Closed misakisuna705 closed 4 years ago
I can reproduce on a clean VM. I was also able to install by running their command outside of HBC.
But we’ll need a PR for this. Adobe is incredibly user-hostile—abusively so—and we’ve wasted far too much time on their draconian installation procedures. Bending to their will is an awful way to spend one’s free time.
Will leave this open for interested parties. If you have the same issue, please do not post “I have this too” (that’s what “Pick your reaction” is for). Only make a comment if you have something useful to add, be it more information on the error or ideas on how to solve it.
@vitorgalvao I've actually been trying to fix this for the last few days since I noticed it. I believe the problem is how Adobe handles their sign-in now. If I'm not mistaken, they are requiring 2FA on accounts and require you to sign in / verify before the installation proceeds.
(Unfortunately, my wife is Adobe user (as a graphic designer) so we have an account, and I don't remember turning 2FA on. I personally try to avoid Adobe like the plague because 'user-hostile' doesn't even begin to describe all the bloat and heartache (for your OS, of course) Adobe comes with)
Also, --silent
also makes no difference anymore. I'm pretty sure the 2FA based sign-in changed the entire installation process.
That said, wouldn't all this qualify this as a 'walled' build?
ping @danielbayley Perhaps you have some insight as I believe you push the current installation scheme we have for adobe-creative-cloud
?
wouldn't all this qualify this as a 'walled' build?
To be considered a walled build, two things are needed:
url
and homepage
are on different hosts.The second point is valid even if giving a fake email would work, because not everyone will think of that. Cask downloads are the easiest part to compromise without our knowledge, as they pull from servers we have no control over. We want downloads to be auditable by people who don’t know how to code, because that gives us more eyes. It’s simple to understand what homepage
and url
do, and that if a piece of software is being downloaded from a different host from its page, it may not be a legitimate download.
The definition of walled build exists for security:
We do not accept these casks since they offer a higher-than-normal security risk.
It’s a way of us saying “verifying this isn’t malware would require a level of vigilance we cannot promise”, so we refuse it. Those cases are (relatively) rare, and teams who want to have their software as a cask are often willing to fix one of the walled build points.
Even if this cask fulfils point 2, it’s safe because of point 1. Both are required.
Which doesn’t prevent us from rejecting a cask because the accumulation of one of those points together with something unrelated makes us not want to support it. It just isn’t called a walled build.
I believe the problem is how Adobe handles their sign-in now. If I'm not mistaken, they are requiring 2FA on accounts and require you to sign in / verify before the installation proceeds.
I can confirm I was able to install this cask on a clean VM by brew cask fetch
ing and running the installer script:
command on a terminal, so this may be fixable.
my wife is Adobe user (as a graphic designer)
Adobe is a major reason why I’ve became less interested in graphic design. Affinity Designer is driving the stake even further, due to all the bugs. People swear by it, but if you need your work precise—which I do—it’s a nightmare.
@vitorgalvao Found the problem.
PIM Validation Failed:Process certificate didnt match to Adobe certificate! CANameChain: Developer ID Application: Adobe Inc. (JQ525L2MZD){|}Developer ID Certification Authority{|}Apple Root CA
I don't think this is fixable from within HBC.
If anyone is curious to see the .log
file.
ACC.log
@vitorgalvao Ok, I have a fix.
I found this forum post: https://community.adobe.com/t5/download-install/creative-cloud-installation-fails-at-3-pim-validation-failed-process-certificate-didnt-match-to/td-p/10540858?page=1
Which suggests using the alternative link here: https://helpx.adobe.com/cy_en/download-install/kb/creative-cloud-desktop-app-download.html
So I replace the link and made some adjustments...
...
url 'https://ccmdl.adobe.com/AdobeProducts/KCCC/CCD/5_2/osx10/ACCCx5_2_0_436.dmg'
name 'Adobe Creative Cloud'
homepage 'https://creative.adobe.com/products/creative-cloud'
installer script: {
executable: "#{staged_path}/Install.app/Contents/MacOS/Install",
args: ['--mode=silent'],
sudo: true,
print_stderr: false,
}
...
Now, I can it to install, just fine.
$ brew cask install adobe-creative-cloud
==> Downloading https://ccmdl.adobe.com/AdobeProducts/KCCC/CCD/5_2/osx10/ACCCx5_2_0_436.dmg
==> No SHA-256 checksum defined for Cask 'adobe-creative-cloud', skipping verification.
==> Installing Cask adobe-creative-cloud
==> Running installer script '/usr/local/Caskroom/adobe-creative-cloud/latest/Install.app/Contents/MacOS/Install'
Starting installer...
Installation successful.
🍺 adobe-creative-cloud was successfully installed!
I can also install apps and fonts fine too.
How should I proceed?
A thought: I feel like that url
link should be versioned but I don't know if we can find a proper appcast
for this...
I created a draft PR #85084
ping @danielbayley Perhaps you have some insight as I believe you push the current installation scheme we have for
adobe-creative-cloud
?
@ran-dall @vitorgalvao Sorry, been extremely busy! It's was a while ago now, but I remember working on a local copy of this cask (although I think possibly before they apparently force 2FA on users), with quite a few changes that didn't quite make it into a PR before life got in the way… basically a long list of additional files and shit this app leaves all over the place! Additionally working on a script to make it easier to find files related to a given app…
I'll take a look at your PR changes though, nice one 👍
Adobe is incredibly user-hostile—abusively so
(Unfortunately, my wife is Adobe user (as a graphic designer) so we have an account, and I don't remember turning 2FA on. I personally try to avoid Adobe like the plague because 'user-hostile' doesn't even begin to describe all the bloat and heartache (for your OS, of course) Adobe comes with)
Tell me about it 🤦🏻♂️ As someone who wears many hats including motion designer, I am stuck with it because of their monopoly… Unfortunately, nothing compares to After Effects and Illustrator! I think all the decent engineers work on the apps themselves and they have actual clowns on all the installer stuff… it leaves an absolute mess everywhere! Hate them for it, and the way they run their company 😡
General troubleshooting steps
--force
.brew update-reset && brew update
and retried my command.brew doctor
, fixed as many issues as possible and retried my command.Description of issue
When I try to install creative cloud, the installer return erro code 72.
Command that failed
Output of command with
--force --verbose --debug
Output of
brew cask doctor
Output of
brew tap