[High Sierra] softwareupdated[548]: Failed Software Update

Question

tabby72 Author

Level 1

4 points

[High Sierra] softwareupdated[548]: Failed Software Update

Hello there,

on my mid-2010 iMac, running High Sierra 10.13.6 (17G14042), softwareupdate has stopped working on 2023 May 2nd.

The error reported in /var/log/install.log shows a certificate trust issue.

This cert was updated on that date. In my keychain I have no conficting certificates along the whole chain.

A my browsers show no certificate validation problem.

I suspect softwareupdated has the old certificate pinned/hardcoded, but I don't know if/how I can override this.

Is there a way to get it work again?

Thanks!

Here's the full log excerpt:

-------------------------

2023-05-21 21:54:25+02 tabby-imac softwareupdate[17677]: Starting softwareupdate CLI tool

2023-05-21 21:54:25+02 tabby-imac softwareupdated[548]: SUUpdateServiceClient: (softwareupdate) is Apple Signed!

2023-05-21 21:54:25+02 tabby-imac softwareupdated[548]: Adding client SUUpdateServiceClient pid=17677, uid=501, installAuth=NO rights=(), transactions=0 (/usr/sbin/softwareupdate)

2023-05-21 21:54:25+02 tabby-imac softwareupdated[548]: SUScan: Scan for client pid 548 (/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated)

2023-05-21 21:54:25+02 tabby-imac softwareupdated[548]: Failed Software Update - Refusing invalid certificate from host: swscan.apple.com

2023-05-21 21:54:25+02 tabby-imac softwareupdated[548]: SUScan: Elapsed scan time = 0.1

2023-05-21 21:54:25+02 tabby-imac softwareupdated[548]: SUScan: Error encountered in scan: Error Domain=NSURLErrorDomain Code=-1012 "(null)" UserInfo={NSErrorFailingURLStringKey=https://swscan.apple.com/content/catalogs/others/index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog, NSErrorFailingURLKey=https://swscan.apple.com/content/catalogs/others/index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog, NSLocalizedRecoverySuggestion=Assicurati ** essere connesso a internet e riprova., SUErrorRelatedCode=SUErrorCodeScanCatalogNotFound}

2023-05-21 21:54:25+02 tabby-imac softwareupdated[548]: Scan got error Impossibile completare l'operazione. (NSURLErrorDomain errore -1012.)

2023-05-21 21:54:25+02 tabby-imac softwareupdated[548]: Removing client SUUpdateServiceClient pid=17677, uid=501, installAuth=NO rights=(), transactions=0 (/usr/sbin/softwareupdate)

-------------------

[Re-Titled by Moderator]

iMac 27″

Posted on May 21, 2023 1:24 PM

Reply

Answer 1

BDAqua

Level 10

251,329 points

May 21, 2023 1:47 PM in response to tabby72

What Apps are you trying to Update?

See if this helps...

Go on the Apple certificate page:

Apple PKI - Apple

Download the Apple Intermediate Certificates

Apple IST CA 2 - G1 Certificate (direct download)

Double click the downloaded certificate to install it in Keychain Access.

You should see it now, in login certificates.

https://discussions.apple.com/thread/251211674?answerId=253087027022&page=1

Thanks to Roger Wilmut1…

https://discussions.apple.com/thread/253252560

how to renew certificates expired on 2011… - Apple Community

DST Root CA X3 Certificate Expiration Problems and Fix - The Tech Journal (stephenwagner.com)

Reply

Answer 2

tabby72 Author

Level 1

4 points

May 21, 2023 2:18 PM in response to BDAqua

Hello,

thanks for your answer, but that's not the point.

I have already verified the whole chain and it's ok:

swdist.apple.com -> Apple Public EV Server RSA CA 2 - G1 -> DigiCert High Assurance EV Root CA.

Only "softwareupdate" and the OS updates in the Apple store got this error.

The swdist.apple.com is not untrusted, but "refused". I'm pretty sure it's pinned.

In facts, if I distrust the intermediate or the root CA in my keychain, it shows up a different error (untrusted cert).

So, what's happpening is that the cert passes the chain validation, but "maybe" it's not THE certificate the application is expected to be, 'cause the pinning.

I hope I was clearer than before.

Thanks again.

Reply

Answer 3

tabby72 Author

Level 1

4 points

May 23, 2023 12:06 PM in response to tabby72

[SOLVED]

Update: I didn't do anything and somehow the issue is gone. What happened is still unclear to me, but now it works again perfectly.

/var/log/install.log:

------ UP TO NOW IT WAS NOT WORKING----

2023-05-22 05:42:41+02 tabby-imac softwareupdated[548]: BackgroundActivity: Starting Background Check Activity

2023-05-22 05:42:41+02 tabby-imac softwareupdated[548]: BackgroundActions: Automatic check parameters: autoDownload=NO, autoConfigData=YES, autoCriticalInstall=YES

2023-05-22 05:42:41+02 tabby-imac softwareupdated[548]: SoftwareUpdate: Should Check=YES. Next check=02/05/23, 22:36 (interval=86280.000000, A/C=YES

2023-05-22 05:42:41+02 tabby-imac softwareupdated[548]: SoftwareUpdate: Fire periodic check for interval

2023-05-22 05:42:41+02 tabby-imac softwareupdated[548]: BackgroundActions: checking for updates

2023-05-22 05:42:41+02 tabby-imac softwareupdated[548]: SUScan: Scan for client pid 548 (/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated)

2023-05-22 05:42:41+02 tabby-imac softwareupdated[548]: Failed Software Update - Refusing invalid certificate from host: swscan.apple.com

2023-05-22 05:42:41+02 tabby-imac softwareupdated[548]: SUScan: Elapsed scan time = 0.1

2023-05-22 05:42:41+02 tabby-imac softwareupdated[548]: SUScan: Error encountered in scan: Error Domain=NSURLErrorDomain Code=-1012 "(null)" UserInfo={NSErrorFailingURLStringKey=https://swscan.apple.com/content/catalogs/others/index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog, NSErrorFailingURLKey=https://swscan.apple.com/content/catalogs/others/index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog, NSLocalizedRecoverySuggestion=Assicurati ** essere connesso a internet e riprova., SUErrorRelatedCode=SUErrorCodeScanCatalogNotFound}

2023-05-22 05:42:41+02 tabby-imac softwareupdated[548]: Scan got error Impossibile completare l'operazione. (NSURLErrorDomain errore -1012.)

2023-05-22 05:42:41+02 tabby-imac softwareupdated[548]: Impossibile completare l'operazione. (NSURLErrorDomain errore -1012.)

2023-05-22 05:42:41+02 tabby-imac softwareupdated[548]: BackgroundActivity: Finished Background Check Activity

------ FROM NOW ON IT STARTED WORKING----

2023-05-22 11:44:26+02 tabby-imac softwareupdated[548]: BackgroundActivity: Starting Background Check Activity

2023-05-22 11:44:26+02 tabby-imac softwareupdated[548]: BackgroundActions: Automatic check parameters: autoDownload=NO, autoConfigData=YES, autoCriticalInstall=YES

2023-05-22 11:44:26+02 tabby-imac softwareupdated[548]: SoftwareUpdate: Should Check=YES. Next check=02/05/23, 22:36 (interval=86280.000000, A/C=YES

2023-05-22 11:44:26+02 tabby-imac softwareupdated[548]: SoftwareUpdate: Fire periodic check for interval

2023-05-22 11:44:26+02 tabby-imac softwareupdated[548]: BackgroundActions: checking for updates

2023-05-22 11:44:26+02 tabby-imac softwareupdated[548]: SUScan: Scan for client pid 548 (/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated)

2023-05-22 11:44:26+02 tabby-imac softwareupdated[548]: Got status 200

2023-05-22 11:44:27+02 tabby-imac softwareupdated[548]: SUScan: Using catalog https://swscan.apple.com/content/catalogs/others/index-10.13-10.12-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog.gz

...............................

(again: I didn't do anything. It healed itself.)

Does anyone has a valid explanation for all this?

Thanks for your time.

Reply

Answer 4

BDAqua

Level 10

251,329 points

May 23, 2023 2:11 PM in response to tabby72

No idea, but great to hear my friend.

Reply

[High Sierra] softwareupdated[548]: Failed Software Update

Similar questions