Replies: 2 comments
-
I'm only familiar with App Transport Security (ATS) -- https://developer.apple.com/documentation/security/preventing-insecure-network-connections , not too familiar with whatever was new introduced in Sequoia. The Sparkle Test App which we run through CI (even on macOS 15) does just host a local web server and allows arbitrary loads -- https://github.com/sparkle-project/Sparkle/blob/2.x/TestApplication/TestApplication-Info.plist#L37 -- but it connects to localhost which may be the difference here. Or you could deploy closer to your production server, but at a different feed or something along those lines before making it official. That would be closer to testing the real path anyway. |
Beta Was this translation helpful? Give feedback.
-
Thanks Zorg. I'll look into the Sparkle Test App. My guess is that'll work perfectly for me. Also, thanks for all your hard work! So many Mac apps owe a debt of gratitude to Sparkle:) |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
Sequoia's "Local Network Privacy" is far and away one of the most half-baked "features" Apple has ever added to macOS.
When updating to a major new version of Sparkle (in this case, v2.7.x), I typically like to test my new app update locally on my LAN before deploying the app to our Server. I have a light Apache web server (complete with Sparkle AppCast and new app build) running on a Linux box on my LAN for just this purpose. I manually change the app's SUFeedURL to grab the Sparkle AppCast from http://192.168.1.10/whatever, do an Xcode build, and run my test. This has worked perfectly fine for years, up until Sequoia.
With Sequoia, the stupid "Local Network Privacy" blocks my app from accessing my Linux box on my LAN. So the AppCast can't be downloaded, and Sparkle fails out. It's not possible to manually add apps (in my case, new Xcode compiles) to Sequoia Security's "Local Network Privacy". My only options seem to be to:
Does anyone have any thoughts on how to work around this annoying problem? For example, is there some way for my local Mac to host Sparkle's AppCast and new build? Or is it possible to run an Apache server locally, but somehow trick Local Network Privacy to think the server is outside of my LAN?
Thanks.
Beta Was this translation helpful? Give feedback.
All reactions