0
votes
2answers
23 views

What security settings should one use with Keychain?

I'm a new to Mac and found that Keychain has gathered quite a lot of passwords so far. I'm concerned about the security of these data, and I would like what security settings would you recommend so ...
1
vote
0answers
29 views

Non-extractable private key in Keychain Access.app

The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported. How is this ...
0
votes
0answers
43 views

Getting verify certificate errors after adding Google Account & iCloud keychain problem?

I keep getting a verify certificate error whenever I add my Google Account. The domina is an old company I used to work at and I have removed all account in reference to that account. However I get ...
0
votes
0answers
45 views

Using custom Certificate Authority for SSL websites with Safari on OS X 10.9.4

I have followed the directions here (http://datacenteroverlords.com/2012/03/01/creating-your-own-ssl-certificate-authority/) to create a CA and SSL certs signed by the CA for my own internal websites. ...
0
votes
0answers
18 views

How do I import a SMIME certificate and automatically set the Keychain trust?

We are deploying SMIME certificates to all clients and we need to ensure that these certificates are only trusted for email. Given that our users are "unmanaged" and off the corporate network, how ...
1
vote
0answers
42 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
1
vote
1answer
32 views

Keychain: ask for certificate from command line

Is it possible to ask for certificate (.certificateRequest file) from command line? I want to mimic behavior like Keychain -> Certificate Assistant -> Request for Certificate in Certificate Buro from ...
0
votes
1answer
100 views

Why when I increase SSL certificate security on my mac am I unable to use the app store (preflight error)?

Given the recent OSX issues with certificates and SSL, I want to increase the security of the certificate validation in general. I came across a setting in the keychain that has a selection between ...
2
votes
3answers
89 views

How can I get Apple mail or Outlook 2011 to look up SMIME encryption certificates for users?

I want the ability to lookup an encryption certificate for SMIME in Outlook for recipients who have SMIME certs, but I just don't have their public key. I noticed the keychain has a directory ...
4
votes
2answers
3k views

How safe is iCloud Keychain?

Say I installed a malicious app on my iPhone that stole my iCloud password. Can the Keychain be compromised ? Basically, can the keychain passwords be accessed by solely having the iCloud password ? ...
6
votes
2answers
508 views

Mail on OS X: Choose which X.509 certificate to use for signing mails

I've got multiple X.509 certificates from different CA's for different purposes -- for example, one from CAcert.org, and another one from my university. Both have different advantages and ...
1
vote
2answers
333 views

Keychain passwords suggestions that I can't remember, how do I log in from a different pc

I hope that I put it right, that you guys understand. Everywhere I read that Keychain can suggest strong passwords and remember them so I don't have to remember them. Works wonderful. The thing is, ...
0
votes
0answers
59 views

server's certificate

MacPro1,1, OSX 10.7.5 A couple of days ago Apple eliminated my "grandfathered" email server and security settings. Support did direct me to the new settings, but never explained why they changed them ...
0
votes
0answers
138 views

How to stop trusting a self-signed certificate on OSX 10.8.5?

This is an odd one. I have a web server that presents a self-signed certificate when accessed over HTTPS. Previously, I marked this certificate as "trusted", so it appeared as such in the Keychain ...
4
votes
1answer
117 views

My mother changed her session password and now the system can't unlock the “login” keychain

The title says most of it. My mother changed her password through the Accounts pane of System Preferences to a lengthy one (17 characters) about three weeks ago. Then, the next day, she left for ...
1
vote
1answer
181 views

Keychain Access is empty

When I open my keychain access, it is empty. I can't see anything in it. However, I know that all of my stuff is still working (websites don't prompt me to log in, I join wifi networks, Xcode still ...
0
votes
0answers
213 views

Always get a Security Error for Internal HTTPS Website

My company recently changed an internal site to use HTTPS instead of HTTP (it is our Jira site in case that matters). From what I can tell, this site is using an internal certificate. On our work ...
2
votes
4answers
130 views

Does Console.app also log passwords?

I'm a newb of OS X (or any flavor of *Nix for that matter) so this came to mind lately.. As the Console.app logs every single process that's running, does to also mean passwords & such are also ...
1
vote
1answer
358 views

How are passwords stored by Apple TV?

Apple TV stores a number of passwords (or some kind of credentials) needed to access services like Vimeo and YouTube, as well as the Apple IDs needed to access the iTunes Store (and the now defunct ...
1
vote
1answer
1k views

Where are Safari 6.0 passwords saved?

Prior to version 6.0 Safari had no features for managing passwords distinct from the system wide support provided by Keychain: but Safari 6.0 adds a new tab in its Preferences dialog for saving and ...
1
vote
3answers
197 views

Are these root certificates suspicious?

On a fresh install of Leopard when I look at the root certificates this is what I see when I order them by expiration date. I find the names, dates, and number of certificates suspicious. Is this ...
12
votes
4answers
3k views

How is the System Keychain secured in OS X?

I'm looking for something either like this security white paper for iOS except for OS X or even better, some kind of security audit report from an independent expert. After reading through ...
2
votes
2answers
532 views

Getting errors when trying to send something using Gmail and Mail 5

I've had a problem for awhile with a Gmail account linked to Mail, which arose last summer after I upgraded to Lion. When I try to send a signed message (signed, in terms of security, not a signature ...
2
votes
0answers
106 views

Where do certificates come from?

On my system when I check Keychain Access I often find new certificates. They get put there behind the scenes. Is that normal? When does this happen? Is there a way I can get alerted when a ...
1
vote
2answers
1k views

How to delete or untrust all root certificates in OSX?

In Keychain Access it looks like you can only untrust/delete certificates one at a time. But there are a lot of certificates I want to get rid of. How can I take care of them all at the same time? ...
1
vote
2answers
291 views

How do I create a passwordless keychain?

Just what the title says - how can I create passwordless keychain on OS X? Using 10.7.1 OS X