订阅地址请求失败

lihehub commented 6 years ago

问题详情请见下面模板信息。根据我分析这个问题与mac系统ATS机制有关，MACOS 新版本中新增App Transport Security(ATS)特性，主要使原来请求的时候用到的HTTP都转向TLS1.2协议进行传输。默认情况下非HTTPS的网络访问是被禁止的。目前可以通过NSAllowsArbitraryLoads 设置为YES 来禁用ATS。

禁用方式可以参考https://stackoverflow.com/questions/31216758/how-can-i-add-nsapptransportsecurity-to-my-info-plist-file

具体方式是打开文件/Applications/ShadowsocksX-NG-R8.app/Contents/Info.plist, 在\\中添加

<key>NSAppTransportSecurity</key> <dict> <key>NSAllowsArbitraryLoads</key> <true/> </dict>

System and Shadowsocksx-NG-R8 version:

macOS 10.13.5
Shadowsocksx-NG-R8 1.4.3-build3

Expected behavior:

订阅地址请求成功，订阅地址例子http://ss-ssshare.7e14.starter-us-west-2.openshiftapps.com/subscribe

Actual behavior:

手动更新订阅，订阅地址请求失败

Steps to reproduce:

添加订阅地址，点击菜单“手动更新订阅”

How often does this happen?

总是

ss-local.log

ss-local.log

Application log

默认 14:56:11.121539 +0800 ShadowsocksX-NG LSExceptions shared instance invalidated for timeout. 错误 14:56:26.574628 +0800 ShadowsocksX-NG Cannot start load of Task .<2> since it does not conform to ATS policy 错误 14:56:26.574751 +0800 ShadowsocksX-NG Task .<2> finished with error - code: -1022 默认 15:00:35.065820 +0800 com.apple.WebKit.Networking [26637 stream, pid: 911, url: https://collector.githubapp.com/github/page_view?dimensions%5Bpage%5D=https%3A%2F%2Fgithub.com%2Fqinyuhang%2FShadowsocksX-NG-R%2Fi, tls] cancelled [26637.1.1 3E9CC2CC-72CD-4BAF-BFFD-5EF402BE9693 .50828<->] Connected Path: satisfied (Path is satisfied), interface: en0, ipv4, dns Duration: 54.934s, DNS @0.006s took 0.024s, TCP @0.032s took 0.294s, TLS took 0.677s bytes in/out: 5834/8128, packets in/out: 8/10, rtt: 0.316s, retransmitted packets: 0, out-of-order packets: 0 默认 15:03:35.079094 +0800 com.apple.WebKit.Networking [26651 stream, pid: 911, url: https://collector.githubapp.com/github/page_view?dimensions%5Bpage%5D=https%3A%2F%2Fgithub.com%2Fqinyuhang%2FShadowsocksX-NG-R%2Fi, tls] cancelled [26651.1.1 E7197108-8A37-4642-957A-398B037EE4D3 .50846<->] Connected Path: satisfied (Path is satisfied), interface: en0, ipv4, dns Duration: 167.864s, DNS @0.005s took 0.017s, TCP @0.034s took 0.348s, TLS took 1.004s bytes in/out: 9753/21025, packets in/out: 15/24, rtt: 0.382s, retransmitted packets: 0, out-of-order packets: 0 错误 15:05:38.124979 +0800 ShadowsocksX-NG Cannot start load of Task .<3> since it does not conform to ATS policy 错误 15:05:38.125065 +0800 ShadowsocksX-NG Task .<3> finished with error - code: -1022 错误 15:08:17.991960 +0800 ShadowsocksX-NG Cannot start load of Task <9BF0C66E-CCDD-468B-B279-5A905E92AE20>.<4> since it does not conform to ATS policy 错误 15:08:17.992073 +0800 ShadowsocksX-NG Task <9BF0C66E-CCDD-468B-B279-5A905E92AE20>.<4> finished with error - code: -1022 错误 15:08:46.456295 +0800 ShadowsocksX-NG Cannot start load of Task <68DB2BE1-CD7D-4AD7-A75D-19DEB31C2F26>.<5> since it does not conform to ATS policy 错误 15:08:46.456442 +0800 ShadowsocksX-NG Task <68DB2BE1-CD7D-4AD7-A75D-19DEB31C2F26>.<5> finished with error - code: -1022 错误 15:10:38.347033 +0800 ShadowsocksX-NG Cannot start load of Task <444518AF-9AA3-4DBD-9435-06004F11B86F>.<6> since it does not conform to ATS policy 错误 15:10:38.347133 +0800 ShadowsocksX-NG Task <444518AF-9AA3-4DBD-9435-06004F11B86F>.<6> finished with error - code: -1022

Crash Log

Tips:

Always check for the latest update, some known bug has been fix in the latest release such as old version not support auth_aes_md5 auth_aes_sha1
Beta version of macOS also may couse some problems
ss-local compiled by macOS Sierra 10.12 not compatite with 10.11, some old release's ss-local are compiled using 10.12 will not work on 10.11, new release are try build in 10.10 to max fit the compatite

lihehub commented 6 years ago

按我的方法改过之后，更新订阅成功后没有通知了，不知道为什么