alt Hacker NewsSecurity features like this works, until it doesn't.
When I installed WireGuard on macOS, I was happy to discover that it stores private keys in the system keychain. Accessing the private key requires Touch ID.
Then one day after a system upgrade, the WireGuard app crashed on startup with:
[APP] Unable to open config from keychain: -25300
From then on, I just use a text editor to edit my WireGuard configuration files, and import them to the app. The bug still exists to this day [1].
[0] https://github.com/WireGuard/wireguard-apple/commit/dfb685f2...
[1] https://www.reddit.com/r/WireGuard/comments/wyt828/osx_wireg...
Replies
I'm using WireGuard myself. Not on MacOS, but on Windows/Linux/Android. The reason I went with WireGuard to begin with, is due to how secure it suppsedly was. Having long standing unresolved issues like that is a bit worrying. I'm still most likely safe, but it's not exactly reassuring, either
I had this as well - funny enough I asked my local AI to "find the removed config" and it was able to restore everything.
This literally just happened to me yesterday. Again.
There are features built for security nerds (like PGP/GPG, etc)
And features built for normal people
The overlap is very rare
> The bug still exists to this day
You linked a commit and a Reddit post. Is there a proper Github issue as well?
[flagged]
Developing for macos, I’ve gotten bit by keychain consistency issues far too many times. It’s a mess.