The tag has no usage guidance.

learn more… | top users | synonyms

4
votes
1answer
565 views

Mavericks Server: Unable to use 3rd party SSL Certificates with Open Directory

We have a Mac OS X Server (Mavericks) - Mac OS X: 10.9.2, Server: 3.1 Our Open Directory Master is set up and running but we cannot for the life of us get it to accept our 3rd Party (DigiCert) SSL ...
2
votes
1answer
116 views

Client certificate required after installing certificate

Using safari on OS X 10.8.2 to connect to an internal server via https:, safari indicates a client certificate is required. Tried dragging the certificate from the url field to the desktop and adding ...
1
vote
1answer
21 views

How to add an CA to the default TrustStore in OSX and iOS

Recently, I want to capture the ingress package in iOS, after I installed p12 using Safari. It shows can't establish secure link. However after I add NSAppTransportSecurity/NSAllowsArbitraryLoads = ...
1
vote
1answer
36 views

How to install subordinate CA certificate into keychain from Terminal?

I'm a Windows engineer, setting up a Active Directory PKI, but know very little about Macs. I'm aware of how to install root certificates into the system keychain using: sudo security ...
1
vote
1answer
73 views

Internet Access after renew the expired com.apple.servermgrd certificate

I inherited some months ago a Mac mini server running OS X 10.8.5 Initially, I configured it with the new network settings, DNS name, etc and all was working fine in regard to file sharing, accessing ...
1
vote
1answer
259 views

Private Key and Certificate protection on IOS

I have a question about private key protection on iOS. I simply would like to know if there is a way of protecting client's certificates when importing them to an iPad. For example, when installing ...
0
votes
1answer
99 views

OS X 10.11 CardDAV with self-signed certificate

The CardDAV server I'm trying to connect to uses a self-signed certificate. Unfortunately I cannot do anything about it. In previous OS X versions, when connecting to this server the system asked if ...
0
votes
1answer
34 views

difference between “Development certificate” and “Developer ID certificate”

I am reading the pdf (from Apple) named App Distribution Guide. In page 155 it is written that every team member can create a "Developement certificate", that the team admins can create a ...
0
votes
1answer
2k views

How do I create a profile in Apple Configurator 2?

I'm trying to create a device profile with certificate settings for an iPhone. I have read the docs on profiles for Apple Configurator 2 but still can't figure out how to create a new / default ...
0
votes
1answer
50 views

servermgrd certificate in Yosemite server chain of trust

I am setting up a file server in Yosemite and am trying to remove vulnerabilities so my organization's IT dept will approve. I acquired a trusted SSL certificate and installed it with all of the ...
0
votes
1answer
98 views

iOS 8 - Apps other than Safari won't accept Cyberoam certificate

My college network is secured with Cyberoam network. And Cyberoam requires a certificate it provides to be installed to access SSL secured websites. However, even after installing the certificate only ...
0
votes
1answer
550 views

Identity not found when trying to code-sign an application with a certificate

After properly creating a valid certificate for code signing, when running the command: $ codesign -s CertificateName AppPathName I always get a: CertificateName: no identity found Anyways, When ...
0
votes
1answer
2k views

Revoking and requesting a new distribution certificate in apple dev center

I'm trying update our iOS app through itunes connect. However, I'm having an issue with the iOS distribution certificate when I try to submit to the appstore. This is the error that appears to me: ...
0
votes
1answer
145 views

What are TTComp archive data files and how can i decrypt them?

I am searching for the iOS system-roots keychain. I found a file (certsTable.data) in /System/Library/Frameworks/Security.framework/, it could be, but i can't open it because if i unextract it with ...
2
votes
0answers
620 views

How to avoid display HTTPS certificate warning in Chrome

When I browse with Chrome on a web site that has an invalid certificate for some reason (eg my NAS Synology using HTTPS protocol) a warning message like the following Chrome appears to me: If I ...
2
votes
0answers
61 views

How can I disable a root certificate in iOS?

I want to disable all root certificates in iOS since I'll be using a proxy to access all HTTPS sites. How do I disable all root certs in iOS?
2
votes
0answers
915 views

Remove accepted self-signed certificate from iOS Safari

I was experimenting with self-signed certificates and while viewing my website from Safari on an iPhone I first got the warning that it is an untrusted site and I could review the details of the ...
2
votes
0answers
340 views

Dealing with bad Gmail certificate in Adium

My wife and I are both running current versions of OS X (10.7.2) and Adium (1.4.3). We both use gmail accounts in it for instant messaging. She launched Adium yesterday, and it complained that ...
1
vote
0answers
32 views

Certificate Assistant 5.0 CSR Error

I am trying to create a certificate for someone else with a CA I created in Certificate Assistant. However, certificate assistant will no open the CSR generated by the user. I receive the following: ...
1
vote
0answers
41 views

Client side certificates

I'm trying to set up a site to require client-side certificates for authentication. However when I browse to the site, the only certificates I'm able to present to the webserver are those listed in ...
1
vote
0answers
65 views

Which iOS calendar apps support iCalendar over TLS with client certificate authentication?

For a long time, I have accessed my calendars (iCalendar format, *.ics) via WebDAV over TLS with client certificate authentication. I now want to provide access to my calendars to another person who ...
1
vote
0answers
118 views

Bash script to import RootCA and set it to Always Trust from Server

I am working on a way to import a RootCA into the login keychain of OS X and set it to always trust, the cert is located on a file share server. I am relatively new to the whole Bash scripting scene ...
1
vote
0answers
90 views

How to trust SHA2 cert in OS X?

I have an SSL Root Cert from my Active Directory Root CA, in SHA256(SHA2) format. It most definitely is the root certificate. However, when I import it into either keychain on my Mac it says ...
1
vote
0answers
31 views

Install CA from Command Line?

I run a small PKI at my house. There's not much too it - a CA, a few servers and a client certificate on occasion. I'm looking for a way to install my CA on my iOS devices from the command line. ...
1
vote
0answers
723 views

Mavericks 802.1X .mobileconfig & certificate authentication?

We are using 802.1X connection with "local" certificate at our dormitory. It has been working all well with Moutain Lion, but after upgrading to Mavericks, it just stopped working. The message is: ...
1
vote
0answers
87 views

Cascade Software Update Servers in Mavericks Server SSL

I have 2 OS X servers and I want to mirror the software updates from one server to the other. I've changed metaiIndexURL settings on the second server, but it seems to have a problem with the self ...
1
vote
0answers
43 views

After OD Admin is set up, email now signed with wrong certificate

I installed and set up OS X Mavericks server at the weekend. As part of the process, I configured Open Directory and used my "@mac.com" email address in the OD Administrator setup. I now find that ...
1
vote
0answers
1k views

Unrecognized leaf certificate

Every 15 minutes or so I get this message in my Console(system.log file) Apr 25 22:05:36 Ivans-MacBook-Pro.local apsd[194]: Unrecognized leaf certificate apsd - Apple Push notification Service ...
1
vote
0answers
788 views

L2TP/IPSec with certificate machine auth

Do recent iOS versions (6.x or 7.x) support L2TP/IPsec VPNs where the machine authentication is done using RSA signatures of x509 certificates? The "iOS: Supported protocols for VPN" document seems ...
1
vote
0answers
1k views

safari website requires a client certificate

I went to a site I regularly use and got this when logging in with Safari I seem to have 2 certificated of the same name both issued by Apple and both are not expired (found by searching in ...
1
vote
0answers
463 views

Why do I get an invalid certificate error with my Gmail account in iChat/Messages?

I've had this problem for a long time now, and it's finally bothered me enough to ask. Can anyone explain why I get an invalid certificate error when I try to sign into my @gmail.com account within ...
1
vote
0answers
3k views

How to restore servers signed certificates and private keys?

Starting fresh install of OS X Server on myserver.example.com running Mountain Lion after having saved the private key, intermediate and public certificates on another computer. Now I want to ...
1
vote
0answers
480 views

how to add self signed certificate for smtp on iOS

I would like to use SMTP server that requires (beside password) also installed certificate. Since it's my private server and I don't have money to spare, that certificate is self-signed. Without the ...
0
votes
0answers
43 views

Enable/Disable the list of trusted credentials & certificates on iPhone with iOS 9

On Android, you can see and uncheck a certificate via Security/Trusted credentials. How do you do the same on iOS devices?
0
votes
0answers
84 views

Endless password prompts when trying to export (or otherwise change access) of private key in Mac Mini

I am trying to export certificate and private key into PKCS #12 file (.p12) using Keychain Access.app. The key and associated certificates do exist and I can use them from terminal using codesign for ...
0
votes
0answers
18 views

Is there a way to remove all revoked certs from Keychain Access

That does not involve manually doing it. I.e. some sort of command line tool/script
0
votes
0answers
24 views

iOS SSL certificates issue on VPN

We set up VPN connection from iOS-device to IPSEC server rooting all traffic from applications. - VPN configurations are imported on device with self-signed CA certificate and client certificate for ...
0
votes
0answers
49 views

“Verify Certificate” pops up every time I connect to the network

Every time I connect to the eduroam network, which is secured via PEAP/MSCHAPv2, the “Verify Certificate” dialog box pops up. I have to click “Continue” every time I open my laptop, which gets quite ...
0
votes
0answers
12 views

Can I force-install a CRL?

I've created a CA on another machine and used it to sign server certificates. I added it to my Mac (OSX 10.10), and it validates certs fine in Safari/Chrome. I revoked a server certificate, and ...
0
votes
0answers
163 views

How do I get an iOS Distribution certificate into my developer profile?

How do I get an iOS Distribution certificate into my developer profile? Xcode version is 6.3.2 My goal is to release a built version of my app to the app store for testing. There is an older version ...
0
votes
0answers
38 views

Team member name in a developer certificate

If I had an "organization" Apple Developer account, could the name on the certificate be that of whichever team member built the application, rather than the company name? I'm referring to the name ...
0
votes
0answers
284 views

How to activate TLS 1.0 in Adobe Acrobat on Mac?

I've an issue with filling out an interactive PDF in Adobe Acrobat, so I was suggested to do the following steps in order to fix/activate the authenticate process: Click on Edit in the Toolbar ...
0
votes
0answers
27 views

SMIME cannot assigned in iOS

I can send encrypted and signed e-mails from Thunderbird and Outlook eMail Client. I can also decrypt and verify the emails. The problem is that on iOS I can't enable assign my certificates. In ...
0
votes
0answers
738 views

Invalid Root Certificate (Comodo RSA)

Regulary, a duplicate certificate of COMODO RSA appears on my keychain (Google Chrome?) and when I browse on a website which use a COMODO certificate. Google Chrome blocks the website. (Normal). I ...
0
votes
0answers
286 views

Messed up my keychain and certificates, how I can put it all in factory settings?

I had some problem with SSL authentification in homebrew program and follow a stackoverflow advice to delete Digicert certificates in my keychain, which helped, but since then I couldn't open certain ...
0
votes
0answers
1k views

“Failed to validate certificate” error while launching web based Java application

I am trying to launch a web based java application on OSX 10.9.2 (Macbook Pro Retina late 2013). The first time when I tried to open the .jnlp file it prompted me to install Java RE even though I have ...
0
votes
0answers
89 views

trust self signed certificates from employer

I manually set the permissions to each individual from my employer to Always Trust, is there a way to just Always Trust my companies self signed cert? The biggest problem is email attachments, they ...
0
votes
0answers
89 views

Autokey NTP client?

What's a reasonably short path to getting OS X to be an NTP client of an NTP server, using autokey? I tried adding the server's public keyfile (iffpar) and the appropriate commands in ntp.conf in the ...
0
votes
0answers
174 views

Added site certificate to X509Anchors keychain and STILL can't view page

I added the certificate to the X509Anchors keychain and I STILL can't view FedEx tracking page. It starts to load and then gets cancelled.
0
votes
0answers
243 views

How can I log into a Wi-Fi using .p12 certificates in Lion?

My university provides us .p12 certificates that are used during the authentication to the university Wi-Fi network. All tutorials are written for Snow Leopard (importing certificate from keychain to ...