Ever since upgrading to OSX 10.9 Mavericks, I have not been able to use the Keychain API in the Security framework because every time a Keychain function is called, it throws an unknown exception. I have tried many different implementations of Keychain wrappers and they all throw an unknown exception when they call any Keychain function. I have even tried the example code apple posted on their developer site and encountered the same problem. Is this a known issue and if so, what is the status of the fix? Are they any ways to use Keychain now? I have included the sample code from apple's website bellow. Here is the link: https://developer.apple.com/library/mac/documentation/Security/Conceptual/keychainServConcepts/03tasks/tasks.html#//apple_ref/doc/uid/TP30000897-CH205-TP9
#include <CoreFoundation/CoreFoundation.h>
#include <Security/Security.h>
#include <CoreServices/CoreServices.h>
//Call SecKeychainAddGenericPassword to add a new password to the keychain:
OSStatus StorePasswordKeychain (void* password,UInt32 passwordLength)
{
OSStatus status;
status = SecKeychainAddGenericPassword (
NULL, // default keychain
10, // length of service name
"SurfWriter", // service name
10, // length of account name
"MyUserAcct", // account name
passwordLength, // length of password
password, // pointer to password data
NULL // the item reference
);
return (status);
}
//Call SecKeychainFindGenericPassword to get a password from the keychain:
OSStatus GetPasswordKeychain (void *passwordData,UInt32 *passwordLength,
SecKeychainItemRef *itemRef)
{
OSStatus status1 ;
status1 = SecKeychainFindGenericPassword (
NULL, // default keychain
10, // length of service name
"SurfWriter", // service name
10, // length of account name
"MyUserAcct", // account name
passwordLength, // length of password
passwordData, // pointer to password data
itemRef // the item reference
);
return (status1);
}
//Call SecKeychainItemModifyAttributesAndData to change the password for
// an item already in the keychain:
OSStatus ChangePasswordKeychain (SecKeychainItemRef itemRef)
{
OSStatus status;
void * password = "myNewP4sSw0rD";
UInt32 passwordLength = strlen(password);
status = SecKeychainItemModifyAttributesAndData (
itemRef, // the item reference
NULL, // no change to attributes
passwordLength, // length of password
password // pointer to password data
);
return (status);
}
/* ********************************************************************** */
int main (int argc, const char * argv[]) {
OSStatus status;
OSStatus status1;
void * myPassword = "myP4sSw0rD";
UInt32 myPasswordLength = strlen(myPassword);
void *passwordData = nil; // will be allocated and filled in by
//SecKeychainFindGenericPassword
SecKeychainItemRef itemRef = nil;
UInt32 passwordLength = nil;
status1 = GetPasswordKeychain (&passwordData,&passwordLength,&itemRef); //Call
//SecKeychainFindGenericPassword
if (status1 == noErr) //If call was successful, authenticate user
//and continue.
{
//Free the data allocated by SecKeychainFindGenericPassword:
status = SecKeychainItemFreeContent (
NULL, //No attribute data to release
passwordData //Release data buffer allocated by
//SecKeychainFindGenericPassword
);
}
if (status1 == errSecItemNotFound) { //Is password on keychain?
/*
If password is not on keychain, display dialog to prompt user for
name and password.
Authenticate user. If unsuccessful, prompt user again for name and password.
If successful, ask user whether to store new password on keychain; if no, return.
If yes, store password:
*/
status = StorePasswordKeychain (myPassword,myPasswordLength); //Call
// SecKeychainAddGenericPassword
return (status);
}
/*
If password is on keychain, authenticate user.
If authentication succeeds, return.
If authentication fails, prompt user for new user name and password and
authenticate again.
If unsuccessful, prompt again.
If successful, ask whether to update keychain with new information. If no, return.
If yes, store new information:
*/
status = ChangePasswordKeychain (itemRef); //Call
// SecKeychainItemModifyAttributesAndData
if (itemRef) CFRelease(itemRef);
return (status);
}
Is your application properly signed? A number of calls will fail mysteriously if it is not. I think that started happening around 10.8. What error code are you getting?