On 21 Apr 2016, at 03:21, Kevin Yu <kevinyu@draytek.com> wrote:

the container app include an extra key “com.apple.developer.networking.vpn.api” should I remove it or add into extension also?

I presume that means you’re using NEVPNManager to set up Personal VPN. If so, you can leave that extension enabled for your app only; your extension shouldn’t be trying to set up Personal VPN, and thus shouldn’t need it.

Here’s the output for my app and extension …

Two things: * Neither your app nor your extension should have `com.apple.developer.networking.HotspotHelper` set. This is only supported on iOS. If you rebuild your provisioning profile, this should go away [1]. * The extension should not have the `com.apple.security.app-sandbox` or `com.apple.security.network.client` entitlements. An NE provider extension automatically gets an appropriate sandbox. Share and Enjoy -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware [1] There was a bug in the way that the Network Exetnsion profile template was set up that caused it to add unsupported entitlements to OS X profiles (INC060395401). This was fixed back in Mar, so any profiles generated before that must be regenerated to get a profile without this entitlement. _______________________________________________ Do not post admin requests to the list. They will be ignored. Macnetworkprog mailing list (Macnetworkprog@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/macnetworkprog/site_archiver%40lists... This email sent to site_archiver@lists.apple.com