iPadOS 26.2 Unable to install Altstore

[MIkeJiang1990]

NSCocoaErrorDomain 3840

Debug Description
Encountered unknown tag html on line 1

Error Description
AltServer could not sign in with your Apple ID. The data is not in the correct format.

Failure
AltServer could not sign in with your Apple ID.

Failure Reason
The data is not in the correct format.

Title
AltStore could not be installed onto 　Mike哥哥的iPad.

kCFPropertyListOldStyleParsingError
Error Domain=NSCocoaErrorDomain Code=3840 "Malformed data byte group at line 1; invalid hex" UserInfo={NSDebugDescription=Malformed data byte group at line 1; invalid hex}

[suhli]

same here

[dengpingsong]

same here

[kevin-963976]

I also encountered the same problem. It should be the problem of apple id double verification. There is no solution at present

[wwwrising]

If u r in China, add gsa.apple.com into your proxy(VPN), and problem solved.

[kevin-963976]

Thank you very much, you're really great wwwrising ***@***.***>于2026年1月12日 周一14:50写道：

…

*wwwrising* left a comment (altstoreio/AltStore#1699) <#1699 (comment)> If u r in China, add gsa.apple.com into your proxy(VPN), and problem solved. — Reply to this email directly, view it on GitHub <#1699 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ALCJG73SZNRUVCHMH3KB4AL4GM73DAVCNFSM6AAAAACRIBPCN6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTOMZXGEYTOMJZHA> . You are receiving this because you commented.Message ID: ***@***.***>

[PhoenixZeta-play]

If u r in China, add gsa.apple.com into your proxy(VPN), and problem solved.

You resolved my issue!!! A big thank you!

[mawen233]

如果你在中国，将 gsa.apple.com 添加到你的代理（VPN）中，问题就解决了。

thank you!

[88265189]

If u r in China, add gsa.apple.com into your proxy(VPN), and problem solved.

So can you advise how to add it?
Many thanks.

[809662683]

If u r in China, add gsa.apple.com into your proxy(VPN), and problem solved.
thank you very much.

[809662683]

If u r in China, add gsa.apple.com into your proxy(VPN), and problem solved.

So can you advise how to add it? Many thanks.

如果你用clash，直接找到代理那边，配置苹果所有的通过就可以了。1. 打开 ClashX

2. 点击菜单栏图标 → 配置 → 打开配置文件夹

3. 编辑你的配置文件（通常是 .yaml 或 .yml 文件）

在 rules: 部分添加： - DOMAIN-SUFFIX,apple.com,代理名称 （代理名称就是你的vpn的名称了。）

[yshtcn]

If u r in China, add gsa.apple.com into your proxy(VPN), and problem solved.

So can you advise how to add it? Many thanks.

如果你用clash，直接找到代理那边，配置苹果所有的通过就可以了。1. 打开 ClashX

2. 点击菜单栏图标 → 配置 → 打开配置文件夹
3. 编辑你的配置文件（通常是 .yaml 或 .yml 文件）

在 rules: 部分添加： - DOMAIN-SUFFIX,apple.com,代理名称 （代理名称就是你的vpn的名称了。）

是的你是对的，gsa.apple.com这个域名是关键，而且此前一般不在分流名单里。一般情况也不不会将整个apple.com纳入分流名单。
添加了规则后成功的完成了签名。（很奇怪的是昨天我尝试了全局规则竟然没发现问题的原因）

Yes, you are right. The domain gsa.apple.com is key, and it's generally not on the redirection list. Normally, the entire apple.com domain wouldn't be included in the redirection list either.
The signing was successfully completed after adding the rule. (Strangely, I tried global rules yesterday and didn't find the cause of the problem.)

[PhoenixZeta-play]

If u r in China, add gsa.apple.com into your proxy(VPN), and problem solved.

So can you advise how to add it? Many thanks.

如果你用clash，直接找到代理那边，配置苹果所有的通过就可以了。1. 打开 ClashX

2. 点击菜单栏图标 → 配置 → 打开配置文件夹
3. 编辑你的配置文件（通常是 .yaml 或 .yml 文件）

在 rules: 部分添加： - DOMAIN-SUFFIX,apple.com,代理名称 （代理名称就是你的vpn的名称了。）

是的你是对的，gsa.apple.com这个域名是关键，而且此前一般不在分流名单里。一般情况也不不会将整个apple.com纳入分流名单。 添加了规则后成功的完成了签名。（很奇怪的是昨天我尝试了全局规则竟然没发现问题的原因）

Yes, you are right. The domain gsa.apple.com is key, and it's generally not on the redirection list. Normally, the entire apple.com domain wouldn't be included in the redirection list either. The signing was successfully completed after adding the rule. (Strangely, I tried global rules yesterday and didn't find the cause of the problem.)

I use AI to assist diagnosis yesterday: maybe Apple has adjusted the global CDN load balancing rules, and CN users are assigned to some nodes which do not support the Grandslam interface, but it's what Altstore needed.

[88265189]

If u r in China, add gsa.apple.com into your proxy(VPN), and problem solved.

So can you advise how to add it? Many thanks.

如果你用clash，直接找到代理那边，配置苹果所有的通过就可以了。1. 打开 ClashX

2. 点击菜单栏图标 → 配置 → 打开配置文件夹

3. 编辑你的配置文件（通常是 .yaml 或 .yml 文件）

在 rules: 部分添加： - DOMAIN-SUFFIX,apple.com,代理名称 （代理名称就是你的vpn的名称了。）

altstore装上iphone了，然而在手机端altstore里，无法刷新第三方程序。是需要在手机端也作上述配置吗？

[DANIEL48055]

If u r in China, add gsa.apple.com into your proxy(VPN), and problem solved.

So can you advise how to add it? Many thanks.

如果你用clash，直接找到代理那边，配置苹果所有的通过就可以了。1. 打开 ClashX

2. 点击菜单栏图标 → 配置 → 打开配置文件夹
3. 编辑你的配置文件（通常是 .yaml 或 .yml 文件）

在 rules: 部分添加： - DOMAIN-SUFFIX,apple.com,代理名称 （代理名称就是你的vpn的名称了。）

Thats works. Thank you very much!

[809662683]

If u r in China, add gsa.apple.com into your proxy(VPN), and problem solved.

So can you advise how to add it? Many thanks.

如果你用clash，直接找到代理那边，配置苹果所有的通过就可以了。1. 打开 ClashX

2. 点击菜单栏图标 → 配置 → 打开配置文件夹
3. 编辑你的配置文件（通常是 .yaml 或 .yml 文件）

在 rules: 部分添加： - DOMAIN-SUFFIX,apple.com,代理名称 （代理名称就是你的vpn的名称了。）

altstore装上iphone了，然而在手机端altstore里，无法刷新第三方程序。是需要在手机端也作上述配置吗？

手机端也是一样的，要配置才行，不然登录不了，必须是apple.com，不然后面还会出现其他异常提示。这个写法是一劳永逸。Shadowrocket--> config（配置） --> 修改配置文件 一般是default.conf， 加上面的规则。 操作是一样的