[tuntaposx-users] Mac 10.10 Yosemite Requires extensions to be signed.

[Caleb M. <cm...@ma...>]

I don't really have a solution for this, so I guess this is more of a
warning than anything. If you require tuntap for your organization I
would suggest not updating your macs to 10.10 Yosemite until this is
sorted.

Upon updating I and some other people noticed that services using this
tuntap module no longer works.

For example, upon installation through homebrew (or macports) tun/tap is
no longer loaded on boot; when attempting to load the kernel extensions
manually you get the following:

sudo kextload -b foo.tap
sudo kextload -b foo.tun
foo.tun failed to load - (libkern/kext) not loadable (reason unspecified); check the system/kernel logs for errors or try kextutil(8).

Checking /var/log/system.log shows:

com.apple.kextd[19]: ERROR: invalid signature for foo.tun, will not load

And of course Apple requires $100 per year to be able to sign kernel extensions. 

Further Readings:

https://github.com/Homebrew/homebrew/issues/31153
https://github.com/leapcode/bitmask_client/issues/545