authkit

[Wh1terat]

Hi,

I'm working with the IOS Simulator (10.3.x) rather than a physical device; so I'm not actually utilising ssl kill switch 2 as the sim is a little looser on signing.

I've patched libsystem_coretls.dylib: tls_helper_create_peer_trust to return 0 as per your blog post - and for the most part this is working.

I'm trying to investigate icloud related services which unfortunately don't.
Authkit was returning "Server cert validity check failed!" - I've patched this check too.

However now I'm getting:

akd[33399]: [core] Failed to check circle status: Error Domain=com.apple.security.sos.error Code=2 "Public Key not available - failed to register before call" UserInfo={NSDescription=Public Key not available - failed to register before call}
akd[33399]: [core] Nil account cannot possibly have a continuation-key token!
akd[33399]: [core] Nil account cannot possibly have a password-reset-token token!
akd[33399]: [core] Invalid/missing value for key alias: (null)
akd[33399]: [core] Invalid/missing value for key acname: (null)
akd[33399]: [core] Invalid value for key ut: (null)
akd[33399]: [core] Authentication with server failed! Error: Error Domain=com.apple.AppleIDAuthSupport Code=2 "selected protocol key missing" UserInfo={NSDescription=selected protocol key missing, Status=<CFBasicHash 0x7fe9d24293e0 [0x1074fbe40]>{type = mutable dict, count = 5,
akd[33399]: [core] Request to show server UI came back with error: Error Domain=AKAuthenticationError Code=-7003 "(null)"
akd[33399]: [core] Server UI did not complete auth successfully! Error: Error Domain=AKAuthenticationError Code=-7003 "(null)"

I'm now not sure which direction to head next - any suggestions appreciated!
(fyi with MITM disabled everything still works correctly)

Cheers,

[nabla-c0d3]

Hello,
You can use the SSL Kill Switch Xcode project for that - it should work in the iOS simulator. Unfortunately I am not familiar with authkit at all so I do not know what your next step should be. Good luck!

[Wh1terat]

Hi,

Thanks for the lightning fast reply!

Ah good to know - thanks.
The patch is working, giving the "correct" results in as much as other pinned apps are now working.

More digging required on my part 👍

Appreciate the response!
Cheers,