Questions about importing/creating and using x509 certificates for SSL, IOS & Mac OS X Development. Questions about accessing and using certificates programmatically are off topic. Related tags: security, keychain, developer-program, open-ssl

learn more… | top users | synonyms

0
votes
1answer
32 views

Cannot reach webpage for certificate generation on my developer account

I am trying to reach the webpage for certificates under developer.apple.com. But I get redirected to the Welcome page. My Apple ID is an iCloud address *...@icloud.com. Why does ...
1
vote
0answers
9 views

SCEP Request on Mac

I am looking for a way to issue a SCEP request to my organizations CAIssuing server. I manage a number of Macs and we currently import the certificates by hand using a profile on a web server. I know ...
0
votes
1answer
33 views

Nsurl error domain (1012) subscribing MDM Server

I'm trying to manage iPads with an own MDM-server. I configured the ProfileManagement but it doesn't work (anymore).. I always get an Nsurl error domain 2012 when trying to prepare the iPad (on the ...
1
vote
1answer
35 views

Why does OS X repeatedly prompt for certificate trust when joining WPA2 Enterprise WiFi

WHY does OS X always prompt for certificate trust when connecting to WPA2 Enterprise (EAP-PEAP in my case) networks, even if the certificate is already marked as 'trusted'? Even weirder.. if I delete ...
0
votes
0answers
15 views

Certificate Assistant doesn't let me specify key pair informations

I'm trying to generate a CSR using the Certificate Assistant on El Capitan, and I'd like to specify the key size. The problem is that even if I check the checkbox Let me specify key pair information, ...
3
votes
1answer
119 views

Is there a truly user friendly guide on how to handle iOS Certificates and Provisioning Profiles? – Xcode 7.3 / iOS 9.3

I'm getting a warning that The provisioning profile "iOSTeam Provisioning Profile: *" is expiring soon. I'm not sure what to do and the Apple documentation, even the Quick Start Guide, is overwhelming ...
1
vote
1answer
37 views

Is it possible to detect any certificates not packaged by Apple?

I recently received a Mac and connected to my employer's network. When I connected, my Mac (not browser, it was in the connection dialog) asked me to do something with a new certificate. I ...
0
votes
1answer
84 views

Does My Company Need To Code Sign with Two Digital Certificates? Apple Developer and EV Certificate?

My employer plans to distribute Mac OSX software outside the App Store through their website. Do I need to get an organizational developer ID from Apple ($99 USD/yr) plus purchase an EV code-signing ...
0
votes
0answers
47 views

Duplicate Apple ID Keys?

Why do I have all these duplicate public (& one duplicate private) Apple ID keys? & Can I remove the extras so I just have one public & one private key? There is no identifying information ...
1
vote
1answer
127 views

How to add an CA to the default TrustStore in OSX and iOS

Recently, I want to capture the ingress package in iOS, after I installed p12 using Safari. It shows can't establish secure link. However after I add NSAppTransportSecurity/NSAllowsArbitraryLoads = ...
1
vote
1answer
42 views

Where are the root CAs stored on OS X?

I need one of the root CA certificates, as a filename, to pass to a command-line program. I could download it from DigiCert (and convert it to the required format, .crt) manually, but I figure it's ...
0
votes
0answers
124 views

Enable/Disable the list of trusted credentials & certificates on iPhone with iOS 9

On Android, you can see and uncheck a certificate via Security/Trusted credentials. How do you do the same on iOS devices?
3
votes
1answer
48 views

Python-based app requires bypassing 'unknown developer' warning

Using a Python utility called py2app, I've built a distributable .app. from a Python-based project. It launches fine (when double-clicked) on my own machine, yet when tried elsewhere (other users on ...
0
votes
0answers
227 views

Endless password prompts when trying to export (or otherwise change access) of private key in Mac Mini

I am trying to export certificate and private key into PKCS #12 file (.p12) using Keychain Access.app. The key and associated certificates do exist and I can use them from terminal using codesign for ...
3
votes
1answer
826 views

Where can I see the installed profiles in iOS9

Where is Settings > General > Profile in iOS 9? I was part of a testing-team for an iOS app and using testflight. Back then, under iOS 6, I had to install a profile on my iPhone. Now, years ...
0
votes
1answer
165 views

OS X Safari Comodo SSL issue

Strange issue on OS X Safari - visit Skiplex UK and you will receive an alert 'Safari can't verify the identity of the website "www.skiplex.co.uk".'. I have been advised by Comodo and our hosting ...
1
vote
1answer
489 views

“This certificate was signed by an untrusted issuer”: what's causing such an error?

I am having trouble with a specific financial services provider; every time I try to visit myvisaaccount.com to check my card balance etc, I get the dreaded Chrome red strikethrough https and x-ed ...
3
votes
1answer
102 views

When replacing an expired Enterprise Distribution certificate, do I have to resign the whole App?

Our Customer has an Enterprise Distribution certificate. We are signing their Apps and distribute them to their devices via Airwatch MDM. Their Enterprise Distribution certificate is about to expire ...
0
votes
0answers
28 views

Is there a way to remove all revoked certs from Keychain Access

That does not involve manually doing it. I.e. some sort of command line tool/script
1
vote
1answer
253 views

identity.apple.com/pushcert not loading

I'm trying to renew my Apple Push Notification Service certificate per the 30 day notification email I received. The email instructed me to visit http://identity.apple.com/pushcert to renew the ...
2
votes
1answer
71 views

Generate Safari Developer Certificate for building extensions

I have gone through this link.But everything seems to be changed. Everything redirects to Apple Development Program.So is it mandatory to enroll in that development program to create a safari ...
0
votes
1answer
167 views

OS X 10.11 CardDAV with self-signed certificate

The CardDAV server I'm trying to connect to uses a self-signed certificate. Unfortunately I cannot do anything about it. In previous OS X versions, when connecting to this server the system asked if ...
0
votes
0answers
28 views

iOS SSL certificates issue on VPN

We set up VPN connection from iOS-device to IPSEC server rooting all traffic from applications. - VPN configurations are imported on device with self-signed CA certificate and client certificate for ...
4
votes
1answer
336 views

Mac App Store apps damaged? [duplicate]

Overnight, TextWrangler crashed with a message "TextWrangler" is damaged and can't be opened. I deleted "TextWrangler" and download it again from the App Store. I couldn't update from the Mac App ...
1
vote
0answers
51 views

Certificate Assistant 5.0 CSR Error

I am trying to create a certificate for someone else with a CA I created in Certificate Assistant. However, certificate assistant will no open the CSR generated by the user. I receive the following: ...
0
votes
1answer
92 views

difference between “Development certificate” and “Developer ID certificate”

I am reading the pdf (from Apple) named App Distribution Guide. In page 155 it is written that every team member can create a "Developement certificate", that the team admins can create a ...
1
vote
1answer
89 views

How to install subordinate CA certificate into keychain from Terminal?

I'm a Windows engineer, setting up a Active Directory PKI, but know very little about Macs. I'm aware of how to install root certificates into the system keychain using: sudo security ...
9
votes
2answers
2k views

Unable to export .p12 certificate from Keychain Access [duplicate]

I'm trying to export a Developer certificate from Keychain Access. I've followed all the instructions and got to the point where I need to enter the "login" keychain password. However, when I enter ...
0
votes
0answers
82 views

“Verify Certificate” pops up every time I connect to the network

Every time I connect to the eduroam network, which is secured via PEAP/MSCHAPv2, the “Verify Certificate” dialog box pops up. I have to click “Continue” every time I open my laptop, which gets quite ...
2
votes
1answer
103 views

OS X - Signing installer/application

I would like to sign my OS X installer using company certificate. I have .cer and .p12 files. I wonder if there is some way to do that without creating keychain. E.g. in 'productsign' tool flag --cert ...
0
votes
2answers
565 views

Certificate signed by an unknown authority in keychain after upgrading to El Capitan

I've found a random certificate in my keychain after upgrading to El Capitan‎ on both my Macs. It's called "ENTIDAD PUBLICA EMPRESARIAL RED.ES". It's showing a warning that it was signed by an unknown ...
0
votes
2answers
3k views

How do I create a profile in Apple Configurator 2?

I'm trying to create a device profile with certificate settings for an iPhone. I have read the docs on profiles for Apple Configurator 2 but still can't figure out how to create a new / default ...
0
votes
1answer
1k views

“This certificate was signed by an untrusted issuer” problem after updating to El Capitan

Most of the https connections returns that. Most of them is signed by Symantec. But not all. I tried to google the problem, but with no luck, seems like I only the one who experiencing this problem. ...
0
votes
0answers
15 views

Can I force-install a CRL?

I've created a CA on another machine and used it to sign server certificates. I added it to my Mac (OSX 10.10), and it validates certs fine in Safari/Chrome. I revoked a server certificate, and ...
0
votes
0answers
255 views

How do I get an iOS Distribution certificate into my developer profile?

How do I get an iOS Distribution certificate into my developer profile? Xcode version is 6.3.2 My goal is to release a built version of my app to the app store for testing. There is an older version ...
0
votes
1answer
62 views

servermgrd certificate in Yosemite server chain of trust

I am setting up a file server in Yosemite and am trying to remove vulnerabilities so my organization's IT dept will approve. I acquired a trusted SSL certificate and installed it with all of the ...
0
votes
1answer
126 views

iOS 8 - Apps other than Safari won't accept Cyberoam certificate

My college network is secured with Cyberoam network. And Cyberoam requires a certificate it provides to be installed to access SSL secured websites. However, even after installing the certificate only ...
0
votes
0answers
63 views

Team member name in a developer certificate

If I had an "organization" Apple Developer account, could the name on the certificate be that of whichever team member built the application, rather than the company name? I'm referring to the name ...
0
votes
0answers
474 views

How to activate TLS 1.0 in Adobe Acrobat on Mac?

I've an issue with filling out an interactive PDF in Adobe Acrobat, so I was suggested to do the following steps in order to fix/activate the authenticate process: Click on Edit in the Toolbar ...
1
vote
1answer
109 views

Internet Access after renew the expired com.apple.servermgrd certificate

I inherited some months ago a Mac mini server running OS X 10.8.5 Initially, I configured it with the new network settings, DNS name, etc and all was working fine in regard to file sharing, accessing ...
0
votes
0answers
38 views

SMIME cannot assigned in iOS

I can send encrypted and signed e-mails from Thunderbird and Outlook eMail Client. I can also decrypt and verify the emails. The problem is that on iOS I can't enable assign my certificates. In ...
0
votes
1answer
1k views

Identity not found when trying to code-sign an application with a certificate

After properly creating a valid certificate for code signing, when running the command: $ codesign -s CertificateName AppPathName I always get a: CertificateName: no identity found Anyways, When ...
0
votes
1answer
3k views

Revoking and requesting a new distribution certificate in apple dev center

I'm trying update our iOS app through itunes connect. However, I'm having an issue with the iOS distribution certificate when I try to submit to the appstore. This is the error that appears to me: ...
0
votes
0answers
886 views

Invalid Root Certificate (Comodo RSA)

Regulary, a duplicate certificate of COMODO RSA appears on my keychain (Google Chrome?) and when I browse on a website which use a COMODO certificate. Google Chrome blocks the website. (Normal). I ...
28
votes
4answers
25k views

“iTunes can’t verify the identity of the server …” after a Security Update in Mavericks or upgrade to El Capitan

Prior to the security update released early April my system was working fine. After that, I'm getting invalid certificates everywhere: iTunes says "iTunes can’t verify the identity of the server ...
1
vote
1answer
257 views

Safari, iTunes, Chrome etc. won't recognize root certificates after recent update to Safari 7.1.5 (Mavericks)

After installing the most recent security and Safari updates (7.1.5) on Mavericks, Safari and other applications (those using NSURLConnection/CFURLConnection) no longer recognize any root certificates ...
1
vote
0answers
47 views

Client side certificates

I'm trying to set up a site to require client-side certificates for authentication. However when I browse to the site, the only certificates I'm able to present to the webserver are those listed in ...
1
vote
0answers
68 views

Which iOS calendar apps support iCalendar over TLS with client certificate authentication?

For a long time, I have accessed my calendars (iCalendar format, *.ics) via WebDAV over TLS with client certificate authentication. I now want to provide access to my calendars to another person who ...
2
votes
1answer
413 views

Unable to create iOS App Development certificate

I am trying to create a iOS development certificate in the dev center on apple. When I go to create a certificate the "OS App Development" option is greyed out and I am unable to select it. This has ...
1
vote
0answers
138 views

Bash script to import RootCA and set it to Always Trust from Server

I am working on a way to import a RootCA into the login keychain of OS X and set it to always trust, the cert is located on a file share server. I am relatively new to the whole Bash scripting scene ...