Unable to install ipsec mobileconfig file on mac

[kdavidson007]

Describe the bug

When I try to install the the mobilconfig file in the the ipsec folder on a mac, I am now getting the following error:

Profile installation failed: The certificate could not be verified (authentication error).

To Reproduce

Steps to reproduce the behavior:

1. Double click the mobileconfig file here: configs -> ipsec -> apple -> desktop.mobileconfig
2. From within the System Settings, click the Privacy and Security tab
3. Double click the profile
4. Click install

Additional context

This type of file was working fine before the most recent update to algo.

[sameep]

I'm getting the same error with mobileconfig. It seems to work fine when using the Wireguard config.

[zurk]

I'm getting the same error with mobileconfig. It seems to work fine when using the Wireguard config.

Same for me.

[sellersshrug0y]

i’m also experiencing this issue

[kernelpanek]

I'm also having issues with installing the mobileconfig files...

[manofaffairs]

Experiencing the same issue here.

[stephenbrady]

I reverted to fd6efb71f255739c1e50e8222c6c5fab99df5709, and the issue was cured for me. Looking at all the commits on master since, #14673 seems like the most likely culprit, but I have not actually isolated the regression to #14673.

[dguido]

@jackivanov this looks like a real bug for MacOS 14 (Sonoma). #14558 looks related. Can you check these out? Thanks!

[jackivanov]

#14718 should fix it

[jackivanov]

https://github.com/trailofbits/algo/pull/14718 merged. I was able to install the profile on Somona with the fix

[kernelpanek]

Confirmed. Just built a new server and was able to install mobileprofile on MacOS Sonoma 14.4.1.