Announcement: Upgrade to macOS Mojave

With features like Dark Mode, Stacks, and four new built-in apps, macOS Mojave helps you get more out of every click. 
Find out how to upgrade to macOS Mojave > https://support.apple.com/macos/mojave

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Question:

Question: App Store fails to find updates with error code NSURLErrorDomain error -1012

After upgrading from macOS 10.12 to macOS 10.13.1 (High Sierra), I get the error NSURLErrorDomain error -1012 when trying to update using "App Store".


Running software update from command line using sudo softwareupdate -l brings the same error:


The operation couldn’t be completed. (NSURLErrorDomain error -1012.)


Now looking at /var/log/install.log, I get the following errors related to a problem with the certificate from host swdist.apple.com and I can't find a way to solve this problem. Looking at the certificates in "Keychain Access", everything appears correct with default settings. I even tried to add the certificates from swdist.apple.com into Keychain but I keep getting the same errors. Any idea?


2017-11-14 21:59:33+01 gougnies softwareupdated[568]: Adding client SUUpdateServiceClient pid=98499, uid=0, installAuth=NO rights=(), transactions=0 (/usr/sbin/softwareupdate)

2017-11-14 21:59:33+01 gougnies softwareupdated[568]: SUScan: Scan for client pid 568 (/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated)

2017-11-14 21:59:34+01 gougnies softwareupdated[568]: Got status 200

2017-11-14 21:59:34+01 gougnies softwareupdated[568]: SUScan: Using catalog https://swscan.apple.com/content/catalogs/others/index-10.13beta-10.13-10.12-10. 11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog.gz

2017-11-14 21:59:35+01 gougnies softwareupdated[568]: Failed Software Update - Refusing invalid certificate from host: swdist.apple.com

2017-11-14 21:59:35+01 gougnies softwareupdated[568]: Product 091-16064 did not load successfully. Error Error Domain=NSURLErrorDomain Code=-1012 "(null)" UserInfo={NSErrorFailingURLStringKey=https://swdist.apple.com/content/downloads/53/53/091-16064/msgypzko1txpw90pyj6eq b4uf6ncak8igd/091-16064.English.dist, NSErrorFailingURLKey=https://swdist.apple.com/content/downloads/53/53/091-16064/msgypzko1txpw90pyj6eq b4uf6ncak8igd/091-16064.English.dist}

MacBook Pro (Retina, 15-inch, Mid 2014), macOS High Sierra (10.13.1)

Posted on

Reply
Question marked as Solved
Answer:
Answer:

Over the last months I manually updated to 10.13.1 and 10.13.2 and then problem disappeared with 10.13.3 : App Store told me 10.13.3 was available and I could update. No idea if something changed on my computer or if Apple did something with their certificates.

Posted on

There’s more to the conversation

Read all replies

Nov 14, 2017 7:28 PM in response to casiez In response to casiez

Correct, but I have no idea what that might be. You could have a corrupted installation of OS X. I would suggest opening Users & Groups and create a new Admin user account. Log out, reboot, log in to the new account. See if you experience the same error. I would also suggest that you Download and (Re)Install 10.13.1 High Sierra Update.

Nov 14, 2017 7:28 PM

Reply Helpful

Nov 15, 2017 1:03 AM in response to Kappy In response to Kappy

Thank you for the suggestions. I created a new admin account but I keep getting the same error on that account so this is not a problem specific to my account.


I did not try to re-install 10.13.1 but the file I downloaded successfully updated another machine and I would like to try other solutions first.


There is something to do with the certificates but I can't figure out what.

Nov 15, 2017 1:03 AM

Reply Helpful

Nov 15, 2017 10:36 AM in response to casiez In response to casiez

I re-installed 10.13.1 High Sierra Update but it did not solve the problem.


I also tried, without success:

  • reset AppStore cache following these instructions
  • removed all expired certificates in Keychain after showing them (Views > Show expired certificates in Keychain)
  • followed this Apple tutorial and cleared caches in /var/db/crls/


Note that copying one of the links AppStore tries to download (these links are visible in /var/log/install.log) works fine in Safari or any other browser. It works also using wget in a terminal.

Nov 15, 2017 10:36 AM

Reply Helpful

Jan 9, 2018 11:22 AM in response to casiez In response to casiez

Hey,


i also have exact the same problem. I have migrated my macbook in the last years several times to the most current version. I have installed the last software updates manually.


I see the same errors in /var/log/install.log


2018-01-09 20:13:16+01 nDsBooks-MacBook-Pro softwareupdated[457]: Failed Software Update - Refusing invalid certificate from host: swscan.apple.com

2018-01-09 20:13:16+01 nDsBooks-MacBook-Pro softwareupdated[457]: SUScan: Elapsed scan time = 0.2

2018-01-09 20:13:16+01 nDsBooks-MacBook-Pro softwareupdated[457]: SUScan: Error encountered in scan: Error Domain=NSURLErrorDomain Code=-1012 "(null)" UserInfo={NSErrorFailingURLStringKey=https://swscan.apple.com/content/catalogs/others/index-10.13-10.12-10.11-10.10-1 0.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog, ......


i also tried manually connecting to swscan.apple.com with openssl... everything looks good.


nDsBooks-MacBook-Pro:~ Andy$ openssl s_client -connect swscan.apple.com:443

CONNECTED(00000005)

depth=1 C = US, O = Symantec Corporation, OU = Symantec Trust Network, CN = Symantec Class 3 EV SSL CA - G3

verify error:num=20:unable to get local issuer certificate

verify return:0

---

Certificate chain

0 s:/1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=California/businessCate gory=Private Organization/serialNumber=C0806592/C=US/postalCode=95014/ST=California/L=Cupert ino/street=1 Infinite Loop/O=Apple Inc./OU=ISG for Akamai/CN=swdist.apple.com

i:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 EV SSL CA - G3

1 s:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 EV SSL CA - G3

i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5

---

Server certificate

-----BEGIN CERTIFICATE-----

<<<CUT>>>

<<<CUT>>>

<<<CUT>>>

-----END CERTIFICATE-----

subject=/1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=California/busines sCategory=Private Organization/serialNumber=C0806592/C=US/postalCode=95014/ST=California/L=Cupert ino/street=1 Infinite Loop/O=Apple Inc./OU=ISG for Akamai/CN=swdist.apple.com

issuer=/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 EV SSL CA - G3

---

No client certificate CA names sent

---

SSL handshake has read 3837 bytes and written 444 bytes

---

New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384

Server public key is 2048 bit

Secure Renegotiation IS supported

Compression: NONE

Expansion: NONE

No ALPN negotiated

SSL-Session:

Protocol : TLSv1.2

Cipher : ECDHE-RSA-AES256-GCM-SHA384

Session-ID: <<<CUT>>>

Session-ID-ctx:

Master-Key: <<<CUT>>>

TLS session ticket lifetime hint: 7200 (seconds)

TLS session ticket:

<<<CUT>>>

Start Time: 1515525693

Timeout : 300 (sec)

Verify return code: 0 (ok)


Any help?

Jan 9, 2018 11:22 AM

Reply Helpful

Jan 12, 2018 3:14 PM in response to casiez In response to casiez

I'm having same/similar problem after upgrading to High Sierra

2018-01-12 15:03:37-08 myuser-mbp-3 softwareupdated[408]: Adding client SUUpdateServiceClient pid=84736, uid=0, installAuth=NO rights=(), transactions=0 (/usr/sbin/softwareupdate)
2018-01-12 15:03:37-08 myuser-mbp-3 softwareupdated[408]: SUScan: Scan for client pid 408 (/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated)
2018-01-12 15:03:38-08 myuser-mbp-3 softwareupdated[408]: SoftwareUpdate: Catalog Not Modified since last scan ("37e0c9-5624d766d375f;520010bb1c751")
2018-01-12 15:03:38-08 myuser-mbp-3 softwareupdated[408]: SUScan: Using catalog https://subdom.thecompany.com/reposado/index_release.sucatalog
2018-01-12 15:03:38-08 myuser-mbp-3 softwareupdated[408]: Added 662 PPD versions for /Library/Printers/PPDs/Contents/Resources from cache as of 2018-01-11 18:04:56 +0000
2018-01-12 15:03:48-08 myuser-mbp-3 softwareupdated[408]: JS: No bundle at/Applications/SafeView.app
2018-01-12 15:03:49-08 myuser-mbp-3 softwareupdated[408]: JS: 10.13.2
2018-01-12 15:03:49-08 myuser-mbp-3 softwareupdated[408]: JS: my.target.isDisallowedForCoreStorageOperations = false
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: JS: my.target.isDisallowedForCoreStorageOperations = false
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: JS: my.target.isDisallowedForCoreStorageOperations = false
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: Product 091-56397 did not load successfully.  Error Error Domain=NSURLErrorDomain Code=-1100 "(null)" UserInfo={PKURLErrorResponseHeaders=<CFBasicHash 0x7f89587d0810 [0x7fffae558980]>{type = immutable dict, count = 5,
        entries =>
                0 : Date = <CFString 0x7f8950778b80 [0x7fffae558980]>{contents = "Fri, 12 Jan 2018 23:03:38 GMT"}
                3 : Content-Length = 474
                4 : Connection = <CFString 0x7fffae4aabf8 [0x7fffae558980]>{contents = "keep-alive"}
                5 : Content-Type = <CFString 0x7f89507655f0 [0x7fffae558980]>{contents = "text/html; charset=iso-8859-1"}
                6 : Server = Apache
        }
        , PKURLErrorStatusCode=404, NSErrorFailingURLStringKey=https://swdist.apple.com/content/downloads/35/19/091-56397/p93li09ftzv6yo79s75xm1yy4dqxhml8uu/091-56397.English.dist}
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: Product 091-56402 did not load successfully.  Error Error Domain=NSURLErrorDomain Code=-1100 "(null)" UserInfo={PKURLErrorResponseHeaders=<CFBasicHash 0x7f89523acca0 [0x7fffae558980]>{type = immutable dict, count = 5,
        entries =>
                0 : Date = <CFString 0x7f8958751350 [0x7fffae558980]>{contents = "Fri, 12 Jan 2018 23:03:38 GMT"}
                3 : Content-Length = 474
                4 : Connection = <CFString 0x7fffae4aabf8 [0x7fffae558980]>{contents = "keep-alive"}
                5 : Content-Type = <CFString 0x7f89521f47a0 [0x7fffae558980]>{contents = "text/html; charset=iso-8859-1"}
                6 : Server = Apache
        }
        , PKURLErrorStatusCode=404, NSErrorFailingURLStringKey=https://swdist.apple.com/content/downloads/55/61/091-56402/ana64pofsjlhre4lzxx8dzj07osqchc818/091-56402.English.dist}
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: SUScan: One or more scan resources not loaded successfully; will not reset success date
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: SUScan: Elapsed scan time = 14.8
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: SUScan: Error encountered in scan: Error Domain=NSURLErrorDomain Code=-1100 "(null)" UserInfo={PKURLErrorResponseHeaders=<CFBasicHash 0x7f89587d0810 [0x7fffae558980]>{type = immutable dict, count = 5,
        entries =>
                0 : Date = <CFString 0x7f8950778b80 [0x7fffae558980]>{contents = "Fri, 12 Jan 2018 23:03:38 GMT"}
                3 : Content-Length = 474
                4 : Connection = <CFString 0x7fffae4aabf8 [0x7fffae558980]>{contents = "keep-alive"}
                5 : Content-Type = <CFString 0x7f89507655f0 [0x7fffae558980]>{contents = "text/html; charset=iso-8859-1"}
                6 : Server = Apache
        }
        , PKURLErrorStatusCode=404, NSErrorFailingURLStringKey=https://swdist.apple.com/content/downloads/35/19/091-56397/p93li09ftzv6yo79s75xm1yy4dqxhml8uu/091-56397.English.dist}
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: Scan got error The operation couldn’t be completed. (NSURLErrorDomain error -1100.)
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: Removing client SUUpdateServiceClient pid=84736, uid=0, installAuth=NO rights=(), transactions=0 (/usr/sbin/softwareupdate)

Jan 12, 2018 3:14 PM

Reply Helpful

Feb 5, 2018 3:03 PM in response to casiez In response to casiez

Have a look at the host file and check that you don't have any entries in there blocking akamaiedge.net servers. Apple uses akamaiedge to deliver software updates. If you spot any entries in your hosts file referencing akamaiedge - try deleting them, save your hosts file and then try to update via the app store.

Feb 5, 2018 3:03 PM

Reply Helpful (1)
Question marked as Solved

Mar 5, 2018 2:32 PM in response to Maccy10 In response to Maccy10

Over the last months I manually updated to 10.13.1 and 10.13.2 and then problem disappeared with 10.13.3 : App Store told me 10.13.3 was available and I could update. No idea if something changed on my computer or if Apple did something with their certificates.

Mar 5, 2018 2:32 PM

Reply Helpful
User profile for user: casiez

Question: App Store fails to find updates with error code NSURLErrorDomain error -1012