Questions about importing/creating and using x509 certificates for SSL, IOS & Mac OS X Development. Questions about accessing and using certificates programmatically are off topic. Related tags: security, keychain, developer-program, open-ssl

learn more… | top users | synonyms

0
votes
0answers
12 views

Getting “Certificate signed by untrusted issuer” on Mac

When I try to launch an application that is developed by my company, I get the "Certificate signed by untrusted issuer" error. I checked both these posts. I don't have any certificates in my ...
3
votes
1answer
52 views

Renewing the Developer Program Membership after it expires

My Developer Program Membership (along with the iOS Distribution Certificate - it seems) expires in a couple of weeks. About a week ago, Apple sent me an email implying that I must renew the ...
1
vote
2answers
27 views

Forgot the password of a keychain (non the login one)

I have installed a bunch of certificates on my mac, due to italian legal system, in order to login to a certain website with a smartcard. It all worked well for a few months and then yesterday it ...
0
votes
1answer
45 views

How to forcefully open a blocked Java Applet?

I downloaded from Internet (topcoder.com) a Java applet. When I try to open it, it says "Application blocked for security reasons" because "The certificate has expired". I really want to launch it.....
0
votes
0answers
7 views

*application name* can't verify the identity of the server “*server address*”

I tried multiple methods such as using time and trying to delete the verisign certificates (got the error UNIX[Operation not permitted]. Thanks
0
votes
1answer
63 views

Cannot reach webpage for certificate generation on my developer account

I am trying to reach the webpage for certificates under developer.apple.com. But I get redirected to the Welcome page. My Apple ID is an iCloud address *...@icloud.com. Why does https://developer....
1
vote
0answers
28 views

SCEP Request on Mac

I am looking for a way to issue a SCEP request to my organizations CAIssuing server. I manage a number of Macs and we currently import the certificates by hand using a profile on a web server. I know ...
0
votes
1answer
92 views

Nsurl error domain (1012) subscribing MDM Server

I'm trying to manage iPads with an own MDM-server. I configured the ProfileManagement but it doesn't work (anymore).. I always get an Nsurl error domain 2012 when trying to prepare the iPad (on the ...
1
vote
1answer
84 views

Why does OS X repeatedly prompt for certificate trust when joining WPA2 Enterprise WiFi

WHY does OS X always prompt for certificate trust when connecting to WPA2 Enterprise (EAP-PEAP in my case) networks, even if the certificate is already marked as 'trusted'? Even weirder.. if I delete ...
0
votes
0answers
22 views

Certificate Assistant doesn't let me specify key pair informations

I'm trying to generate a CSR using the Certificate Assistant on El Capitan, and I'd like to specify the key size. The problem is that even if I check the checkbox Let me specify key pair information, ...
3
votes
1answer
154 views

Is there a truly user friendly guide on how to handle iOS Certificates and Provisioning Profiles? – Xcode 7.3 / iOS 9.3

I'm getting a warning that The provisioning profile "iOSTeam Provisioning Profile: *" is expiring soon. I'm not sure what to do and the Apple documentation, even the Quick Start Guide, is overwhelming ...
1
vote
1answer
40 views

Is it possible to detect any certificates not packaged by Apple?

I recently received a Mac and connected to my employer's network. When I connected, my Mac (not browser, it was in the connection dialog) asked me to do something with a new certificate. I ...
0
votes
1answer
105 views

Does My Company Need To Code Sign with Two Digital Certificates? Apple Developer and EV Certificate?

My employer plans to distribute Mac OSX software outside the App Store through their website. Do I need to get an organizational developer ID from Apple ($99 USD/yr) plus purchase an EV code-signing ...
0
votes
0answers
59 views

Duplicate Apple ID Keys?

Why do I have all these duplicate public (& one duplicate private) Apple ID keys? & Can I remove the extras so I just have one public & one private key? There is no identifying information ...
1
vote
1answer
241 views

How to add an CA to the default TrustStore in OSX and iOS

Recently, I want to capture the ingress package in iOS, after I installed p12 using Safari. It shows can't establish secure link. However after I add NSAppTransportSecurity/NSAllowsArbitraryLoads = ...
1
vote
1answer
52 views

Where are the root CAs stored on OS X?

I need one of the root CA certificates, as a filename, to pass to a command-line program. I could download it from DigiCert (and convert it to the required format, .crt) manually, but I figure it's ...
0
votes
0answers
243 views

Enable/Disable the list of trusted credentials & certificates on iPhone with iOS 9

On Android, you can see and uncheck a certificate via Security/Trusted credentials. How do you do the same on iOS devices?
3
votes
1answer
63 views

Python-based app requires bypassing 'unknown developer' warning

Using a Python utility called py2app, I've built a distributable .app. from a Python-based project. It launches fine (when double-clicked) on my own machine, yet when tried elsewhere (other users on ...
0
votes
0answers
305 views

Endless password prompts when trying to export (or otherwise change access) of private key in Mac Mini

I am trying to export certificate and private key into PKCS #12 file (.p12) using Keychain Access.app. The key and associated certificates do exist and I can use them from terminal using codesign for ...
3
votes
1answer
2k views

Where can I see the installed profiles in iOS9

Where is Settings > General > Profile in iOS 9? I was part of a testing-team for an iOS app and using testflight. Back then, under iOS 6, I had to install a profile on my iPhone. Now, years ...
0
votes
1answer
209 views

OS X Safari Comodo SSL issue

Strange issue on OS X Safari - visit Skiplex UK and you will receive an alert 'Safari can't verify the identity of the website "www.skiplex.co.uk".'. I have been advised by Comodo and our hosting ...
1
vote
1answer
781 views

“This certificate was signed by an untrusted issuer”: what's causing such an error?

I am having trouble with a specific financial services provider; every time I try to visit myvisaaccount.com to check my card balance etc, I get the dreaded Chrome red strikethrough https and x-ed ...
3
votes
1answer
141 views

When replacing an expired Enterprise Distribution certificate, do I have to resign the whole App?

Our Customer has an Enterprise Distribution certificate. We are signing their Apps and distribute them to their devices via Airwatch MDM. Their Enterprise Distribution certificate is about to expire ...
0
votes
0answers
45 views

Is there a way to remove all revoked certs from Keychain Access

That does not involve manually doing it. I.e. some sort of command line tool/script
1
vote
1answer
325 views

identity.apple.com/pushcert not loading

I'm trying to renew my Apple Push Notification Service certificate per the 30 day notification email I received. The email instructed me to visit http://identity.apple.com/pushcert to renew the ...
2
votes
1answer
98 views

Generate Safari Developer Certificate for building extensions

I have gone through this link.But everything seems to be changed. Everything redirects to Apple Development Program.So is it mandatory to enroll in that development program to create a safari ...
0
votes
1answer
187 views

OS X 10.11 CardDAV with self-signed certificate

The CardDAV server I'm trying to connect to uses a self-signed certificate. Unfortunately I cannot do anything about it. In previous OS X versions, when connecting to this server the system asked if ...
0
votes
0answers
30 views

iOS SSL certificates issue on VPN

We set up VPN connection from iOS-device to IPSEC server rooting all traffic from applications. - VPN configurations are imported on device with self-signed CA certificate and client certificate for ...
4
votes
1answer
358 views

Mac App Store apps damaged? [duplicate]

Overnight, TextWrangler crashed with a message "TextWrangler" is damaged and can't be opened. I deleted "TextWrangler" and download it again from the App Store. I couldn't update from the Mac App ...
1
vote
0answers
54 views

Certificate Assistant 5.0 CSR Error

I am trying to create a certificate for someone else with a CA I created in Certificate Assistant. However, certificate assistant will no open the CSR generated by the user. I receive the following: ...
0
votes
1answer
185 views

difference between “Development certificate” and “Developer ID certificate”

I am reading the pdf (from Apple) named App Distribution Guide. In page 155 it is written that every team member can create a "Developement certificate", that the team admins can create a "...
1
vote
1answer
108 views

How to install subordinate CA certificate into keychain from Terminal?

I'm a Windows engineer, setting up a Active Directory PKI, but know very little about Macs. I'm aware of how to install root certificates into the system keychain using: sudo security add-trusted-...
9
votes
2answers
3k views

Unable to export .p12 certificate from Keychain Access [duplicate]

I'm trying to export a Developer certificate from Keychain Access. I've followed all the instructions and got to the point where I need to enter the "login" keychain password. However, when I enter ...
0
votes
0answers
111 views

“Verify Certificate” pops up every time I connect to the network

Every time I connect to the eduroam network, which is secured via PEAP/MSCHAPv2, the “Verify Certificate” dialog box pops up. I have to click “Continue” every time I open my laptop, which gets quite ...
2
votes
1answer
129 views

OS X - Signing installer/application

I would like to sign my OS X installer using company certificate. I have .cer and .p12 files. I wonder if there is some way to do that without creating keychain. E.g. in 'productsign' tool flag --cert ...
0
votes
2answers
735 views

Certificate signed by an unknown authority in keychain after upgrading to El Capitan

I've found a random certificate in my keychain after upgrading to El Capitan‎ on both my Macs. It's called "ENTIDAD PUBLICA EMPRESARIAL RED.ES". It's showing a warning that it was signed by an unknown ...
0
votes
2answers
3k views

How do I create a profile in Apple Configurator 2?

I'm trying to create a device profile with certificate settings for an iPhone. I have read the docs on profiles for Apple Configurator 2 but still can't figure out how to create a new / default ...
0
votes
1answer
2k views

“This certificate was signed by an untrusted issuer” problem after updating to El Capitan

Most of the https connections returns that. Most of them is signed by Symantec. But not all. I tried to google the problem, but with no luck, seems like I only the one who experiencing this problem. ...
0
votes
0answers
17 views

Can I force-install a CRL?

I've created a CA on another machine and used it to sign server certificates. I added it to my Mac (OSX 10.10), and it validates certs fine in Safari/Chrome. I revoked a server certificate, and ...
0
votes
0answers
299 views

How do I get an iOS Distribution certificate into my developer profile?

How do I get an iOS Distribution certificate into my developer profile? Xcode version is 6.3.2 My goal is to release a built version of my app to the app store for testing. There is an older version ...
0
votes
1answer
74 views

servermgrd certificate in Yosemite server chain of trust

I am setting up a file server in Yosemite and am trying to remove vulnerabilities so my organization's IT dept will approve. I acquired a trusted SSL certificate and installed it with all of the ...
0
votes
1answer
151 views

iOS 8 - Apps other than Safari won't accept Cyberoam certificate

My college network is secured with Cyberoam network. And Cyberoam requires a certificate it provides to be installed to access SSL secured websites. However, even after installing the certificate only ...
0
votes
0answers
79 views

Team member name in a developer certificate

If I had an "organization" Apple Developer account, could the name on the certificate be that of whichever team member built the application, rather than the company name? I'm referring to the name ...
0
votes
0answers
502 views

How to activate TLS 1.0 in Adobe Acrobat on Mac?

I've an issue with filling out an interactive PDF in Adobe Acrobat, so I was suggested to do the following steps in order to fix/activate the authenticate process: Click on Edit in the Toolbar ...
1
vote
1answer
136 views

Internet Access after renew the expired com.apple.servermgrd certificate

I inherited some months ago a Mac mini server running OS X 10.8.5 Initially, I configured it with the new network settings, DNS name, etc and all was working fine in regard to file sharing, accessing ...
0
votes
1answer
1k views

Identity not found when trying to code-sign an application with a certificate

After properly creating a valid certificate for code signing, when running the command: $ codesign -s CertificateName AppPathName I always get a: CertificateName: no identity found Anyways, When ...
0
votes
1answer
4k views

Revoking and requesting a new distribution certificate in apple dev center

I'm trying update our iOS app through itunes connect. However, I'm having an issue with the iOS distribution certificate when I try to submit to the appstore. This is the error that appears to me: ...
0
votes
0answers
957 views

Invalid Root Certificate (Comodo RSA)

Regulary, a duplicate certificate of COMODO RSA appears on my keychain (Google Chrome?) and when I browse on a website which use a COMODO certificate. Google Chrome blocks the website. (Normal). I ...
29
votes
4answers
26k views

“iTunes can’t verify the identity of the server …” after a Security Update in Mavericks or upgrade to El Capitan

Prior to the security update released early April my system was working fine. After that, I'm getting invalid certificates everywhere: iTunes says "iTunes can’t verify the identity of the server “...
1
vote
1answer
264 views

Safari, iTunes, Chrome etc. won't recognize root certificates after recent update to Safari 7.1.5 (Mavericks)

After installing the most recent security and Safari updates (7.1.5) on Mavericks, Safari and other applications (those using NSURLConnection/CFURLConnection) no longer recognize any root certificates ...