fig icon indicating copy to clipboard operation
fig copied to clipboard

Fig daemon doesn't start, fig doctor fails to fix.

Open vlebourl opened this issue 2 years ago • 18 comments

Description:

Please include a detailed description of the issue (and an image or screen recording, if applicable)

fig daemon doesn't start after a fresh installation, nothing changed from default.

2022-03-14T14:42:41.400245Z  INFO fig::daemon: 434: Starting daemon...
2022-03-14T14:42:41.749061Z  WARN hyper_rustls::connector: 39: Could not load all certificates: Custom { kind: InvalidData, error: Custom { kind: InvalidData, error: BadDER } }
Could not connect to websocket

Caused by:
    0: TLS error: webpki error: UnsupportedCriticalExtension
    1: webpki error: UnsupportedCriticalExtension
    2: UnsupportedCriticalExtension

Details:

OS Fig Shell
macOS 10.15.7 (19H1715) 1.0.56 /bin/zsh
fig diagnostic

Fig Diagnostics

Fig details:

  • Fig version: Version 1.0.56 (B403) [French - PC]
  • Bundle path: /Applications/Fig.app
  • Autocomplete: true
  • Settings.json: true
  • Accessibility: true
  • Number of specs: 0
  • Symlinked dotfiles: false
  • Only insert on tab: false
  • Keybindings path:
  • Installation Script: true
  • PseudoTerminal Path:
  • SecureKeyboardInput: false
  • SecureKeyboardProcess:

Hardware Info:

  • Model Name: iMac Pro
  • Model Identifier: iMacPro1,1
  • Chip:
  • Cores: 18
  • Memory: 32 GB

OS Info:

  • macOS 10.15.7 (19H1715)

Environment:

  • User Shell: /bin/zsh
  • Current Directory: /Users/vlb
  • CLI Installed: true
  • Executable Location: /Users/vlb/.local/bin/fig
  • Current Window ID: 9136/% (com.googlecode.iterm2)
  • Active Process: zsh (30914) - /dev/ttys007
  • Environment Variables:
    • TERM=xterm-256color
    • FIG_INTEGRATION_VERSION=8
    • FIG_TERM=1
    • FIG_TERM_VERSION=4.2.0
    • FIG_CHECKED_PROMPTS=1

Integrations:

  • SSH: false
  • TMUX: false
  • iTerm: installed!
  • Hyper: application is not present.
  • Visual Studio Code: installed!
  • Docker: false

vlebourl avatar Mar 14 '22 14:03 vlebourl

Not too sure what the issue is here, looks like you have some issues with your certs, you might want to make an issue at webpki as that is the library that is unable to load your certs, might be an error there.

grant0417 avatar Mar 14 '22 19:03 grant0417

Same issue here. I uninstalled, re-installed and am getting the same issue using Fish and macOS 12.3.

sgruby avatar Mar 14 '22 20:03 sgruby

@sgruby @vlebourl are either of you free to jump on a call to debug this? I'll be in this meeting room for the next hour or so. https://us06web.zoom.us/j/84904904358?pwd=TU5aamI5T3hpRGthMjNNOW5CbE9RZz09

mschrage avatar Mar 14 '22 21:03 mschrage

I'm going to try to move from using webpki to webpki-roots, this should hopefully resolve the issue but will mean that the certs are built into the binary.

grant0417 avatar Mar 14 '22 22:03 grant0417

This should be fixed on the stable build of Fig.

Run fig update or go into the Fig menu an click Check for Updates...

Also make sure to run fig doctor after you update to ensure Fig is working correctly.

grant0417 avatar Mar 18 '22 02:03 grant0417

Just updated and still having the same problem.

sgruby avatar Mar 18 '22 02:03 sgruby

@sgruby, are you sure you are on B414 and it is the same error?

grant0417 avatar Mar 18 '22 03:03 grant0417

Yup, B414!

sgruby avatar Mar 18 '22 03:03 sgruby

This is strange, are you on an older version of macos?

grant0417 avatar Mar 18 '22 03:03 grant0417

Nope, 12.3 on an M1 MacBook Air.

sgruby avatar Mar 18 '22 04:03 sgruby

@sgruby, do you use a VPN?

grant0417 avatar Mar 18 '22 20:03 grant0417

@grant0417 Nope. Just SSH connections to various hosts.

sgruby avatar Mar 18 '22 20:03 sgruby

Just to associate with another user's feedback here is what they said when they got the same webpki error.

Well, this is a custom VPN. You could think that it just like OpenVPN using TUN mode but hijacked all the connections like Proxifier do. The software name is ClashX Pro. You need to host server yourself. Software is open source on GitHub.

But since this VPN doesn't do any MiTM, just redirect connection to 198.18.0.1/16 and do a IP mapping. I'm really curious about how it is affecting TLS.

grant0417 avatar Mar 18 '22 20:03 grant0417

I was running sshuttle that did something similar, but stopped it and reset PF using:

sudo pfctl -f /etc/pf.conf

I'm not even sure what the daemon is doing as other parts of fig seem to work fine.

sgruby avatar Mar 18 '22 21:03 sgruby

Did that fix the issue?

It is currently only used for syncing your settings, but will soon also sync dotfiles and plugins.

grant0417 avatar Mar 18 '22 21:03 grant0417

Nope. Sorry.

sgruby avatar Mar 18 '22 21:03 sgruby

I'm getting this issue too. I'm on 2.17.0

BrennerSpear avatar Dec 22 '23 18:12 BrennerSpear

Getting this issue as well. Running fig 2.17.0 and MacOS 14.2.1

Edit: Resolved by following https://github.com/withfig/fig/issues/2061#issuecomment-1317666881

raoulkent avatar Jan 04 '24 11:01 raoulkent