Hacker News new | past | comments | ask | show | jobs | submit
Security features like this works, until it doesn't.

When I installed WireGuard on macOS, I was happy to discover that it stores private keys in the system keychain. Accessing the private key requires Touch ID.

Then one day after a system upgrade, the WireGuard app crashed on startup with:

  [APP] Unable to open config from keychain: -25300
Then the app deleted all profiles because they are all "orphaned", apparently for "keychain consistency" [0].

From then on, I just use a text editor to edit my WireGuard configuration files, and import them to the app. The bug still exists to this day [1].

[0] https://github.com/WireGuard/wireguard-apple/commit/dfb685f2...

[1] https://www.reddit.com/r/WireGuard/comments/wyt828/osx_wireg...

Developing for macos, I’ve gotten bit by keychain consistency issues far too many times. It’s a mess.
loading story #50450306
loading story #50452453
I had this as well - funny enough I asked my local AI to "find the removed config" and it was able to restore everything.
loading story #50450261
loading story #50452548
loading story #50451042
> The bug still exists to this day

You linked a commit and a Reddit post. Is there a proper Github issue as well?

loading story #50450235
loading story #50450200
loading story #50452796