Operation not permitted (connect failed)

[cyberduck]

74e3d70 created the issue

this is the massage i got when i try to connect however the I'm sure the connection is good with no problem.

"Operation not permitted (connect failed). The connection attempt was rejected. The server may be down, or your network may not be properly configured".

---

Attachments

• Screen Shot 2018-02-24 at 2.39.44 PM.png (172.6 KiB)

[cyberduck]

96a0c75 commented

All connections are failing after update to Version 6.4.1 (27633) on macOS High Sierra Version 10.13.3. I was using Cyberduck with no issues immediately prior to installing both the CyberDuck 6.4.1 update immediately followed by the macOS His Sierra Supplemental Update. After the required restart, Cyberduck will no longer connect to any of my servers using FTP. I have not tested SFTP.

Message received: "CONNECTION FAILED - Operation not permitted (connect failed). The connection attempt was rejected. The server may be down, or your network may not be properly configured. [Network Diagnostics] [Cancel] [Try Again]"

[cyberduck]

@dkocher commented

We can reproduce this issue – thanks for notifying us about this severe issue. It looks like the codesigning security entitlements are not properly applied by the Mac App Store download. We are in contact with Apple Developer Support to get a resolution as soon as possible.

[cyberduck]

@dkocher commented

Fucked up entitlements for downloaded bundle from Mac App Store.

codesign -d --entitlements - /Applications/Cyberduck.app/
Executable=/Applications/Cyberduck.app/Contents/MacOS/Cyberduck
??qq?<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<!DOCTYPE plist PUBLIC "_Apple_DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
	<dict>
		<key>com.apple.security.network.server</key>
		<true/>

		<key>com.apple.security.files.bookmarks.app-scope</key>
		<true/>

		<key>com.apple.security.app-sandbox</key>
		<true/>

		<key>com.apple.security.files.bookmarks.document-scope</key>
		<true/>

		<key>com.apple.security.application-groups</key>
		<array>
			<string>G69SCX94XU.duck</string>
		</array>

		<key>com.apple.security.scripting-targets</key>
		<dict>
			<key>com.apple.systempreferences</key>
			<array>
				<string>preferencepane.reveal</string>
			</array>

		</dict>

	</dict>
</plist>

Missing several keys such as

        <key>com.apple.security.network.client</key>
        <!-- The ability to open an outgoing connection to another machine -->
        <true/>

from the original entitlements for the submitted binary

mellifera:~ dkocher$ codesign -d --entitlements - ~/Downloads/Cyberduck.app/
Executable=/Users/dkocher/Downloads/Cyberduck.app/Contents/MacOS/Cyberduck
??qqn<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "_Apple_DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
    <dict>
        <key>com.apple.security.app-sandbox</key>
        <true/>
        <key>com.apple.security.files.bookmarks.app-scope</key>
        <true/>
        <key>com.apple.security.files.bookmarks.document-scope</key>
        <true/>
        <key>com.apple.security.network.server</key>
        <!-- The ability to open a socket for listening. Used for Active (PORT) FTP data connections -->
        <true/>
        <key>com.apple.security.network.client</key>
        <!-- The ability to open an outgoing connection to another machine -->
        <true/>
        <key>com.apple.security.files.downloads.read-write</key>
        <true/>
        <key>com.apple.security.files.user-selected.read-write</key>
        <true/>
        <key>com.apple.security.print</key>
        <!-- The ability to print -->
        <true/>
        <key>com.apple.security.application-groups</key>
        <array>
            <string>G69SCX94XU.duck</string>
        </array>
        <key>com.apple.security.scripting-targets</key>
        <dict>
            <key>com.apple.systempreferences</key>
            <array>
                <string>preferencepane.reveal</string>
            </array>
        </dict>
    </dict>
</plist>

[cyberduck]

@dkocher commented

#10239 closed as duplicate.

[cyberduck]

@dkocher commented

#10241 closed as duplicate.

[cyberduck]

@dkocher commented

#10238 closed as duplicate.

[cyberduck]

@dkocher commented

#10242 closed as duplicate.

[cyberduck]

@dkocher commented

#10243 closed as duplicate.

[cyberduck]

@dkocher commented

We submitted rdar://37934094.

[cyberduck]

@dkocher commented

#10248 closed as duplicate.

[cyberduck]

@dkocher commented

#10246 closed as duplicate.

[cyberduck]

@dkocher commented

#10244 closed as duplicate.

[cyberduck]

87d9e23 commented

Today (2018-02-27) I tested the version 6.4.2 on appstore, but I still get the same error

[cyberduck]

@dkocher commented

#10250 closed as duplicate.

[cyberduck]

@dkocher commented

Milestone renamed