Adobe Community: Adobe AIR EncryptedLocalStore Problems

Currently Being Moderated

Adobe AIR EncryptedLocalStore Problems

Feb 12, 2011 10:19 PM

Encrypted local store doesn't function once an application is installed on my machine. I've been having problems on this computer with encryptedlocalstore, so I setup a basic test program.

Things work fine when run from adl, but do not function when run normally. If I run adl on the installed application from inside the .app/Contents/Resources folder the application works fine, but when run normally it fails.

I've tried deleting my entire ~/Library/Application Support/Adobe/AIR/ELS folder but to no avail. I uninstalled and reinstalled Adobe Air 2.5.1 and still ELS fails. The folder for the Application is created within the ELS folder, but none of the calls to ELS function, and throw an error with the message "general internal error". There is no stack trace attached to the error messages.

I'm running Mac OSX 10.6.6 I'm using Flex sdk 4.5.0.19786, if that might have an affect.

Any ideas?

7636 Views 30 Replies Latest reply: Chris Campbell, Jun 6, 2012 5:44 PM

Replies

8,544 posts
May 4, 2010

Currently Being Moderated

1. Chris Campbell,

Feb 14, 2011 2:33 PM in reply to boushley

Report

Hi,
I tried this out (using the sample code you posted over on stackoverflow) and I'm seeing the following behavior on 10.6.6.

1. Compile and launch code from Flash Builder (ADL). App starts and loads ELS properly. Quit the app.
2. Install and launch the release version of the same application.

Result: I'm presented with a keychain dialog that says "testApp wants to use your confidential information stored in "Adobe.APS" in your keychain. I have Always Allow, Deny, and Allow as my choices. If I select Deny, I get the "general internal error" message. If I select Allow then everything works properly.

If I delete the ELS folder, then reverse those steps so that the release app is started first, it works fine, but then ADL will prompt me for keychain access.

I took a look at the docs, and I did see the following:

When debugging an application in the AIR Debug Launcher (ADL), the application uses a different encrypted local store than the one used in the installed version of the application.

Have you ever been prompted with this keychain dialog? If you delete the ELS folder, then start the release build of your app, does it still fail? Finally, I've seen some comments about failures occuring on case sensitive file systems. Is your drive formated with case sensitivity enabled?

Thanks,
Chris

|
Mark as:
Currently Being Moderated

2. boushley,

Feb 14, 2011 6:16 PM in reply to Chris Campbell

Report

I have seen this dialog requesting permission to access the keychain,
I understood what it was asking and why, so I selected Always Allow.
However I still receive this error. I have deleted my ELS folder and
still see the problem. I have deleted the ELS folder, uninstalled and
reinstalled Air and stil see the problem.

My filesystem is case sensitive (Mac OSX), can you link me to some of
these posts where people have had problems with this? Are there any
solutions or workarounds for case sensitivity issues?

Aaron

|
Mark as:
8,544 posts
May 4, 2010

Currently Being Moderated

3. Chris Campbell,

Feb 15, 2011 5:13 PM in reply to boushley

Report

Here's a post about the case sensitive issue, but I'm concerned this might not apply. Take a look though and tell me what you think.

http://blogs.adobe.com/koestler/2009/07/unreadable_encrypted_local_sto .html

Out of curiosity, could you try creating a new user account, then running the application through ADL and then it's normal stand alone state? Does it still fail?

Thanks,
Chris

|
Mark as:
Currently Being Moderated

4. boushley,

Feb 16, 2011 7:02 AM in reply to Chris Campbell

Report

The solution for the case sensitivity was deleting the ELS folder,
which I've done several times. I setup a new user account on the same
machine, and the new user account had the same problems. I should
also mention that I'm getting an error that says "EncryptedLocalStore
database access error" sometimes. It seems like the first time I run
the application after deleting ELS I get this, and then it goes back
to the general internal error problem.

Is there a possibility that something in my keychain is messed up
causing these issues?

Aaron

|
Mark as:
Currently Being Moderated

5. Brister1,

Feb 23, 2011 8:04 AM in reply to boushley

Report

We've actually had a problem identical to this many many times.

It only seems to happen for us on Mac OSX 10.6 w/ Firewall enabled. It doesn't seem to happen when the firewall isn't enabled.

It also has nothing to do with case sensitivity - we have never changed our application ID.

It seems to happen after an upgrade occasionally - but not consistently. Once it happens, here are the steps we've taken to resolve it.

(P.S. would love to see Adobe weigh in on this one - it happened on our CEO's machine just last night!)

<it happens enough we had to wiki it!>

Fixing Mac EncryptedLocalStore database access error

This error is caused when the application is updated and the cached data stored in the /var/db/DeferredSignature file is out of date with the newly updated signature of the application. It seems that Adobe AIR actually iterates through this file looking for a matching signature. For some reason it stops (likely a bug) and no longer continues generating the appropriate Mac keychain to store the ELS key information.

To work around this problem you need to perform the following operations:
Cleanup the application data by deleting the data in
~/Library/Application SupportAdobe/AIR/ELS/XYZApplication
~/Library/Preferences/XYZApplication

Delete the Adobe AIR keychain using the Keychain Access application on the Mac.
In the Keychains window you should see a Keychan called PrivateEncryptedDatak - right click on it and select Delete.
If the Keychain does not get removed from the list exit and restart Keychain Access.
If the PrivateEncryptedDatak keychain is still visible select the Keychain Access menu and the Keychain First Aid menu item. In the popup enter an administrator username/password, select Repair and hit start. The keychain should now be gone.

Okay, now the fun part. You need to start a terminal up - this will open up a shell window
If you are not logged in as an administrator you need to change the user this terminal is logged in as via the 'su' command by typing 'su - username' where username is the user you want to login as.
sudo rm /var/db/DetachedSignatures

That's it - you should now have everything cleaned up and can try re-installing the application (if the new version is already installed you probably can simply launch it now).

|
Mark as:
Currently Being Moderated

6. boushley,

Feb 24, 2011 10:39 PM in reply to Brister1

Report

Glad to have that great information on how to fix that issue, but even following these steps my ELS is still non-functional.

Does anyone have any other ideas on how I might get this working? From what I've read, the only other ideas people have is the completely reinstall the operating system. While this is an option, I'ld prefer to track down the actual bug.

|
Mark as:
Currently Being Moderated

7. Brister1,

Feb 25, 2011 6:24 AM in reply to boushley

Report

Oops! Looks like I missed a step in the post: after the deletions you need to reboot the system before attempting to use your applications.

Adboe folks: I would love to do something less destructive/exterme. How??? What are you storing in that DetachedSignatures file that I could remove? Losing ELS causes my app to lose its ability to open its encrypted SQLite DB which in turn forces us to re-fetch potentially gigs of data from the server.

And reinstall you OS is never an option. I'd sooner re-write my app in another language and move away from AIR than deal with that as an option!

|
Mark as:
Currently Being Moderated

8. boushley,

Feb 25, 2011 7:16 AM in reply to Brister1

Report

You're awesome!!! Apparently reboot is a very important step. So to be clear to anyone else who tracks this down, I resolved the issue by following the list of steps aboe (remove ELS, and Application Support for your programs), cleanup the keychain, deleted the /var/db/detachedSignatures and then reboot. I had multiple users, and cleaned up both of them, but I forgot about that and rebooted between them, so I went through a few reboots, but this totally worked.

Thanks!

|
Mark as:
8,544 posts
May 4, 2010

Currently Being Moderated

9. Chris Campbell,

Feb 25, 2011 3:48 PM in reply to boushley

Report

Thanks guys for tracking this solution down! I've forwarded this thread along to our engineers that worked on ELS and hopefully they can provide additional feedback.

Chris

|
Mark as:
Currently Being Moderated

10. Brister1,

Mar 2, 2011 4:39 PM in reply to Chris Campbell

Report

Hey Chris,

We could really use an update on this one. It seems to happen to at least one of my Mac users every 2nd or 3rd time I release a client. It really messes us up because we store the password for our sqllite db in the ELS - once ELS has been deleted the whole database needs to be deleted, and this triggers a complete re-sync with the server. Because of the nature of our app, the resync can be Gigs of data, take a very long time, and end up costing us a decent amount of money in bandwidth.

I wouldn't be so concerned if the ramifications weren't so bad, and frankly the remedy is more than slightly questionable.

|
Mark as:
8,544 posts
May 4, 2010

Currently Being Moderated

11. Chris Campbell,

Mar 2, 2011 5:30 PM in reply to Brister1

Report

Hi guys,
Sorry I haven't updated you on this one. I had one of our security experts take a look and this was new to him. I've added this as an internal bug (#2820203) and I'll ask around a bit more to see if anyone else might have an idea what could be going on.

Thanks,
Chris

|
Mark as:
Currently Being Moderated

12. Brister1,

Mar 9, 2011 1:10 PM in reply to Chris Campbell

Report

Hey Chris,

I just saw something similar to this happen with yet another customer - this time on Windows XP. While deleting his ELS fixed the issue, this is really not a very acceptable solution for me. If we can't count on ELS being stable for storage, it becomes pretty useless. I store my sql lite db passwords in there to protect them and when the ELS gets killed I have to re-download potentially gigs of data to the local system - both time consuming and expen$ive.

Should we be using something different other than ELS?

|
Mark as:
8,544 posts
May 4, 2010

Currently Being Moderated

13. Chris Campbell,

Mar 15, 2011 2:41 PM in reply to Brister1

Report

Hi Chris,
If at all possible, we'd love to get the steps to reproduce the problem on Windows. I've updated our bug to point to this post but it would be nice to have a separate bug on Windows (or at least some platform specific steps in the original bug.) If we have evidence that our implementation has defects that make it less reliable, we will certainly fix them as a high priority.

As for guidance on using ELS, please see Oliver's recent blog post on this topic.

EncryptedLocalStore and Storage Reliability

Thanks,
Chris

|
Mark as:
Currently Being Moderated

14. Brister1,

Mar 15, 2011 3:54 PM in reply to Chris Campbell

Report

That Windows failure happened under the exact same circumstances as the Mac ones did - users upgraded to our latest build via the installer update mechanism. Nothing special that I'm aware of.

Also, I read the blog post. While I agree with the principles, the simple fact of the matter is that ELS is really appearing to be fragile. Much less so than the Encrypted SQLite.

|
Mark as:
8,544 posts
May 4, 2010

Currently Being Moderated

15. Chris Campbell,

Mar 17, 2011 3:11 PM in reply to Brister1

Report

I hear you Chris. I'll update the bug report, specifically calling out that this also occured on Windows.

Chris

|
Mark as:
Currently Being Moderated

16. dashart21,

May 12, 2011 8:41 AM in reply to boushley

Report

Same problem on Windows, Mac OS and Linux.

Steps to reproduce:

1. Delete the PrivateEncryptedDatakey for the Adobe AIR application in the keychain on Mac OS, on Windows maybe different

or

1. Manipulate /Users/USER/Library/Application Support/Adobe/AIR/ELS/APPID/PrivateEncryptedDatak

Added a bug report to the JIRA
http://bugs.adobe.com/jira/browse/ASL-202

|
Mark as:
8,544 posts
May 4, 2010

Currently Being Moderated

17. Chris Campbell,

May 12, 2011 4:24 PM in reply to dashart21

Report

Thanks for opening the bug on Jira. I've updated our internal bug (#2820203) with your notes and the jira link.

Chris

|
Mark as:
Currently Being Moderated

18. Brister1,

Jul 20, 2011 5:03 AM in reply to Chris Campbell

Report

For months we never seemed to see this problem. Now that 2.7 is out, we are seeing it quite frequently again.

Could it possibly have something to do with building our kits using an older SDK and running with the newer version of the runtime?

When I first saw this problem frequently was when we were building our application using the AIR 2.5 SDK, but 2.6 was out and about. Once we switched to using the 2.6 SDK, problems seemed to go away. We have not yet gotten around to switching over to the AIR 2.7 SDK yet, but now we are suddenly seeing the problem in ~30% of our MAC installations again. Way to high a number to be acceptable.

This NEEDS to be addressed.

Also, later today I will post new, less destructive work-around steps.

|
Mark as:
Currently Being Moderated

19. Brister1,

Jul 20, 2011 5:59 AM in reply to Brister1

Report

Less destructive recovery instructions:

Open a terminal window.

You then want to bring up the SQLite admin tool with this command (running as root using sudo):
sudo /usr/bin/sqlite3 /var/db/DetachedSignatures

Then inside the command line admin you want to run the following commands (substituting your application id for xyzapplication):

delete from global where id in (select distinct(global) from code where lower(identifier) like '%xyzapplication%' );
delete from code where lower(identifier) like '%xyzapplication%';
.quit

That's it. No reboot required. Now you can re-launch your application and it will work just fine - even be able to access your old ELS without hassles.

Obviously this needs to be fixed. It is 100% unreasonable for a real average user to be doing these things and it is happening often enough right now that I'm afraid to ship my product because I'll be swamped with support calls from our numerous MAC users.

I'm a little puzzled as to how my team has been able to figure out a workaround for this and Adobe hasn't in all the time that people have been complaining about this. Why hasn't it been made a priority given the extreme pain involved in recovering from this?

|
Mark as:
Currently Being Moderated

20. Tomas Lehuta,

Aug 31, 2011 2:29 PM in reply to Brister1

Report

Hello all,

this issue is really annoying and affects also our Goalscape Desktop customers quite often.
Workarounds described above work fine but it's really a nonsense to ask every affected customer to remove/reset or hack some application data and instruct him to do all required workaround steps to make the app work again. Not speaking the fact that those steps are not easy to follow for any non-tech users.

However, there is some related issue filed in Adobe Bug Tracking system.
So please vote for it to get some more attention on this: https://bugbase.adobe.com/index.cfm?event=bug&id=2955326

AIR 3.0 seems to be near to release and this could get finally fixed there!

Tomas

|
Mark as:
8,544 posts
May 4, 2010

Currently Being Moderated

21. Chris Campbell,

Aug 31, 2011 2:29 PM in reply to Tomas Lehuta

Report

Thank you Tomas, I'd also like to encourage everyone affected to please vote and post their comments. We take this feedback very seriously. Additionally, I've been working to get this addressed internally and I'll continue to do so.

Since Jira is no longer used for AIR and Flash Player, please see the following bug over at bugbase.adobe.com

2955326 - Adobe AIR - bad handling of ELS errors

Thanks,
Chris

|
Mark as:
Currently Being Moderated

22. Tomas Lehuta,

Sep 1, 2011 7:40 AM in reply to Chris Campbell

Report

Hi Chris,

thank you for responding on this one!
It's really good to hear you're already working on that to get it addressed.
Finally we can again hope this will be resolved soon since it's really important for us as it compromises our efforts big time!

Could you please tell me some time estimate for a fix? Or does it first need to get enough votes?
Do you think it could get into the next major release of AIR?

Thanks,

Tomas

|
Mark as:
8,544 posts
May 4, 2010

Currently Being Moderated

23. Chris Campbell,

Sep 1, 2011 2:58 PM in reply to Tomas Lehuta

Report

Hi Tomas,
Unfortunately, I don't have an ETA on fixes for ELS. If you haven't already, please check the AIR 3 beta release, though I don't hold much hope that it will be automagically fixed. As I mentioned, I'm working internally on this but the work required isn't as straight forward as I originally hoped.

I really believe that votes and comments illustrating the impact that this will have on your application and business will be a valuable approach.

Thanks,
Chris

|
Mark as:
Currently Being Moderated

24. Brister1,

Oct 13, 2011 11:14 AM in reply to Chris Campbell

Report

Folks, I think we *finally* have a simple, reliably reproducible test case!

Step 1 - Turn on your MacOSX firewall
Step 2 - Install and run your application and have it store a simple key in ELS
Step 3 - In Finder, mount an SMB network share (like a fileserver)
Step 4 - Execute code in your application that does an air.File.browseForOpen()
Step 5 - You should now see a popup from OSX asking to grant permission to your App to bypass the firewall. Choose ALLOW and then enter your username/password to finish the approval process
Step 6 - Pick a file
Step 7 - shutdown
Step 8 - bump the version number in application.xml and repackage your application with the same certificate
Step 9 - Upgrade your application
Step 10 - Launch the upgraded application and try to read your simple key from ELS - you will get a message about ELS being corrupted.

I'm going to attach a simple sample app that demonstrates this to the bug if I can figure out how to do it. But it seems to work to corrupt ELS every time I try to do it.

-- EDIT --
Since the bug was apparently closed for not reason I can understand, I've opened a new one with the sample app that reproduces it as https://bugbase.adobe.com/index.cfm?event=bug&id=3001156

|
Mark as:
Currently Being Moderated

25. aartiles24,

Dec 16, 2011 11:03 AM in reply to boushley

Report

Hello Adobe crew,
I see that you have closed @Brister10's bug again. This is crazy guys, this is a real problem! and it is very common, just make a couple of searches on Google about Air.

I am from SocialBro.com, we have been getting this issue since a long time ago. We don't know how to reproduce it, our users normally don't remember what they did, the common step is, "I just ugraded your app". This week we have released a new version (using the SDK 3.1) and this problem is happening more and more often. We have more than 35000 users and it is impossible to support all of them and what is worst, they are losing their local history which very valuable for them.

As you can see we documented the solution to this several month ago http://socialbro.uservoice.com/knowledgebase/articles/17849-problem-to -synchronizing-network-error-or-twit, but again removing their local date is unaceptable for our users.

We would love to continue supporting our Adobe Air version since we have many user who love desktop apps. Since it seems there is not reasonable solution to this bug, today we will stat recommending our Chrome version which is more reliable.

Best,
Alfredo

|
Mark as:
Currently Being Moderated

26. Brister1,

Dec 16, 2011 11:19 AM in reply to aartiles24

Report

Yeah, I've just decided that we made a mistake to have ever used AIR as our implementation platform and we are starting to re-implement our entire application in other technologies because the support for AIR and the tool around AIR are simply attrocious. It was a great promise and theory, but the developer support for the platform is just pitiful.

|
Mark as:
Currently Being Moderated

27. simion314@yahoo.com,

Feb 1, 2012 12:23 PM in reply to boushley

Report

I found same problem in my app after an update, I will find a way to not use ELS anymore and move my data outside it, Adobe SHOULD just deprecate ELS since is broken(out it on the docs in red fonts, is broken ,do not use ,only if you aford to offer support to your customers,we Adobe do not care to fix this), I hope Adobe will get what it desirves ,

|
Mark as:
8,544 posts
May 4, 2010

Currently Being Moderated

28. Chris Campbell,

Jun 4, 2012 5:03 PM in reply to simion314@yahoo.com

Report

Is there anyone on this thread that is still running into this bug? I realize this issue has been around for way too long, and I apologize for that. It hasn't been forgotten and we believe that we've addressed it with work recently done around ELS. If there is anyone willing to test this out, please let me know in a reply, private message or email (ccampbel@adobe.com).

Thanks,
Chris

|
Mark as:
Currently Being Moderated

29. Brister1,

Jun 5, 2012 5:36 AM in reply to Chris Campbell

Report

We gave up hoping that Adobe would ever get around to fixing this since we were never getting anything even close to resembling a response, so we simply used the new ANE capabilities to write our own ELS equivalent that we had control over. Problems solved.

|
Mark as:
8,544 posts
May 4, 2010

Currently Being Moderated

30. Chris Campbell,

Jun 6, 2012 5:44 PM in reply to Brister1

Report

I understand (it was frustrating for me too). Glad you were able to come up with another solution using native extensions.

|
Mark as: