Questions about importing/creating and using x509 certificates for SSL, IOS & Mac OS X Development. Questions about accessing and using certificates programmatically are off topic. Related tags: security, keychain, developer-program, open-ssl

learn more… | top users | synonyms

0
votes
1answer
3k views

Revoking and requesting a new distribution certificate in apple dev center

I'm trying update our iOS app through itunes connect. However, I'm having an issue with the iOS distribution certificate when I try to submit to the appstore. This is the error that appears to me: ...
0
votes
1answer
29 views

Cannot reach webpage for certificate generation on my developer account

I am trying to reach the webpage for certificates under developer.apple.com. But I get redirected to the Welcome page. My Apple ID is an iCloud address *...@icloud.com. Why does ...
19
votes
5answers
43k views

Safari can't connect to https

Safari suddenly can't connect to any HTTPS site because it "can't establish a secure connection". This is on an administrator account, not a managed account. A different administrator account is ...
0
votes
1answer
84 views

Does My Company Need To Code Sign with Two Digital Certificates? Apple Developer and EV Certificate?

My employer plans to distribute Mac OSX software outside the App Store through their website. Do I need to get an organizational developer ID from Apple ($99 USD/yr) plus purchase an EV code-signing ...
1
vote
0answers
9 views

SCEP Request on Mac

I am looking for a way to issue a SCEP request to my organizations CAIssuing server. I manage a number of Macs and we currently import the certificates by hand using a profile on a web server. I know ...
0
votes
1answer
32 views

Nsurl error domain (1012) subscribing MDM Server

I'm trying to manage iPads with an own MDM-server. I configured the ProfileManagement but it doesn't work (anymore).. I always get an Nsurl error domain 2012 when trying to prepare the iPad (on the ...
3
votes
1answer
115 views

Is there a truly user friendly guide on how to handle iOS Certificates and Provisioning Profiles? – Xcode 7.3 / iOS 9.3

I'm getting a warning that The provisioning profile "iOSTeam Provisioning Profile: *" is expiring soon. I'm not sure what to do and the Apple documentation, even the Quick Start Guide, is overwhelming ...
3
votes
2answers
6k views

Unable to import S/MIME certificate and key into my iPhone (iOS7)

I tried to generate a S/MIME certificate from comodo.com. On my Mac it perfectly works. But I am unable to use it on iOS 7. This is what I did: generate certificate on Mac export certificate and ...
1
vote
4answers
8k views

Safari not loading Gmail; Google/YouTube invalid certificate

I've tried changing DNS servers to OpenDNS's, I've cleared my history and website data from Safari, and I've uninstalled all extensions… but the browser just won't load Gmail! Whether I click on Sign ...
0
votes
0answers
29 views

Why does OS X repeatedly prompt for certificate trust when joining WPA2 Enterprise WiFi

WHY does OS X always prompt for certificate trust when connecting to WPA2 Enterprise (EAP-PEAP in my case) networks, even if the certificate is already marked as 'trusted'? Even weirder.. if I delete ...
0
votes
0answers
15 views

Certificate Assistant doesn't let me specify key pair informations

I'm trying to generate a CSR using the Certificate Assistant on El Capitan, and I'd like to specify the key size. The problem is that even if I check the checkbox Let me specify key pair information, ...
1
vote
1answer
37 views

Is it possible to detect any certificates not packaged by Apple?

I recently received a Mac and connected to my employer's network. When I connected, my Mac (not browser, it was in the connection dialog) asked me to do something with a new certificate. I ...
0
votes
2answers
3k views

How do I create a profile in Apple Configurator 2?

I'm trying to create a device profile with certificate settings for an iPhone. I have read the docs on profiles for Apple Configurator 2 but still can't figure out how to create a new / default ...
0
votes
0answers
47 views

Duplicate Apple ID Keys?

Why do I have all these duplicate public (& one duplicate private) Apple ID keys? & Can I remove the extras so I just have one public & one private key? There is no identifying information ...
11
votes
5answers
18k views

“This copy of the Install OSX Mavericks…” error message via USB boot

I have an old Leopard MBP and a 2013 Mavericks iMac. I want to install Mavericks on the Leopard MBP, but had no success since. Here's what I did. I downloaded Mavericks from the MAS on the iMac I ...
7
votes
3answers
5k views

How do I get com.apple.servermgrd to use a non-self-signed SSL certificate?

I have received a valid SSL certificate for my Mountain Lion Server (10.8.2 Build 12C3104) and have installed that cert for use by all services (and SSL and other services do not pop up the "Verify ...
4
votes
1answer
623 views

Mavericks Server: Unable to use 3rd party SSL Certificates with Open Directory

We have a Mac OS X Server (Mavericks) - Mac OS X: 10.9.2, Server: 3.1 Our Open Directory Master is set up and running but we cannot for the life of us get it to accept our 3rd Party (DigiCert) SSL ...
1
vote
1answer
126 views

How to add an CA to the default TrustStore in OSX and iOS

Recently, I want to capture the ingress package in iOS, after I installed p12 using Safari. It shows can't establish secure link. However after I add NSAppTransportSecurity/NSAllowsArbitraryLoads = ...
1
vote
1answer
109 views

Internet Access after renew the expired com.apple.servermgrd certificate

I inherited some months ago a Mac mini server running OS X 10.8.5 Initially, I configured it with the new network settings, DNS name, etc and all was working fine in regard to file sharing, accessing ...
2
votes
2answers
140 views

Where do certificates come from?

On my system when I check Keychain Access I often find new certificates. They get put there behind the scenes. Is that normal? When does this happen? Is there a way I can get alerted when a ...
1
vote
1answer
42 views

Where are the root CAs stored on OS X?

I need one of the root CA certificates, as a filename, to pass to a command-line program. I could download it from DigiCert (and convert it to the required format, .crt) manually, but I figure it's ...
0
votes
0answers
122 views

Enable/Disable the list of trusted credentials & certificates on iPhone with iOS 9

On Android, you can see and uncheck a certificate via Security/Trusted credentials. How do you do the same on iOS devices?
3
votes
1answer
48 views

Python-based app requires bypassing 'unknown developer' warning

Using a Python utility called py2app, I've built a distributable .app. from a Python-based project. It launches fine (when double-clicked) on my own machine, yet when tried elsewhere (other users on ...
1
vote
1answer
89 views

How to install subordinate CA certificate into keychain from Terminal?

I'm a Windows engineer, setting up a Active Directory PKI, but know very little about Macs. I'm aware of how to install root certificates into the system keychain using: sudo security ...
0
votes
1answer
62 views

servermgrd certificate in Yosemite server chain of trust

I am setting up a file server in Yosemite and am trying to remove vulnerabilities so my organization's IT dept will approve. I acquired a trusted SSL certificate and installed it with all of the ...
9
votes
2answers
2k views

Unable to export .p12 certificate from Keychain Access [duplicate]

I'm trying to export a Developer certificate from Keychain Access. I've followed all the instructions and got to the point where I need to enter the "login" keychain password. However, when I enter ...
0
votes
0answers
227 views

Endless password prompts when trying to export (or otherwise change access) of private key in Mac Mini

I am trying to export certificate and private key into PKCS #12 file (.p12) using Keychain Access.app. The key and associated certificates do exist and I can use them from terminal using codesign for ...
3
votes
1answer
824 views

Where can I see the installed profiles in iOS9

Where is Settings > General > Profile in iOS 9? I was part of a testing-team for an iOS app and using testflight. Back then, under iOS 6, I had to install a profile on my iPhone. Now, years ...
0
votes
1answer
165 views

OS X Safari Comodo SSL issue

Strange issue on OS X Safari - visit Skiplex UK and you will receive an alert 'Safari can't verify the identity of the website "www.skiplex.co.uk".'. I have been advised by Comodo and our hosting ...
2
votes
2answers
3k views

How can I Change the Apple Configuration Signing Certificate?

I use the Apple Configurator to craft a Mobile Configuration Profile able to configure some settings such as the LDAP Directory as an example. When exporting the profile, I check the "Sign" checkbox ...
1
vote
1answer
484 views

“This certificate was signed by an untrusted issuer”: what's causing such an error?

I am having trouble with a specific financial services provider; every time I try to visit myvisaaccount.com to check my card balance etc, I get the dreaded Chrome red strikethrough https and x-ed ...
3
votes
1answer
102 views

When replacing an expired Enterprise Distribution certificate, do I have to resign the whole App?

Our Customer has an Enterprise Distribution certificate. We are signing their Apps and distribute them to their devices via Airwatch MDM. Their Enterprise Distribution certificate is about to expire ...
0
votes
0answers
28 views

Is there a way to remove all revoked certs from Keychain Access

That does not involve manually doing it. I.e. some sort of command line tool/script
1
vote
1answer
253 views

identity.apple.com/pushcert not loading

I'm trying to renew my Apple Push Notification Service certificate per the 30 day notification email I received. The email instructed me to visit http://identity.apple.com/pushcert to renew the ...
2
votes
1answer
71 views

Generate Safari Developer Certificate for building extensions

I have gone through this link.But everything seems to be changed. Everything redirects to Apple Development Program.So is it mandatory to enroll in that development program to create a safari ...
0
votes
1answer
166 views

OS X 10.11 CardDAV with self-signed certificate

The CardDAV server I'm trying to connect to uses a self-signed certificate. Unfortunately I cannot do anything about it. In previous OS X versions, when connecting to this server the system asked if ...
0
votes
0answers
28 views

iOS SSL certificates issue on VPN

We set up VPN connection from iOS-device to IPSEC server rooting all traffic from applications. - VPN configurations are imported on device with self-signed CA certificate and client certificate for ...
4
votes
1answer
336 views

Mac App Store apps damaged? [duplicate]

Overnight, TextWrangler crashed with a message "TextWrangler" is damaged and can't be opened. I deleted "TextWrangler" and download it again from the App Store. I couldn't update from the Mac App ...
28
votes
4answers
25k views

“iTunes can’t verify the identity of the server …” after a Security Update in Mavericks or upgrade to El Capitan

Prior to the security update released early April my system was working fine. After that, I'm getting invalid certificates everywhere: iTunes says "iTunes can’t verify the identity of the server ...
1
vote
0answers
51 views

Certificate Assistant 5.0 CSR Error

I am trying to create a certificate for someone else with a CA I created in Certificate Assistant. However, certificate assistant will no open the CSR generated by the user. I receive the following: ...
0
votes
1answer
91 views

difference between “Development certificate” and “Developer ID certificate”

I am reading the pdf (from Apple) named App Distribution Guide. In page 155 it is written that every team member can create a "Developement certificate", that the team admins can create a ...
2
votes
1answer
103 views

OS X - Signing installer/application

I would like to sign my OS X installer using company certificate. I have .cer and .p12 files. I wonder if there is some way to do that without creating keychain. E.g. in 'productsign' tool flag --cert ...
0
votes
0answers
82 views

“Verify Certificate” pops up every time I connect to the network

Every time I connect to the eduroam network, which is secured via PEAP/MSCHAPv2, the “Verify Certificate” dialog box pops up. I have to click “Continue” every time I open my laptop, which gets quite ...
0
votes
2answers
563 views

Certificate signed by an unknown authority in keychain after upgrading to El Capitan

I've found a random certificate in my keychain after upgrading to El Capitan‎ on both my Macs. It's called "ENTIDAD PUBLICA EMPRESARIAL RED.ES". It's showing a warning that it was signed by an unknown ...
9
votes
3answers
11k views

View SSL/TLS certificate in Safari 5+ when no padlock icon shown

According to Apple, With Safari 5 through 5.1.7, a lock icon appears near the top right corner [only] if all of the webpage's content uses a secure connection. That's all very well, but ...
1
vote
1answer
4k views

Why is the CAcert root certificate not trusted on iOS devices?

I distinctly remember that when I bought my first iPhone and iPad a couple of years back, I was able to install the CAcert root certificate on those devices and iOS would trust the certificate. These ...
0
votes
1answer
1k views

“This certificate was signed by an untrusted issuer” problem after updating to El Capitan

Most of the https connections returns that. Most of them is signed by Symantec. But not all. I tried to google the problem, but with no luck, seems like I only the one who experiencing this problem. ...
40
votes
3answers
112k views

How do I transfer my iOS developer profile to another computer?

I got a new MBP and would like to transfer my certificates and profiles from my old computer. According to TN 2250, under "Transferring Your Identities," I need to transfer three sets of items: all ...
0
votes
0answers
15 views

Can I force-install a CRL?

I've created a CA on another machine and used it to sign server certificates. I added it to my Mac (OSX 10.10), and it validates certs fine in Safari/Chrome. I revoked a server certificate, and ...
0
votes
0answers
254 views

How do I get an iOS Distribution certificate into my developer profile?

How do I get an iOS Distribution certificate into my developer profile? Xcode version is 6.3.2 My goal is to release a built version of my app to the app store for testing. There is an older version ...