• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: packet-tunnel-provider on OSX platform
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: packet-tunnel-provider on OSX platform


  • Subject: Re: packet-tunnel-provider on OSX platform
  • From: "Quinn \"The Eskimo!\"" <email@hidden>
  • Date: Thu, 21 Apr 2016 08:45:27 +0100

On 21 Apr 2016, at 03:21, Kevin Yu <email@hidden> wrote:

> the container app include an extra key “com.apple.developer.networking.vpn.api” should I remove it or add into extension also?

I presume that means you’re using NEVPNManager to set up Personal VPN.  If so, you can leave that extension enabled for your app only; your extension shouldn’t be trying to set up Personal VPN, and thus shouldn’t need it.

> Here’s the output for my app and extension …


Two things:

* Neither your app nor your extension should have `com.apple.developer.networking.HotspotHelper` set.  This is only supported on iOS.  If you rebuild your provisioning profile, this should go away [1].

* The extension should not have the `com.apple.security.app-sandbox` or `com.apple.security.network.client` entitlements.  An NE provider extension automatically gets an appropriate sandbox.

Share and Enjoy
--
Quinn "The Eskimo!"                    <http://www.apple.com/developer/>
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

[1] There was a bug in the way that the Network Exetnsion profile template was set up that caused it to add unsupported entitlements to OS X profiles (INC060395401).  This was fixed back in Mar, so any profiles generated before that must be regenerated to get a profile without this entitlement.



 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden


  • Prev by Date: Re: packet-tunnel-provider on OSX platform
  • Next by Date: Multiple NSURLSession (same identifier) - one invalidated, one not
  • Previous by thread: Re: packet-tunnel-provider on OSX platform
  • Next by thread: Re: creating non-default vpn configurations for IPSEC/L2TP
  • Index(es):
    • Date
    • Thread