HeadlinesBriefing favicon HeadlinesBriefing.com

Apple's Developer Certificate Server Faces Critical Outage, Breaking App Installation for Developers

Hacker News •
×

Apple's developer certificate infrastructure appears to be experiencing a widespread outage, preventing developers from installing apps onto their own devices. Reports emerged on Hacker News and Reddit starting around 11 AM PDT, with users unable to proceed past installation steps. The issue escalated to intermittent 502 errors from Apple's PPQ server, indicating a systemic problem. This outage disrupts core development workflows, forcing reliance on workarounds or waiting for resolution.

The technical root cause, detailed by a developer using Claude Code, involves a critical extension in Apple's private PKI. OpenSSL, used in non-Apple TLS implementations, fails to validate certificates due to an unrecognized proprietary OID (1.2.840.113635.100.6.27.3.2). Per X.509 standards, this critical extension mandates rejection. While Apple's own SecureTransport/TLS stack handles this extension seamlessly, the incompatibility breaks installations using raw OpenSSL or similar libraries. This isn't a misconfiguration but an intentional design choice for Apple's ecosystem.

For affected developers, the immediate impact is halted testing and deployment. The outage underscores the tight coupling between Apple's private certificate infrastructure and its development tools. Until resolved, developers must either use alternative signing methods (like enterprise provisioning) or wait for Apple to restore service. The incident highlights potential risks in relying solely on Apple's proprietary systems for critical development processes.