App Store fails to find updates with error code NSURLErrorDomain error -1012

Question

Level 1

12 points

App Store fails to find updates with error code NSURLErrorDomain error -1012

After upgrading from macOS 10.12 to macOS 10.13.1 (High Sierra), I get the error NSURLErrorDomain error -1012 when trying to update using "App Store".

Running software update from command line using sudo softwareupdate -l brings the same error:

The operation couldn’t be completed. (NSURLErrorDomain error -1012.)

Now looking at /var/log/install.log, I get the following errors related to a problem with the certificate from host swdist.apple.com and I can't find a way to solve this problem. Looking at the certificates in "Keychain Access", everything appears correct with default settings. I even tried to add the certificates from swdist.apple.com into Keychain but I keep getting the same errors. Any idea?

2017-11-14 21:59:33+01 gougnies softwareupdated[568]: Adding client SUUpdateServiceClient pid=98499, uid=0, installAuth=NO rights=(), transactions=0 (/usr/sbin/softwareupdate)

2017-11-14 21:59:33+01 gougnies softwareupdated[568]: SUScan: Scan for client pid 568 (/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated)

2017-11-14 21:59:34+01 gougnies softwareupdated[568]: Got status 200

2017-11-14 21:59:34+01 gougnies softwareupdated[568]: SUScan: Using catalog https://swscan.apple.com/content/catalogs/others/index-10.13beta-10.13-10.12-10. 11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog.gz

2017-11-14 21:59:35+01 gougnies softwareupdated[568]: Failed Software Update - Refusing invalid certificate from host: swdist.apple.com

2017-11-14 21:59:35+01 gougnies softwareupdated[568]: Product 091-16064 did not load successfully. Error Error Domain=NSURLErrorDomain Code=-1012 "(null)" UserInfo={NSErrorFailingURLStringKey=https://swdist.apple.com/content/downloads/53/53/091-16064/msgypzko1txpw90pyj6eq b4uf6ncak8igd/091-16064.English.dist, NSErrorFailingURLKey=https://swdist.apple.com/content/downloads/53/53/091-16064/msgypzko1txpw90pyj6eq b4uf6ncak8igd/091-16064.English.dist}

MacBook Pro (Retina, 15-inch, Mid 2014), macOS High Sierra (10.13.1)

Posted on Nov 14, 2017 1:10 PM

Reply

Answer 1

Mar 13, 2018 10:33 AM in response to casiez

I spend 2 or 3 days on this issue...turns out i had a proxy set in safari that was blocking updates and causing this error...after i turned off my proxy, the issue was resolved.

Reply

Answer 2

Feb 5, 2018 3:03 PM in response to casiez

Have a look at the host file and check that you don't have any entries in there blocking akamaiedge.net servers. Apple uses akamaiedge to deliver software updates. If you spot any entries in your hosts file referencing akamaiedge - try deleting them, save your hosts file and then try to update via the app store.

Reply

Answer 3

Maccy10

Level 1

29 points

Feb 6, 2018 1:27 AM in response to casiez

I think I have seen this error in the past when my system clock has not been set to the correct time, or time zone.

I wonder if the issue can be reproduced in the latest 10.13.3 update though?

Reply

Answer 4

casiez Author

Level 1

12 points

Mar 5, 2018 2:32 PM in response to Maccy10

Over the last months I manually updated to 10.13.1 and 10.13.2 and then problem disappeared with 10.13.3 : App Store told me 10.13.3 was available and I could update. No idea if something changed on my computer or if Apple did something with their certificates.

Reply

Answer 5

ed_Andy

Level 1

4 points

Feb 5, 2018 10:04 PM in response to adrianfromsammamish

Hey all,

after changing the update URI from https://swscan.... to http:// it works.

Not perfect because this potentially allows Man in the middle. But bettet then an non - updated device.

Reply

Answer 6

casiez Author

Level 1

12 points

Nov 14, 2017 1:28 PM in response to Kappy

One important precision: the above commands work fine on another computer also upgraded from 10.12 to 10.13 and on the same network as mine so it appears there is definitely a problem with the configuration of my computer.

Reply

Answer 7

casiez Author

Level 1

12 points

Nov 15, 2017 10:36 AM in response to casiez

I re-installed 10.13.1 High Sierra Update but it did not solve the problem.

I also tried, without success:

reset AppStore cache following these instructions
removed all expired certificates in Keychain after showing them (Views > Show expired certificates in Keychain)
followed this Apple tutorial and cleared caches in /var/db/crls/

Note that copying one of the links AppStore tries to download (these links are visible in /var/log/install.log) works fine in Safari or any other browser. It works also using wget in a terminal.

Reply

Answer 8

ed_Andy

Level 1

4 points

Jan 9, 2018 11:22 AM in response to casiez

Hey,

i also have exact the same problem. I have migrated my macbook in the last years several times to the most current version. I have installed the last software updates manually.

I see the same errors in /var/log/install.log

2018-01-09 20:13:16+01 nDsBooks-MacBook-Pro softwareupdated[457]: Failed Software Update - Refusing invalid certificate from host: swscan.apple.com

2018-01-09 20:13:16+01 nDsBooks-MacBook-Pro softwareupdated[457]: SUScan: Elapsed scan time = 0.2

2018-01-09 20:13:16+01 nDsBooks-MacBook-Pro softwareupdated[457]: SUScan: Error encountered in scan: Error Domain=NSURLErrorDomain Code=-1012 "(null)" UserInfo={NSErrorFailingURLStringKey=https://swscan.apple.com/content/catalogs/others/index-10.13-10.12-10.11-10.10-1 0.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog, ......

i also tried manually connecting to swscan.apple.com with openssl... everything looks good.

nDsBooks-MacBook-Pro:~ Andy$ openssl s_client -connect swscan.apple.com:443

CONNECTED(00000005)

depth=1 C = US, O = Symantec Corporation, OU = Symantec Trust Network, CN = Symantec Class 3 EV SSL CA - G3

verify error:num=20:unable to get local issuer certificate

verify return:0

---

Certificate chain

0 s:/1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=California/businessCate gory=Private Organization/serialNumber=C0806592/C=US/postalCode=95014/ST=California/L=Cupert ino/street=1 Infinite Loop/O=Apple Inc./OU=ISG for Akamai/CN=swdist.apple.com

i:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 EV SSL CA - G3

1 s:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 EV SSL CA - G3

---

Server certificate

-----BEGIN CERTIFICATE-----

<<<CUT>>>

-----END CERTIFICATE-----

subject=/1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=California/busines sCategory=Private Organization/serialNumber=C0806592/C=US/postalCode=95014/ST=California/L=Cupert ino/street=1 Infinite Loop/O=Apple Inc./OU=ISG for Akamai/CN=swdist.apple.com

issuer=/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 EV SSL CA - G3

---

No client certificate CA names sent

---

SSL handshake has read 3837 bytes and written 444 bytes

---

New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384

Server public key is 2048 bit

Secure Renegotiation IS supported

Compression: NONE

Expansion: NONE

No ALPN negotiated

SSL-Session:

Protocol : TLSv1.2

Cipher : ECDHE-RSA-AES256-GCM-SHA384

Session-ID: <<<CUT>>>

Session-ID-ctx:

Master-Key: <<<CUT>>>

TLS session ticket lifetime hint: 7200 (seconds)

TLS session ticket:

<<<CUT>>>

Start Time: 1515525693

Timeout : 300 (sec)

Verify return code: 0 (ok)

Any help?

Reply

Answer 9

Jan 12, 2018 3:14 PM in response to casiez

I'm having same/similar problem after upgrading to High Sierra

2018-01-12 15:03:37-08 myuser-mbp-3 softwareupdated[408]: Adding client SUUpdateServiceClient pid=84736, uid=0, installAuth=NO rights=(), transactions=0 (/usr/sbin/softwareupdate)
2018-01-12 15:03:37-08 myuser-mbp-3 softwareupdated[408]: SUScan: Scan for client pid 408 (/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated)
2018-01-12 15:03:38-08 myuser-mbp-3 softwareupdated[408]: SoftwareUpdate: Catalog Not Modified since last scan ("37e0c9-5624d766d375f;520010bb1c751")
2018-01-12 15:03:38-08 myuser-mbp-3 softwareupdated[408]: SUScan: Using catalog https://subdom.thecompany.com/reposado/index_release.sucatalog
2018-01-12 15:03:38-08 myuser-mbp-3 softwareupdated[408]: Added 662 PPD versions for /Library/Printers/PPDs/Contents/Resources from cache as of 2018-01-11 18:04:56 +0000
2018-01-12 15:03:48-08 myuser-mbp-3 softwareupdated[408]: JS: No bundle at/Applications/SafeView.app
2018-01-12 15:03:49-08 myuser-mbp-3 softwareupdated[408]: JS: 10.13.2
2018-01-12 15:03:49-08 myuser-mbp-3 softwareupdated[408]: JS: my.target.isDisallowedForCoreStorageOperations = false
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: JS: my.target.isDisallowedForCoreStorageOperations = false
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: JS: my.target.isDisallowedForCoreStorageOperations = false
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: Product 091-56397 did not load successfully.  Error Error Domain=NSURLErrorDomain Code=-1100 "(null)" UserInfo={PKURLErrorResponseHeaders=<CFBasicHash 0x7f89587d0810 [0x7fffae558980]>{type = immutable dict, count = 5,
        entries =>
                0 : Date = <CFString 0x7f8950778b80 [0x7fffae558980]>{contents = "Fri, 12 Jan 2018 23:03:38 GMT"}
                3 : Content-Length = 474
                4 : Connection = <CFString 0x7fffae4aabf8 [0x7fffae558980]>{contents = "keep-alive"}
                5 : Content-Type = <CFString 0x7f89507655f0 [0x7fffae558980]>{contents = "text/html; charset=iso-8859-1"}
                6 : Server = Apache
        }
        , PKURLErrorStatusCode=404, NSErrorFailingURLStringKey=https://swdist.apple.com/content/downloads/35/19/091-56397/p93li09ftzv6yo79s75xm1yy4dqxhml8uu/091-56397.English.dist}
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: Product 091-56402 did not load successfully.  Error Error Domain=NSURLErrorDomain Code=-1100 "(null)" UserInfo={PKURLErrorResponseHeaders=<CFBasicHash 0x7f89523acca0 [0x7fffae558980]>{type = immutable dict, count = 5,
        entries =>
                0 : Date = <CFString 0x7f8958751350 [0x7fffae558980]>{contents = "Fri, 12 Jan 2018 23:03:38 GMT"}
                3 : Content-Length = 474
                4 : Connection = <CFString 0x7fffae4aabf8 [0x7fffae558980]>{contents = "keep-alive"}
                5 : Content-Type = <CFString 0x7f89521f47a0 [0x7fffae558980]>{contents = "text/html; charset=iso-8859-1"}
                6 : Server = Apache
        }
        , PKURLErrorStatusCode=404, NSErrorFailingURLStringKey=https://swdist.apple.com/content/downloads/55/61/091-56402/ana64pofsjlhre4lzxx8dzj07osqchc818/091-56402.English.dist}
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: SUScan: One or more scan resources not loaded successfully; will not reset success date
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: SUScan: Elapsed scan time = 14.8
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: SUScan: Error encountered in scan: Error Domain=NSURLErrorDomain Code=-1100 "(null)" UserInfo={PKURLErrorResponseHeaders=<CFBasicHash 0x7f89587d0810 [0x7fffae558980]>{type = immutable dict, count = 5,
        entries =>
                0 : Date = <CFString 0x7f8950778b80 [0x7fffae558980]>{contents = "Fri, 12 Jan 2018 23:03:38 GMT"}
                3 : Content-Length = 474
                4 : Connection = <CFString 0x7fffae4aabf8 [0x7fffae558980]>{contents = "keep-alive"}
                5 : Content-Type = <CFString 0x7f89507655f0 [0x7fffae558980]>{contents = "text/html; charset=iso-8859-1"}
                6 : Server = Apache
        }
        , PKURLErrorStatusCode=404, NSErrorFailingURLStringKey=https://swdist.apple.com/content/downloads/35/19/091-56397/p93li09ftzv6yo79s75xm1yy4dqxhml8uu/091-56397.English.dist}
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: Scan got error The operation couldn‚Äôt be completed. (NSURLErrorDomain error -1100.)
2018-01-12 15:03:52-08 myuser-mbp-3 softwareupdated[408]: Removing client SUUpdateServiceClient pid=84736, uid=0, installAuth=NO rights=(), transactions=0 (/usr/sbin/softwareupdate)

Reply

Answer 10

Kappy

Level 10

362,007 points

Nov 14, 2017 7:28 PM in response to casiez

Correct, but I have no idea what that might be. You could have a corrupted installation of OS X. I would suggest opening Users & Groups and create a new Admin user account. Log out, reboot, log in to the new account. See if you experience the same error. I would also suggest that you Download and (Re)Install 10.13.1 High Sierra Update.

Reply

Answer 11

casiez Author

Level 1

12 points

Nov 15, 2017 1:03 AM in response to Kappy

Thank you for the suggestions. I created a new admin account but I keep getting the same error on that account so this is not a problem specific to my account.

I did not try to re-install 10.13.1 but the file I downloaded successfully updated another machine and I would like to try other solutions first.

There is something to do with the certificates but I can't figure out what.

Reply

Answer 12

Kappy

Level 10

362,007 points

Nov 14, 2017 1:16 PM in response to casiez

Just tried it. It is working OK here.

Reply