Questions about importing/creating and using x509 certificates for SSL, IOS & Mac OS X Development. Questions about accessing and using certificates programmatically are off topic. Related tags: security, keychain, developer-program, open-ssl

learn more… | top users | synonyms

4
votes
1answer
669 views

Mavericks Server: Unable to use 3rd party SSL Certificates with Open Directory

We have a Mac OS X Server (Mavericks) - Mac OS X: 10.9.2, Server: 3.1 Our Open Directory Master is set up and running but we cannot for the life of us get it to accept our 3rd Party (DigiCert) SSL ...
2
votes
1answer
121 views

Client certificate required after installing certificate

Using safari on OS X 10.8.2 to connect to an internal server via https:, safari indicates a client certificate is required. Tried dragging the certificate from the url field to the desktop and adding ...
1
vote
1answer
86 views

Why does OS X repeatedly prompt for certificate trust when joining WPA2 Enterprise WiFi

WHY does OS X always prompt for certificate trust when connecting to WPA2 Enterprise (EAP-PEAP in my case) networks, even if the certificate is already marked as 'trusted'? Even weirder.. if I delete ...
1
vote
1answer
242 views

How to add an CA to the default TrustStore in OSX and iOS

Recently, I want to capture the ingress package in iOS, after I installed p12 using Safari. It shows can't establish secure link. However after I add NSAppTransportSecurity/NSAllowsArbitraryLoads = ...
1
vote
1answer
108 views

How to install subordinate CA certificate into keychain from Terminal?

I'm a Windows engineer, setting up a Active Directory PKI, but know very little about Macs. I'm aware of how to install root certificates into the system keychain using: sudo security add-trusted-...
1
vote
1answer
136 views

Internet Access after renew the expired com.apple.servermgrd certificate

I inherited some months ago a Mac mini server running OS X 10.8.5 Initially, I configured it with the new network settings, DNS name, etc and all was working fine in regard to file sharing, accessing ...
1
vote
1answer
304 views

Private Key and Certificate protection on IOS

I have a question about private key protection on iOS. I simply would like to know if there is a way of protecting client's certificates when importing them to an iPad. For example, when installing ...
0
votes
1answer
18 views
+50

Getting “Certificate signed by untrusted issuer” on Mac

When I try to launch an application that is developed by my company, I get the "Certificate signed by untrusted issuer" error. I checked both these posts. I don't have any certificates in my ...
0
votes
1answer
105 views

Does My Company Need To Code Sign with Two Digital Certificates? Apple Developer and EV Certificate?

My employer plans to distribute Mac OSX software outside the App Store through their website. Do I need to get an organizational developer ID from Apple ($99 USD/yr) plus purchase an EV code-signing ...
0
votes
1answer
187 views

OS X 10.11 CardDAV with self-signed certificate

The CardDAV server I'm trying to connect to uses a self-signed certificate. Unfortunately I cannot do anything about it. In previous OS X versions, when connecting to this server the system asked if ...
0
votes
1answer
187 views

difference between “Development certificate” and “Developer ID certificate”

I am reading the pdf (from Apple) named App Distribution Guide. In page 155 it is written that every team member can create a "Developement certificate", that the team admins can create a "...
3
votes
0answers
993 views

Remove accepted self-signed certificate from iOS Safari

I was experimenting with self-signed certificates and while viewing my website from Safari on an iPhone I first got the warning that it is an untrusted site and I could review the details of the ...
2
votes
0answers
721 views

How to avoid display HTTPS certificate warning in Chrome

When I browse with Chrome on a web site that has an invalid certificate for some reason (eg my NAS Synology using HTTPS protocol) a warning message like the following Chrome appears to me: If I ...
2
votes
0answers
64 views

How can I disable a root certificate in iOS?

I want to disable all root certificates in iOS since I'll be using a proxy to access all HTTPS sites. How do I disable all root certs in iOS?
2
votes
0answers
340 views

Dealing with bad Gmail certificate in Adium

My wife and I are both running current versions of OS X (10.7.2) and Adium (1.4.3). We both use gmail accounts in it for instant messaging. She launched Adium yesterday, and it complained that Gmail'...
1
vote
0answers
31 views

SCEP Request on Mac

I am looking for a way to issue a SCEP request to my organizations CAIssuing server. I manage a number of Macs and we currently import the certificates by hand using a profile on a web server. I know ...
1
vote
0answers
54 views

Certificate Assistant 5.0 CSR Error

I am trying to create a certificate for someone else with a CA I created in Certificate Assistant. However, certificate assistant will no open the CSR generated by the user. I receive the following: ...
1
vote
0answers
50 views

Client side certificates

I'm trying to set up a site to require client-side certificates for authentication. However when I browse to the site, the only certificates I'm able to present to the webserver are those listed in ...
1
vote
0answers
74 views

Which iOS calendar apps support iCalendar over TLS with client certificate authentication?

For a long time, I have accessed my calendars (iCalendar format, *.ics) via WebDAV over TLS with client certificate authentication. I now want to provide access to my calendars to another person who ...
1
vote
0answers
149 views

Bash script to import RootCA and set it to Always Trust from Server

I am working on a way to import a RootCA into the login keychain of OS X and set it to always trust, the cert is located on a file share server. I am relatively new to the whole Bash scripting scene ...
1
vote
0answers
115 views

How to trust SHA2 cert in OS X?

I have an SSL Root Cert from my Active Directory Root CA, in SHA256(SHA2) format. It most definitely is the root certificate. However, when I import it into either keychain on my Mac it says ...
1
vote
0answers
32 views

Install CA from Command Line?

I run a small PKI at my house. There's not much too it - a CA, a few servers and a client certificate on occasion. I'm looking for a way to install my CA on my iOS devices from the command line. ...
1
vote
0answers
858 views

Mavericks 802.1X .mobileconfig & certificate authentication?

We are using 802.1X connection with "local" certificate at our dormitory. It has been working all well with Moutain Lion, but after upgrading to Mavericks, it just stopped working. The message is: ...
1
vote
0answers
91 views

Cascade Software Update Servers in Mavericks Server SSL

I have 2 OS X servers and I want to mirror the software updates from one server to the other. I've changed metaiIndexURL settings on the second server, but it seems to have a problem with the self ...
1
vote
0answers
50 views

After OD Admin is set up, email now signed with wrong certificate

I installed and set up OS X Mavericks server at the weekend. As part of the process, I configured Open Directory and used my "@mac.com" email address in the OD Administrator setup. I now find that ...
1
vote
0answers
1k views

Unrecognized leaf certificate

Every 15 minutes or so I get this message in my Console(system.log file) Apr 25 22:05:36 Ivans-MacBook-Pro.local apsd[194]: Unrecognized leaf certificate apsd - Apple Push notification Service ...
1
vote
0answers
897 views

L2TP/IPSec with certificate machine auth

Do recent iOS versions (6.x or 7.x) support L2TP/IPsec VPNs where the machine authentication is done using RSA signatures of x509 certificates? The "iOS: Supported protocols for VPN" document seems ...
1
vote
0answers
1k views

safari website requires a client certificate

I went to a site I regularly use and got this when logging in with Safari I seem to have 2 certificated of the same name both issued by Apple and both are not expired (found by searching in ...
1
vote
0answers
485 views

Why do I get an invalid certificate error with my Gmail account in iChat/Messages?

I've had this problem for a long time now, and it's finally bothered me enough to ask. Can anyone explain why I get an invalid certificate error when I try to sign into my @gmail.com account within ...
1
vote
0answers
3k views

How to restore servers signed certificates and private keys?

Starting fresh install of OS X Server on myserver.example.com running Mountain Lion after having saved the private key, intermediate and public certificates on another computer. Now I want to ...
1
vote
0answers
526 views

how to add self signed certificate for smtp on iOS

I would like to use SMTP server that requires (beside password) also installed certificate. Since it's my private server and I don't have money to spare, that certificate is self-signed. Without the ...
0
votes
0answers
7 views

*application name* can't verify the identity of the server “*server address*”

I tried multiple methods such as using time and trying to delete the verisign certificates (got the error UNIX[Operation not permitted]. Thanks
0
votes
0answers
22 views

Certificate Assistant doesn't let me specify key pair informations

I'm trying to generate a CSR using the Certificate Assistant on El Capitan, and I'd like to specify the key size. The problem is that even if I check the checkbox Let me specify key pair information, ...
0
votes
0answers
59 views

Duplicate Apple ID Keys?

Why do I have all these duplicate public (& one duplicate private) Apple ID keys? & Can I remove the extras so I just have one public & one private key? There is no identifying information ...
0
votes
0answers
243 views

Enable/Disable the list of trusted credentials & certificates on iPhone with iOS 9

On Android, you can see and uncheck a certificate via Security/Trusted credentials. How do you do the same on iOS devices?
0
votes
0answers
307 views

Endless password prompts when trying to export (or otherwise change access) of private key in Mac Mini

I am trying to export certificate and private key into PKCS #12 file (.p12) using Keychain Access.app. The key and associated certificates do exist and I can use them from terminal using codesign for ...
0
votes
0answers
45 views

Is there a way to remove all revoked certs from Keychain Access

That does not involve manually doing it. I.e. some sort of command line tool/script
0
votes
0answers
30 views

iOS SSL certificates issue on VPN

We set up VPN connection from iOS-device to IPSEC server rooting all traffic from applications. - VPN configurations are imported on device with self-signed CA certificate and client certificate for ...
0
votes
0answers
111 views

“Verify Certificate” pops up every time I connect to the network

Every time I connect to the eduroam network, which is secured via PEAP/MSCHAPv2, the “Verify Certificate” dialog box pops up. I have to click “Continue” every time I open my laptop, which gets quite ...
0
votes
0answers
17 views

Can I force-install a CRL?

I've created a CA on another machine and used it to sign server certificates. I added it to my Mac (OSX 10.10), and it validates certs fine in Safari/Chrome. I revoked a server certificate, and ...
0
votes
0answers
299 views

How do I get an iOS Distribution certificate into my developer profile?

How do I get an iOS Distribution certificate into my developer profile? Xcode version is 6.3.2 My goal is to release a built version of my app to the app store for testing. There is an older version ...
0
votes
0answers
79 views

Team member name in a developer certificate

If I had an "organization" Apple Developer account, could the name on the certificate be that of whichever team member built the application, rather than the company name? I'm referring to the name ...
0
votes
0answers
502 views

How to activate TLS 1.0 in Adobe Acrobat on Mac?

I've an issue with filling out an interactive PDF in Adobe Acrobat, so I was suggested to do the following steps in order to fix/activate the authenticate process: Click on Edit in the Toolbar ...
0
votes
0answers
957 views

Invalid Root Certificate (Comodo RSA)

Regulary, a duplicate certificate of COMODO RSA appears on my keychain (Google Chrome?) and when I browse on a website which use a COMODO certificate. Google Chrome blocks the website. (Normal). I ...
0
votes
0answers
347 views

Messed up my keychain and certificates, how I can put it all in factory settings?

I had some problem with SSL authentification in homebrew program and follow a stackoverflow advice to delete Digicert certificates in my keychain, which helped, but since then I couldn't open certain ...
0
votes
0answers
2k views

“Failed to validate certificate” error while launching web based Java application

I am trying to launch a web based java application on OSX 10.9.2 (Macbook Pro Retina late 2013). The first time when I tried to open the .jnlp file it prompted me to install Java RE even though I have ...
0
votes
0answers
106 views

trust self signed certificates from employer

I manually set the permissions to each individual from my employer to Always Trust, is there a way to just Always Trust my companies self signed cert? The biggest problem is email attachments, they ...
0
votes
0answers
106 views

Autokey NTP client?

What's a reasonably short path to getting OS X to be an NTP client of an NTP server, using autokey? I tried adding the server's public keyfile (iffpar) and the appropriate commands in ntp.conf in the ...
0
votes
0answers
187 views

Added site certificate to X509Anchors keychain and STILL can't view page

I added the certificate to the X509Anchors keychain and I STILL can't view FedEx tracking page. It starts to load and then gets cancelled.
0
votes
0answers
262 views

How can I log into a Wi-Fi using .p12 certificates in Lion?

My university provides us .p12 certificates that are used during the authentication to the university Wi-Fi network. All tutorials are written for Snow Leopard (importing certificate from keychain to ...