Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

App Store fails to find updates with error code NSURLErrorDomain error -1012

After upgrading from macOS 10.12 to macOS 10.13.1 (High Sierra), I get the error NSURLErrorDomain error -1012 when trying to update using "App Store".


Running software update from command line using sudo softwareupdate -l brings the same error:


The operation couldn’t be completed. (NSURLErrorDomain error -1012.)


Now looking at /var/log/install.log, I get the following errors related to a problem with the certificate from host swdist.apple.com and I can't find a way to solve this problem. Looking at the certificates in "Keychain Access", everything appears correct with default settings. I even tried to add the certificates from swdist.apple.com into Keychain but I keep getting the same errors. Any idea?


2017-11-14 21:59:33+01 gougnies softwareupdated[568]: Adding client SUUpdateServiceClient pid=98499, uid=0, installAuth=NO rights=(), transactions=0 (/usr/sbin/softwareupdate)

2017-11-14 21:59:33+01 gougnies softwareupdated[568]: SUScan: Scan for client pid 568 (/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated)

2017-11-14 21:59:34+01 gougnies softwareupdated[568]: Got status 200

2017-11-14 21:59:34+01 gougnies softwareupdated[568]: SUScan: Using catalog https://swscan.apple.com/content/catalogs/others/index-10.13beta-10.13-10.12-10. 11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog.gz

2017-11-14 21:59:35+01 gougnies softwareupdated[568]: Failed Software Update - Refusing invalid certificate from host: swdist.apple.com

2017-11-14 21:59:35+01 gougnies softwareupdated[568]: Product 091-16064 did not load successfully. Error Error Domain=NSURLErrorDomain Code=-1012 "(null)" UserInfo={NSErrorFailingURLStringKey=https://swdist.apple.com/content/downloads/53/53/091-16064/msgypzko1txpw90pyj6eq b4uf6ncak8igd/091-16064.English.dist, NSErrorFailingURLKey=https://swdist.apple.com/content/downloads/53/53/091-16064/msgypzko1txpw90pyj6eq b4uf6ncak8igd/091-16064.English.dist}

MacBook Pro (Retina, 15-inch, Mid 2014), macOS High Sierra (10.13.1)

Posted on Nov 14, 2017 1:10 PM

Reply
12 replies

Nov 15, 2017 10:36 AM in response to casiez

I re-installed 10.13.1 High Sierra Update but it did not solve the problem.


I also tried, without success:

  • reset AppStore cache following these instructions
  • removed all expired certificates in Keychain after showing them (Views > Show expired certificates in Keychain)
  • followed this Apple tutorial and cleared caches in /var/db/crls/


Note that copying one of the links AppStore tries to download (these links are visible in /var/log/install.log) works fine in Safari or any other browser. It works also using wget in a terminal.

Jan 9, 2018 11:22 AM in response to casiez

Hey,


i also have exact the same problem. I have migrated my macbook in the last years several times to the most current version. I have installed the last software updates manually.


I see the same errors in /var/log/install.log


2018-01-09 20:13:16+01 nDsBooks-MacBook-Pro softwareupdated[457]: Failed Software Update - Refusing invalid certificate from host: swscan.apple.com

2018-01-09 20:13:16+01 nDsBooks-MacBook-Pro softwareupdated[457]: SUScan: Elapsed scan time = 0.2

2018-01-09 20:13:16+01 nDsBooks-MacBook-Pro softwareupdated[457]: SUScan: Error encountered in scan: Error Domain=NSURLErrorDomain Code=-1012 "(null)" UserInfo={NSErrorFailingURLStringKey=https://swscan.apple.com/content/catalogs/others/index-10.13-10.12-10.11-10.10-1 0.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog, ......


i also tried manually connecting to swscan.apple.com with openssl... everything looks good.


nDsBooks-MacBook-Pro:~ Andy$ openssl s_client -connect swscan.apple.com:443

CONNECTED(00000005)

depth=1 C = US, O = Symantec Corporation, OU = Symantec Trust Network, CN = Symantec Class 3 EV SSL CA - G3

verify error:num=20:unable to get local issuer certificate

verify return:0

---

Certificate chain

0 s:/1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=California/businessCate gory=Private Organization/serialNumber=C0806592/C=US/postalCode=95014/ST=California/L=Cupert ino/street=1 Infinite Loop/O=Apple Inc./OU=ISG for Akamai/CN=swdist.apple.com

i:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 EV SSL CA - G3

1 s:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 EV SSL CA - G3

i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5

---

Server certificate

-----BEGIN CERTIFICATE-----

<<<CUT>>>

<<<CUT>>>

<<<CUT>>>

-----END CERTIFICATE-----

subject=/1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=California/busines sCategory=Private Organization/serialNumber=C0806592/C=US/postalCode=95014/ST=California/L=Cupert ino/street=1 Infinite Loop/O=Apple Inc./OU=ISG for Akamai/CN=swdist.apple.com

issuer=/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 EV SSL CA - G3

---

No client certificate CA names sent

---

SSL handshake has read 3837 bytes and written 444 bytes

---

New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384

Server public key is 2048 bit

Secure Renegotiation IS supported

Compression: NONE

Expansion: NONE

No ALPN negotiated

SSL-Session:

Protocol : TLSv1.2

Cipher : ECDHE-RSA-AES256-GCM-SHA384

Session-ID: <<<CUT>>>

Session-ID-ctx:

Master-Key: <<<CUT>>>

TLS session ticket lifetime hint: 7200 (seconds)

TLS session ticket:

<<<CUT>>>

Start Time: 1515525693

Timeout : 300 (sec)

Verify return code: 0 (ok)


Any help?

Nov 15, 2017 1:03 AM in response to Kappy

Thank you for the suggestions. I created a new admin account but I keep getting the same error on that account so this is not a problem specific to my account.


I did not try to re-install 10.13.1 but the file I downloaded successfully updated another machine and I would like to try other solutions first.


There is something to do with the certificates but I can't figure out what.

Jan 12, 2018 3:14 PM in response to casiez

I'm having same/similar problem after upgrading to High Sierra

2018-01-12 15:03:37-08 myuser-mbp-3 softwareupdated[408]: Adding client SUUpdateServiceClient pid=84736, uid=0, installAuth=NO rights=(), transactions=0 (/usr/sbin/softwareupdate)
2018-01-12 15:03:37-08 myuser-mbp-3 softwareupdated[408]: SUScan: Scan for client pid 408 (/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated)
2018-01-12 15:03:38-08 myuser-mbp-3 softwareupdated[408]: SoftwareUpdate: Catalog Not Modified since last scan ("37e0c9-5624d766d375f;520010bb1c751")
2018-01-12 15:03:38-08 myuser-mbp-3 softwareupdated[408]: SUScan: Using catalog https://subdom.thecompany.com/reposado/index_release.sucatalog
2018-01-12 15:03:38-08 myuser-mbp-3 softwareupdated[408]: Added 662 PPD versions for /Library/Printers/PPDs/Contents/Resources from cache as of 2018-01-11 18:04:56 +0000
2018-01-12 15:03:48-08 myuser-mbp-3 softwareupdated[408]: JS: No bundle at/Applications/SafeView.app
2018-01-12 15:03:49-08 myuser-mbp-3 softwareupdated[408]: JS: 10.13.2
2018-01-12 15:03:49-08 myuser-mbp-3 softwareupdated[408]: JS: my.target.isDisallowedForCoreStorageOperations = false
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: JS: my.target.isDisallowedForCoreStorageOperations = false
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: JS: my.target.isDisallowedForCoreStorageOperations = false
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: Product 091-56397 did not load successfully.  Error Error Domain=NSURLErrorDomain Code=-1100 "(null)" UserInfo={PKURLErrorResponseHeaders=<CFBasicHash 0x7f89587d0810 [0x7fffae558980]>{type = immutable dict, count = 5,
        entries =>
                0 : Date = <CFString 0x7f8950778b80 [0x7fffae558980]>{contents = "Fri, 12 Jan 2018 23:03:38 GMT"}
                3 : Content-Length = 474
                4 : Connection = <CFString 0x7fffae4aabf8 [0x7fffae558980]>{contents = "keep-alive"}
                5 : Content-Type = <CFString 0x7f89507655f0 [0x7fffae558980]>{contents = "text/html; charset=iso-8859-1"}
                6 : Server = Apache
        }
        , PKURLErrorStatusCode=404, NSErrorFailingURLStringKey=https://swdist.apple.com/content/downloads/35/19/091-56397/p93li09ftzv6yo79s75xm1yy4dqxhml8uu/091-56397.English.dist}
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: Product 091-56402 did not load successfully.  Error Error Domain=NSURLErrorDomain Code=-1100 "(null)" UserInfo={PKURLErrorResponseHeaders=<CFBasicHash 0x7f89523acca0 [0x7fffae558980]>{type = immutable dict, count = 5,
        entries =>
                0 : Date = <CFString 0x7f8958751350 [0x7fffae558980]>{contents = "Fri, 12 Jan 2018 23:03:38 GMT"}
                3 : Content-Length = 474
                4 : Connection = <CFString 0x7fffae4aabf8 [0x7fffae558980]>{contents = "keep-alive"}
                5 : Content-Type = <CFString 0x7f89521f47a0 [0x7fffae558980]>{contents = "text/html; charset=iso-8859-1"}
                6 : Server = Apache
        }
        , PKURLErrorStatusCode=404, NSErrorFailingURLStringKey=https://swdist.apple.com/content/downloads/55/61/091-56402/ana64pofsjlhre4lzxx8dzj07osqchc818/091-56402.English.dist}
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: SUScan: One or more scan resources not loaded successfully; will not reset success date
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: SUScan: Elapsed scan time = 14.8
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: SUScan: Error encountered in scan: Error Domain=NSURLErrorDomain Code=-1100 "(null)" UserInfo={PKURLErrorResponseHeaders=<CFBasicHash 0x7f89587d0810 [0x7fffae558980]>{type = immutable dict, count = 5,
        entries =>
                0 : Date = <CFString 0x7f8950778b80 [0x7fffae558980]>{contents = "Fri, 12 Jan 2018 23:03:38 GMT"}
                3 : Content-Length = 474
                4 : Connection = <CFString 0x7fffae4aabf8 [0x7fffae558980]>{contents = "keep-alive"}
                5 : Content-Type = <CFString 0x7f89507655f0 [0x7fffae558980]>{contents = "text/html; charset=iso-8859-1"}
                6 : Server = Apache
        }
        , PKURLErrorStatusCode=404, NSErrorFailingURLStringKey=https://swdist.apple.com/content/downloads/35/19/091-56397/p93li09ftzv6yo79s75xm1yy4dqxhml8uu/091-56397.English.dist}
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: Scan got error The operation couldn’t be completed. (NSURLErrorDomain error -1100.)
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: Removing client SUUpdateServiceClient pid=84736, uid=0, installAuth=NO rights=(), transactions=0 (/usr/sbin/softwareupdate)

App Store fails to find updates with error code NSURLErrorDomain error -1012

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.