Questions about importing/creating and using x509 certificates for SSL, IOS & Mac OS X Development. Questions about accessing and using certificates programmatically are off topic. Related tags: security, keychain, developer-program, open-ssl

learn more… | top users | synonyms

41
votes
3answers
114k views

How do I transfer my iOS developer profile to another computer?

I got a new MBP and would like to transfer my certificates and profiles from my old computer. According to TN 2250, under "Transferring Your Identities," I need to transfer three sets of items: all ...
28
votes
4answers
25k views

“iTunes can’t verify the identity of the server …” after a Security Update in Mavericks or upgrade to El Capitan

Prior to the security update released early April my system was working fine. After that, I'm getting invalid certificates everywhere: iTunes says "iTunes can’t verify the identity of the server “...
20
votes
6answers
46k views

Safari can't connect to https

Safari suddenly can't connect to any HTTPS site because it "can't establish a secure connection". This is on an administrator account, not a managed account. A different administrator account is ...
11
votes
5answers
19k views

“This copy of the Install OSX Mavericks…” error message via USB boot

I have an old Leopard MBP and a 2013 Mavericks iMac. I want to install Mavericks on the Leopard MBP, but had no success since. Here's what I did. I downloaded Mavericks from the MAS on the iMac I ...
9
votes
2answers
2k views

Unable to export .p12 certificate from Keychain Access [duplicate]

I'm trying to export a Developer certificate from Keychain Access. I've followed all the instructions and got to the point where I need to enter the "login" keychain password. However, when I enter ...
9
votes
3answers
11k views

View SSL/TLS certificate in Safari 5+ when no padlock icon shown

According to Apple, With Safari 5 through 5.1.7, a lock icon appears near the top right corner [only] if all of the webpage's content uses a secure connection. That's all very well, but ...
8
votes
2answers
2k views

iPad Mail client - IMAP with X.509 client certificates?

Short version: Does anyone know if X.509 client certificates are supposed to work on the iPad for IMAP mail? Am I wasting my time trying to get a feature that doesn't work to work? If the built-in ...
7
votes
3answers
5k views

How do I get com.apple.servermgrd to use a non-self-signed SSL certificate?

I have received a valid SSL certificate for my Mountain Lion Server (10.8.2 Build 12C3104) and have installed that cert for use by all services (and SSL and other services do not pop up the "Verify ...
7
votes
2answers
10k views

Certificate error when using Chrome for iOS with company CA

I am using an iPad with Google Chrome installed to access the internet. I have downloaded and installed the Netbox Blue certificate authority from their website. I can currently access https:// ...
6
votes
1answer
3k views

Mac OS X (10.9) and 8192 bit certificates - Error -67762

I've only recently upgraded to Mavericks and hence I'm not entirely sure whether this is a Mavericks only problem or not, but here it is: Security update 2006-007 apparently broke 8192-bit ...
6
votes
2answers
2k views

Enable a CRL endpoint for my CA in Keychain Access

I have a Certificate Authority and I'd like to configure CRL. Is there a way to do this in Keychain Access? (I am running OS X Server).
5
votes
1answer
515 views

how do you load the US Department of Defense Certificate into an iPhone?

How do you load the US Department of Defense SSL certificate (or any SSL certificate) into iOS?
4
votes
1answer
350 views

Mac App Store apps damaged? [duplicate]

Overnight, TextWrangler crashed with a message "TextWrangler" is damaged and can't be opened. I deleted "TextWrangler" and download it again from the App Store. I couldn't update from the Mac App ...
4
votes
1answer
2k views

How to view certificate info without installing

I have a certificate and/or private key file (pfx) on my OS X desktop. I'd like to look at its information (CN, SAN, OU, thumbprint, etc) but when I double click on it, it attempts to install into my ...
4
votes
1answer
651 views

Mavericks Server: Unable to use 3rd party SSL Certificates with Open Directory

We have a Mac OS X Server (Mavericks) - Mac OS X: 10.9.2, Server: 3.1 Our Open Directory Master is set up and running but we cannot for the life of us get it to accept our 3rd Party (DigiCert) SSL ...
3
votes
3answers
28k views

Safari not accepting website certificate

I've been using an internal website at work without any issues until today when I received the error message: "Safari can't open the page "https://...". The error is: "The server "..." did not ...
3
votes
2answers
6k views

Deleted all certificates by mistake. How to recreate?

I started seeing an issue in Chrome (38 on OSX 10.7.5) accessing GitHub. I got a Privacy error. One of the recommendations on SuperUser, and the reply I got from GitHub support, was to delete all ...
3
votes
2answers
2k views

What are the trusted Certificate Authorities in iOS?

I'm wondering if StartCom is a trusted CA on iOS. I'd like to setup a mail server for a TLD, and use their free certificate. It's only about $10/year cheaper than more well known authorities, so the ...
3
votes
1answer
1k views

Where can I see the installed profiles in iOS9

Where is Settings > General > Profile in iOS 9? I was part of a testing-team for an iOS app and using testflight. Back then, under iOS 6, I had to install a profile on my iPhone. Now, years ...
3
votes
1answer
3k views

How do I view or verify signed .mobileconfig files using Terminal?

I need to troubleshoot problems with signed .mobileconfig profiles. How can I show the signature of a these files using Terminal? Is it also possible to verify the certificates that were used to sign ...
3
votes
1answer
57 views

Python-based app requires bypassing 'unknown developer' warning

Using a Python utility called py2app, I've built a distributable .app. from a Python-based project. It launches fine (when double-clicked) on my own machine, yet when tried elsewhere (other users on ...
3
votes
1answer
143 views

Is there a truly user friendly guide on how to handle iOS Certificates and Provisioning Profiles? – Xcode 7.3 / iOS 9.3

I'm getting a warning that The provisioning profile "iOSTeam Provisioning Profile: *" is expiring soon. I'm not sure what to do and the Apple documentation, even the Quick Start Guide, is overwhelming ...
3
votes
1answer
126 views

When replacing an expired Enterprise Distribution certificate, do I have to resign the whole App?

Our Customer has an Enterprise Distribution certificate. We are signing their Apps and distribute them to their devices via Airwatch MDM. Their Enterprise Distribution certificate is about to expire ...
3
votes
1answer
12k views

Removing trusted certificate from Mail in iOS 8

My IMAP (and SMTP) server used a self signed certificate. Once I marked the certificate as "trusted" in the Mail app, is there a way to remove that trust again? I tried deleting and re-creating the ...
3
votes
0answers
986 views

Remove accepted self-signed certificate from iOS Safari

I was experimenting with self-signed certificates and while viewing my website from Safari on an iPhone I first got the warning that it is an untrusted site and I could review the details of the ...
3
votes
2answers
6k views

Unable to import S/MIME certificate and key into my iPhone (iOS7)

I tried to generate a S/MIME certificate from comodo.com. On my Mac it perfectly works. But I am unable to use it on iOS 7. This is what I did: generate certificate on Mac export certificate and ...
3
votes
0answers
2k views

iOS Enterprise developer Account: apns certificate for push notification [closed]

I have used the iOS development account for creating apns ssl certificate for sending push notification to iOS device for development purpose.I can get the device token using objective c sample code ...
3
votes
4answers
2k views

CA storage for cURL on Mavericks

I was troubleshooting a problem with Arcanist and Phabricator on MacOSX, a cURL/60 error, but it wasn't clear how to check where the php curl libraries were getting their Certificate Authority trust ...
2
votes
2answers
3k views

How can I Change the Apple Configuration Signing Certificate?

I use the Apple Configurator to craft a Mobile Configuration Profile able to configure some settings such as the LDAP Directory as an example. When exporting the profile, I check the "Sign" checkbox ...
2
votes
3answers
360 views

Are these root certificates suspicious?

On a fresh install of Leopard when I look at the root certificates this is what I see when I order them by expiration date. I find the names, dates, and number of certificates suspicious. Is this ...
2
votes
1answer
4k views

Server certificates are not properly validated by subversion/openssl

I noticed that the svn cli fails to validate https certificates and always ask for manual validation using the certificate fingerprint: mbp:~ user$ svn co https://svn.mysite.com/svn/testrepo Error ...
2
votes
3answers
886 views

Getting errors when trying to send something using Gmail and Mail 5

I've had a problem for awhile with a Gmail account linked to Mail, which arose last summer after I upgraded to Lion. When I try to send a signed message (signed, in terms of security, not a signature ...
2
votes
1answer
88 views

Generate Safari Developer Certificate for building extensions

I have gone through this link.But everything seems to be changed. Everything redirects to Apple Development Program.So is it mandatory to enroll in that development program to create a safari ...
2
votes
1answer
114 views

OS X - Signing installer/application

I would like to sign my OS X installer using company certificate. I have .cer and .p12 files. I wonder if there is some way to do that without creating keychain. E.g. in 'productsign' tool flag --cert ...
2
votes
1answer
432 views

Unable to create iOS App Development certificate

I am trying to create a iOS development certificate in the dev center on apple. When I go to create a certificate the "OS App Development" option is greyed out and I am unable to select it. This has ...
2
votes
1answer
230 views

How do I fix the SSL warning I get when visiting github.com?

I see the following warning when visiting http://www.github.com/ after July 26, 2014. I get this warning in both Chrome and Safari on my OS X Mavericks-equipped iMac. Should I worry about this? How ...
2
votes
1answer
2k views

How to delete a trusted s/mime certificate for a contact in iOS7

How do I remove a s/mime certificate for a contact in iOS7 mail.app? I'm using s/mime for two-way encrypted emails with several colleagues. A new colleague tried to install s/mime in Outlook for ...
2
votes
1answer
476 views

How to purchase a gift certificate in iTunes store?

My iTunes version is 11.1.3.8 (downloaded and installed today) and this is on Windows 7 x64. Locale is Iceland, recipient locale is Germany. The gift certificate is intended to be used for in-app ...
2
votes
0answers
701 views

How to avoid display HTTPS certificate warning in Chrome

When I browse with Chrome on a web site that has an invalid certificate for some reason (eg my NAS Synology using HTTPS protocol) a warning message like the following Chrome appears to me: If I ...
2
votes
0answers
63 views

How can I disable a root certificate in iOS?

I want to disable all root certificates in iOS since I'll be using a proxy to access all HTTPS sites. How do I disable all root certs in iOS?
2
votes
2answers
2k views

'No machine certificates found' when adding machine certificate into VPN

I've 2 certificates, one for user authentication and another for machine authentication. My user authentication includes certificate and private key based on which I've generated pkcs12 file using ...
2
votes
1answer
121 views

Client certificate required after installing certificate

Using safari on OS X 10.8.2 to connect to an internal server via https:, safari indicates a client certificate is required. Tried dragging the certificate from the url field to the desktop and adding ...
2
votes
2answers
140 views

Where do certificates come from?

On my system when I check Keychain Access I often find new certificates. They get put there behind the scenes. Is that normal? When does this happen? Is there a way I can get alerted when a ...
2
votes
0answers
340 views

Dealing with bad Gmail certificate in Adium

My wife and I are both running current versions of OS X (10.7.2) and Adium (1.4.3). We both use gmail accounts in it for instant messaging. She launched Adium yesterday, and it complained that Gmail'...
1
vote
2answers
3k views

How to delete or untrust all root certificates in OSX?

In Keychain Access it looks like you can only untrust/delete certificates one at a time. But there are a lot of certificates I want to get rid of. How can I take care of them all at the same time? ...
1
vote
1answer
39 views

Is it possible to detect any certificates not packaged by Apple?

I recently received a Mac and connected to my employer's network. When I connected, my Mac (not browser, it was in the connection dialog) asked me to do something with a new certificate. I ...
1
vote
2answers
853 views

What password does OSX Server use when importing SSL certificates?

I am migrating my website away from my home OSX server to a virtual Linux server, hosted within a proper data centre, and I have a problem with the SSL certificates I imported into OSX Server. It ...
1
vote
1answer
18k views

View TLS Certificate in Safari 8 / Yosemite

i've installed the new OS X Yosemite recently. Now i'm trying to view the TLS Certificate and the Certificate Chain in the new Safari. In the older versions of Safari one just had to click onto the ...
1
vote
1answer
48 views

Where are the root CAs stored on OS X?

I need one of the root CA certificates, as a filename, to pass to a command-line program. I could download it from DigiCert (and convert it to the required format, .crt) manually, but I figure it's ...
1
vote
1answer
257 views

Safari, iTunes, Chrome etc. won't recognize root certificates after recent update to Safari 7.1.5 (Mavericks)

After installing the most recent security and Safari updates (7.1.5) on Mavericks, Safari and other applications (those using NSURLConnection/CFURLConnection) no longer recognize any root certificates ...