Access is denied error when debug C# module on Mac

[w12379564]

Exception has occurred: CLR/System.AggregateException
An unhandled exception of type 'System.AggregateException' occurred in System.Private.CoreLib.dll: 'One or more errors occurred.'
 Inner exceptions found, see $exception in variables window for more details.
 Innermost exception 	 System.Security.Cryptography.CryptographicException : Access is denied.
   at Internal.Cryptography.Pal.StorePal.AppleTrustStore.OpenStore(StoreName storeName, StoreLocation location, OpenFlags openFlags)
   at Internal.Cryptography.Pal.StorePal.FromSystemStore(String storeName, StoreLocation storeLocation, OpenFlags openFlags)
   at System.Security.Cryptography.X509Certificates.X509Store.Open(OpenFlags flags)
   at Microsoft.Azure.Devices.Client.Edge.InstalledCertificateValidator.SetupCertificateValidation()
   at Microsoft.Azure.Devices.Client.Edge.EdgeModuleClientFactory.GetCertificateValidator(IList`1 certs)
   at Microsoft.Azure.Devices.Client.Edge.EdgeModuleClientFactory.<CreateInternalClientFromEnvironmentAsync>d__16.MoveNext()
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()
   at SampleModule.Program.<Init>d__3.MoveNext() in /Users/yuxianggan/Documents/test/EdgeSolution/modules/SampleModule/Program.cs:line 51

[w12379564]

workaround: Add edge-device-ca.cert.pem to keychain and trust it by hand, and remove the EdgeModuleCACertificateFile env.

[adashen]

Chen Zhang (@czgtest) Is it reproducible on ubuntu?

[czgtest]

now c# module work well on ubuntu, both remote debug and local debug can work smoothly

[nelsonmorais]

Using iotedgehubdev version 0.6.0 I have the same issue, even after adding the edge-device-ca.cert.pem to the keychain. I don't see any environment variable named EdgeModuleCACertificateFile.

So the workaround provided did not work on my case. Any other options?

[adashen]

Nelson Morais (@nelsonmorais) , The work around steps are used to local debug the CSharp module on mac. If you are using vscode iot edge extension in VSCode. The step could be the follows

1. Start IoT Edge Simulator for Single Module
2. in .vscode/launch.json, remove the env "EdgeModuleCACertificateFile" in your CSharp module project launch mode debug setting.
3. Add the edge-device-ca.cert.pem into your keychain.
4. Start debugging the csharp module in launch mode.

[nelsonmorais]

That worked, thanks!
Can you share if this is an issue that will be addressed soon on a next release, or this is a workaround that will stay for a longer period?

[adashen]

Nelson Morais (@nelsonmorais) Great to know it works! It's a workaround may stay for longer period, since the fix could not happen in this tool instead it needs CSharp SDK to support it.

[nelsonmorais]

Hi Wei Shen (@adashen) ,

Thanks for the info.

[eXXL]

Hi there,
I ran into the same issue while trying the howto. Where do I find the edge-device-ca.cert.pem and how do I add it to the keychain?

[adashen]

eXXL you could run "iotedgehubdev modulecred" to show the CA location. it is output as the value of "EdgeModuleCACertificateFile". As for how to add the certificate into keychain, you may refer to this link https://www.sslsupportdesk.com/how-to-import-a-certificate-into-mac-os/

[eXXL]

Hi Wei Shen (@adashen),
this helped me out and it worked!

Thank you,
Alex