Xcode Server setup failed (configuring ssl infrastructure)

After upgrading to Server 5.2 today, I am unable to start the Xcode service due to an error.

The very first time I attempted to set up the service, after choosing the Xcode application, I was prompted to create an Xcode service user account. So I followed the prompts to create an Xcode Server user account.

Then I saw a message stating that Xcode Helper would need to be allowed to do user interface scripting, to which I agreed.

Finally, a progress bar appeared where it appeared the Xcode service was being configured.

And then an error was displayed stating:

Xcode Server setup failed (configuring ssl infrastructure)

Try clicking Choose Xcode and selecting a newer version of Xcode or upgrading to a newer version of Server.

Since I had just installed the latest version of Xcode previously, I went ahead and verified that Xcode launches without issue, and no messages are displayed.

Then I went to System Preferences > Security & Privacy > Accessibility and verified that an entry was indeed added for Xcode Helper, and I checked the checkbox next to it to allow access.

I also went ahead and logged into the Xcode Server user account and used Fast User Switching to switch back to my main account.

Unfortunately, trying to start the service still results in the same error. I even tried starting the service while logged into the Xcode Server user account. Each time it failed with the same message.

Each time I attempt to start the service, I see this (or very similar) sequence of messages hit the system log:

Sep 20 15:50:36 server servermgr_xcode[867]: getSetXcodePathProgressWithRequest: {

command = getSetXcodePathProgress;

currentPercentageCompleteRangeMaximum = 10;

currentPercentageCompleteRangeMinimum = 10;

currentStep = "Stopping Xcode Server";

percentComplete = 10;

status = RUNNING;

}

Sep 20 15:50:37 server servermgr_xcode[867]: Task completed (status 0)

Sep 20 15:50:37 server servermgr_xcode[867]: Task stderr result:

*** (4/ 6) [START] Stopping nginx daemon

*** (3/ 6) [START] Stopping API server

*** (1/ 6) [START] Stopping CouchDB

*** (6/ 6) [START] Stopping builder

*** (5/ 6) [START] Stopping control daemon

*** (2/ 6) [START] Stopping Redis

(5/ 6) [END - 0.05s] Stopping control daemon

(1/ 6) [END - 0.05s] Stopping CouchDB

(2/ 6) [END - 0.05s] Stopping Redis

(3/ 6) [END - 0.05s] Stopping API server

(4/ 6) [END - 0.14s] Stopping nginx daemon

(6/ 6) [END - 0.16s] Stopping builder

Succeeded!

Total time: 0.32 seconds

Sep 20 15:50:37 server servermgr_xcode[867]: Launching /usr/bin/xcrun xcscontrol --initialize --build-service-user xcodeserver

Sep 20 15:50:37 server servermgr_xcode[867]: Waiting on task to exit

Sep 20 15:50:37 server lsd[961]: LaunchServices: Could not store lsd-identifiers file at /private/var/db/lsd/com.apple.lsdschemes.plist

Sep 20 15:50:37 server servermgr_xcode[867]: xcscontrol reported progress: (1/29) Verifying that Xcode is accessible

Sep 20 15:50:37 server sudo[1422]: root : TTY=unknown ; PWD=/ ; USER=nobody ; COMMAND=/usr/bin/file /Applications/Xcode.app/Contents/Developer

Sep 20 15:50:37 server servermgr_xcode[867]: xcscontrol reported progress: (1/29) Verifying that Xcode is accessible

Sep 20 15:50:37 server servermgr_xcode[867]: xcscontrol reported progress: (4/29) Running xcode-select --switch for /Applications/Xcode.app

Sep 20 15:50:38 server servermgr_xcode[867]: xcscontrol reported progress: (9/29) Preparing control integrations

Sep 20 15:50:38 server servermgr_xcode[867]: xcscontrol reported progress: (11/29) Setting up the config file for Redis

Sep 20 15:50:38 server servermgr_xcode[867]: xcscontrol reported progress: (12/29) Setting up the config file for CouchDB

Sep 20 15:50:38 server servermgr_xcode[867]: xcscontrol reported progress: (13/29) Configuring system launchd jobs

Sep 20 15:50:38 server servermgr_xcode[867]: xcscontrol reported progress: (14/29) Creating group for service users if necessary

Note: There were a bunch of messages like this that I've omitted:

Sep 20 15:50:38 server syslogd[69]: Configuration Notice:

ASL Module "com.apple.AccountPolicyHelper" claims selected messages.

Those messages may not appear in standard system log files or in the ASL database.

Sep 20 15:50:38 server servermgr_xcode[867]: xcscontrol reported progress: (16/29) Configuring logging

Sep 20 15:50:38 server servermgr_xcode[867]: xcscontrol reported progress: (17/29) Creating service users if necessary

Sep 20 15:50:38 server servermgr_xcode[867]: xcscontrol reported progress: (18/29) Configuring SSL infrastructure

Sep 20 15:50:39 server servermgr_xcode[867]: getSetXcodePathProgressWithRequest: {

command = getSetXcodePathProgress;

currentPercentageCompleteRangeMaximum = 75;

currentPercentageCompleteRangeMinimum = 20;

currentStep = "Configuring SSL infrastructure";

percentComplete = 54;

status = RUNNING;

}

Sep 20 15:50:41 server com.apple.SecurityServer[114]: displaying keychain prompt for /Applications/Xcode.app/Contents/Developer/usr/bin/xcscontrol(1421)

Sep 20 15:50:41 server servermgr_xcode[867]: xcscontrol reported progress: (18/29) FAILED: Configuring SSL infrastructure

Sep 20 15:50:41 server servermgr_xcode[867]: Task completed (status 5)

Sep 20 15:50:41 server servermgr_xcode[867]: Task stderr result:

*** (1/29) [START] Verifying that Xcode is accessible

(1/29) [END - 0.20s] Verifying that Xcode is accessible

*** (2/29) [START] Checking if Xcode version is supported

(2/29) [END - 0.00s] Checking if Xcode version is supported

*** (5/29) [START] Enabling developer mode if required

*** (4/29) [START] Running xcode-select --switch for /Applications/Xcode.app

*** (3/29) [START] Checking if Server version is supported

(3/29) [END - 0.02s] Checking if Server version is supported

*** (6/29) [START] Creating default data directories (if they are missing)

(6/29) [END - 0.00s] Creating default data directories (if they are missing)

*** (7/29) [START] Creating a symlink to the current Xcode application path

*** (8/29) [START] Configuring HTTP repository access

*** (9/29) [START] Preparing control integrations

*** (10/29) [START] Configuring SSH repository access

(8/29) [END - 0.12s] Configuring HTTP repository access

(7/29) [END - 0.12s] Creating a symlink to the current Xcode application path

(10/29) [END - 0.12s] Configuring SSH repository access

*** (11/29) [START] Setting up the config file for Redis

*** (12/29) [START] Setting up the config file for CouchDB

*** (13/29) [START] Configuring system launchd jobs

(5/29) [END - 0.16s] Enabling developer mode if required

(9/29) [END - 0.23s] Preparing control integrations

(11/29) [END - 0.16s] Setting up the config file for Redis

(12/29) [END - 0.20s] Setting up the config file for CouchDB

(13/29) [END - 0.20s] Configuring system launchd jobs

*** (14/29) [START] Creating group for service users if necessary

*** (16/29) [START] Configuring logging

*** (15/29) [START] Configuring CouchDB to use all cores

(14/29) [END - 0.02s] Creating group for service users if necessary

*** (17/29) [START] Creating service users if necessary

(4/29) [END - 0.41s] Running xcode-select --switch for /Applications/Xcode.app

(15/29) [END - 0.08s] Configuring CouchDB to use all cores

(16/29) [END - 0.33s] Configuring logging

(17/29) [END - 0.52s] Creating service users if necessary

*** (18/29) [START] Configuring SSL infrastructure

(18/29) [END - 3.03s] FAILED: Configuring SSL infrastructure

Failed: Could not export API server SSL certificate: Error Domain=Security Code=-25308 "User interaction is not allowed." UserInfo={NSLocalizedDescription=User interaction is not allowed.}

Total time: 4.13 seconds

Error initializing service: Could not export API server SSL certificate: Error Domain=Security Code=-25308 "User interaction is not allowed." UserInfo={NSLocalizedDescription=User interaction is not allowed.}

Sep 20 15:50:41 server servermgr_xcode[867]: response: {

error = "Xcode Server setup failed (configuring ssl infrastructure)";

errorCode = "-1";

errorDomain = ServermgrXcodeErrorDomain;

errorLocalizedDescription = "Xcode Server setup failed (configuring ssl infrastructure)";

errorLocalizedFailureReason = "Service setup failed at step: configuring ssl infrastructure";

errorLocalizedRecoverySuggestion = "Try clicking Choose Xcode and selecting a newer version of Xcode or upgrading to a newer version of Server.";

errorString = "Xcode Server setup failed (configuring ssl infrastructure)";

status = 1;

}

Sep 20 15:50:41 server com.apple.xpc.launchd[1] (com.apple.dt.XCSDeviceService[1417]): Service did not exit 5 seconds after SIGTERM. Sending SIGKILL.

Sep 20 15:50:42 server servermgr_xcode[867]: getSetXcodePathProgressWithRequest: {

command = getSetXcodePathProgress;

currentPercentageCompleteRangeMaximum = 75;

currentPercentageCompleteRangeMinimum = 20;

currentStep = "FAILED: Configuring SSL infrastructure";

error = "Xcode Server setup failed (configuring ssl infrastructure)";

errorCode = "-1";

errorDomain = ServermgrXcodeErrorDomain;

errorLocalizedDescription = "Xcode Server setup failed (configuring ssl infrastructure)";

errorLocalizedFailureReason = "Service setup failed at step: configuring ssl infrastructure";

errorLocalizedRecoverySuggestion = "Try clicking Choose Xcode and selecting a newer version of Xcode or upgrading to a newer version of Server.";

errorString = "Xcode Server setup failed (configuring ssl infrastructure)";

percentComplete = 54;

status = FAILED;

}

This entry is interesting:

Sep 20 15:50:41 server com.apple.SecurityServer[114]: displaying keychain prompt for /Applications/Xcode.app/Contents/Developer/usr/bin/xcscontrol(1421)

No prompt was displayed at this time. Was I supposed to see an actual keychain prompt? Anyhow, this entry seems to be the cause of the problem:

Failed: Could not export API server SSL certificate: Error Domain=Security Code=-25308 "User interaction is not allowed." UserInfo={NSLocalizedDescription=User interaction is not allowed.}

Any help with getting the Xcode service back up and running would be much appreciated!