460022, jamie_sq, /thread/805609?answerId=876460022#876460022, /profile/jamie_sq'] thanks to whoever worked on this! [/quote] I’ll pass that along. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
3d
Linker nondeterminism (ld_new) involving branch islands
Hi, I'm investigating what looks like possibly nondeterministic behavior when linking large iOS app binaries. I do not have a concise reproduction of the issue yet, but am trying to hunt down possible leads. In particular, the problem appears to surface when invoking clang to link a binary and the resulting order of the 'branch island' instructions appears to be random each time the binary is linked (as shown by the link map output). I was wondering if anyone with insight into the linker's current implementation could shed light on whether that is expected, and if there is anything that can be done to prevent it. FWIW, it seems like it might be size-dependent as smaller app binaries don't appear to exhibit the same behavior. I'd be glad to share more specifics and hopefully a reproduction if I can ever find one eventually. Some environment info (Xcode 16.4 toolchain): clang -v: Apple clang version 17.0.0 (clang-1700.0.13.5) Target: arm64-apple-darwin24.6.0 Thread model: posix Instal
6
0
618
3d
Reply to URL Filter Network Extension
[quote='876405022, Pushpak-Ambadkar123, /thread/815498?answerId=876405022#876405022, /profile/Pushpak-Ambadkar123'] can we show any kind of custom error or alert when user tries to open blocked URL in case of URL Filter network ? [/quote] In the URL filter architecture your code isn’t the one making the actual decisions. Rather, your code sets up the filter’s state and the system applies that filter. So your code doesn’t run on the per-URL path and thus can’t do anything on that path. WWDC 2025 Session 234 Filter and tunnel network traffic with NetworkExtension talks more about this and I encourage you to watch it. So, your question is actually “Can we configure the filter to show a custom error?” And AFAICT the answer to that is “No.” However, I think it’d be reasonable for you to file an enhancement request for such a configuration option. If you do file an ER, post your bug number, just for the record. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo
3d
Reply to process.waitUntilExit never exits in tahoe 26.3
Hmmm, that’s not good. While I don’t want to engage in ‘blame the victim’ here, there is something you can do to reduce the risk of problems like this occurring in the future, namely, testing with beta seeds as they’re released. The beta seed programme exists to help us find and fixing regressions like this. Anyway, let’s see if we can find you a workaround. If you add this to your app’s entitlement, does it prevent the failure: A key of com.apple.security.temporary-exception.mach-lookup.global-name With the value being an array With a single string element Whose value is com.apple.storagekitd If that works, we can then talk about the App Review implications |-: Note Temporary exception entitlements have an interesting history. I have a couple of links in App Sandbox Resources that explain more about them. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic: App & System Services SubTopic: Core OS Tags:
3d
Reply to CLMonitor API Missing Geofence Entry Events After Initial Registration
As per the Suggestion, Created CLBackgroundActivitySession and CLServiceSession in foreground to keep Core Location active. Recreated those sessions on background launch/APNS. Persisted and restored fence definitions so CLMonitor can re‑register fences after background launch. But the restore only re‑registers fences that were already created before. If a fence is first created while the app is terminated and only launched in background, CLMonitor did not deliver the initial “enter” until a foreground session exists. Comparision with old CLLocationManager region monitoring: Old API (CLLocationManager region monitoring) is system‑managed. The OS keeps monitoring even when your app is terminated, and it can accept new region registrations in background because that API was designed around long‑standing background delivery. New API (CLMonitor with CLBackgroundActivitySession/CLServiceSession) is session‑based. Apple expects the session to be created in foreground and then restored in background. It’s op
3d
Reply to Possible 26.2 memory leak regression in Network, when multiple NEXT active
Thanks for checking this. And I’m glad to hear that things are improving. [quote='876543022, TChrist, /thread/813973?answerId=876543022#876543022, /profile/TChrist'] We will provide a leaks report … from the 26.4 device in the Feedback. [/quote] Thanks. Although I think you might be better off creating a new bug for that. The current bugs were used to track the fix for the major memory issue that landed in 26.4 beta. The remaining minor leak is likely to have a different cause and thus it’s better to have a different bug. If you do file a new bug, please post its bug number here, just for the record. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
3d
Reply to Securing code signing ceritifcates in the secure enclave
First up, I want to be clear about terminology. You don’t sign code with a certificate, you sign it with a digital identity, that is, the combination of a certificate and its associated private key. There’s no need to protect the certificate; it’s the private key that matters. I talk more about this in TN3161 Inside Code Signing: Certificates. Second, the Secure Enclave (SE) doesn’t store private keys. Rather, you protect a private key with the SE. The SE generates the private key and returns it wrapped in a way so that only that SE can use it. You then send key operations, like ‘sign this blob with this wrapped key’, to the SE, it internally unwraps the key, does the operation, and returns you the result. So the unwrapped key material never leaves the SE, but it’s not stored in the SE. Note This is how the SE works but it’s not true for other hardware-based keys. Notably, with a smart card the private key is actually stored on the smart card itself. Folks using the smart card don’t work with a wrapped key, t
3d
Reply to Memory consumption of apps under macOS 26 "Tahoe"
I just attached an allocation trace to the FB I run with my productive app on macOS 26.2. Instruments is showing a peak of 128 MB allocated memory, while Activity Monitor is showing approx. 50 MB on macOS 15. Unfortunately, I wasn't able to collect a similar allocation trace with macOS 15.6.1: It's running in a VM, and due to restrictions of virtual machines I cannot register my Apple development account for proper application signing - but I'm happy to go this extra mile if DTS was able to provide related instructions. Looking forward to any response in the ticket...
3d
Reply to EXC_BAD_ACCESS issue need advice
[Different DTS engineer here; I’m picking up this thread because it’s directly aligned with my area of expertise.] [quote='876554022, Tenjikato, /thread/815899?answerId=876554022#876554022, /profile/Tenjikato'] it does not appear in Xcode Organizer. [/quote] Right. The issue here is that you have a third-party crash reporter installed and it’s failing to preserve the Apple crash report. Let’s look at the backtrace in your first post: Crashed: com.apple.main-thread 0 KSCrash … ksmemory_notifyUnhandledFatalSignal + 12 1 KSCrash … handleSignal + 100 2 libsystem_platform.dylib … _sigtramp + 56 3 libsystem_kernel.dylib … mach_msg2_internal + 76 4 libsystem_kernel.dylib … mach_msg_overwrite + 428 5 libsystem_kernel.dylib … mach_msg + 24 6 CoreFoundation … __CFRunLoopServiceMachPort + 160 7 CoreFoundation … __CFRunLoopRun + 1188 8 CoreFoundation … _CFRunLoopRunSpecificWithOptions + 532 9 GraphicsServices … GSEventRunModal + 120 10 UIKitCore … -[UIApplication _run] + 792 Frames 10 through 3 are all standard
3d
Reply to Disable Local Network Access permission check
We just posted a TN3179 update with info about the AllowedEthernetLocalNetworkAddresses and AllowedWiFiLocalNetworkAddresses user defaults. I think this might be useful in your situation, where you have limited control over the software involved but deep control over the Mac on which it runs. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
3d