The tag has no usage guidance.

learn more… | top users | synonyms

-1
votes
0answers
35 views

openssl version on OSX 10.11.3

I'm on OS X 10.11.3 El Capitan It seems that I am using openssl 0.9.8zg. Could that be right? ~ ❯❯❯ openssl version OpenSSL 0.9.8zg 14 July 2015 ~ ❯❯❯ whereis openssl /usr/bin/openssl ~ ❯❯❯ ...
0
votes
0answers
20 views

Three identical SMTP server configurations, one succeeds, two fail in Mail

I have three e-mail accounts each with a different domain name, however all of them send e-mail via the same domain name via SMTP (but each has its own login credentials). To clarify, it looks ...
0
votes
0answers
26 views

How can I determine what build or version of Secure Transport my MacBook is using?

I know that modern versions of OS X use Secure Transport instead of OpenSSL for TLS/SSL. However, I cannot find any indication of the specific version/build of Secure Transport that is being used. ...
0
votes
0answers
43 views

Adobe Acrobat Reader DC / Acrobat Pro Data Submission TLS Issues

This question is somewhat related to this one (http://apple.stackexchange.com/questions/201310/how-to-activate-tls-1-0-in-adobe-acrobat-on-mac), as I've seen the same behavior in both Adobe Reader DC ...
0
votes
1answer
92 views

OS X Safari Comodo SSL issue

Strange issue on OS X Safari - visit Skiplex UK and you will receive an alert 'Safari can't verify the identity of the website "www.skiplex.co.uk".'. I have been advised by Comodo and our hosting ...
1
vote
1answer
144 views

How to make a clean install of OpenSSL on El Capitan

I'm afraid I have made a mess with the version (0.9.8zg) of OpenSSL which was installed on my Mac. While I was trying to update it, now I have some error and for some reasons applications like Apache ...
0
votes
0answers
41 views

Mac OS X El Capitan: Symbol not found: _SSLv2_client_method

I was trying to update openssl so that it could use libssl.1.0.0 instead of libssl.0.9.8.dylib So I moved the two files /usr/lib/libssl.0.9.8.dylib and /usr/lib/libssl.0.9.7.dylib into my home and I ...
1
vote
1answer
127 views

“This certificate was signed by an untrusted issuer”: what's causing such an error?

I am having trouble with a specific financial services provider; every time I try to visit myvisaaccount.com to check my card balance etc, I get the dreaded Chrome red strikethrough https and x-ed ...
1
vote
1answer
51 views

How do you remove SSL certificate exceptions on OS X?

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), Safari shows a dialog asking whether the certificate should be accepted. If you accept the ...
0
votes
0answers
18 views

Request SSL certificate with 4096-bit key

In Mac OS X I can request SSL certificate form 3rd party Certificate Authority (CA). That could be done in Keychain Access > Certificate assistant > Request a Certificate from a Certificate ...
0
votes
0answers
24 views

iOS SSL certificates issue on VPN

We set up VPN connection from iOS-device to IPSEC server rooting all traffic from applications. - VPN configurations are imported on device with self-signed CA certificate and client certificate for ...
1
vote
1answer
255 views

Client SSL certificate failing in Safari (and what is SOSCCThisDeviceIsInCircle?)

I'm having difficulty using an X.509 certificate to do client authentication from Safari (9.0.1, as on OS X 10.10.5). The symptom is that I go to a https://... site which does client certificate ...
0
votes
1answer
96 views

iOS 8 - Apps other than Safari won't accept Cyberoam certificate

My college network is secured with Cyberoam network. And Cyberoam requires a certificate it provides to be installed to access SSL secured websites. However, even after installing the certificate only ...
1
vote
1answer
70 views

Internet Access after renew the expired com.apple.servermgrd certificate

I inherited some months ago a Mac mini server running OS X 10.8.5 Initially, I configured it with the new network settings, DNS name, etc and all was working fine in regard to file sharing, accessing ...
1
vote
0answers
245 views

NET::ERR_CERT_AUTHORITY_INVALID in Chrome on OS X

I have a site with a Comodo EV SSL installed. When opening the site in Firefox or Safari, the site displays the green lock and the extended EV green bar. However, when opening the same site in chrome, ...
1
vote
1answer
157 views

How to get Safari to accept Untrusted Certs on iOS8? (like Chrome)

It looks like Chrome on iOS8 has the ability to 'user accept' untrusted SSL Certs but Safari simply blocks them with an error. The scenario here is that the phone (and iPad) are viewing an internal ...
0
votes
1answer
63 views

OS X client gets SSL certificate error when trying to join OD

I switched from self signed to signing my own certificates using a CA I created on the server. OS X Server has a list of the certificates outlined in blue now for its hostname, Code Signing ...
0
votes
0answers
27 views

SMIME cannot assigned in iOS

I can send encrypted and signed e-mails from Thunderbird and Outlook eMail Client. I can also decrypt and verify the emails. The problem is that on iOS I can't enable assign my certificates. In ...
0
votes
0answers
597 views

Profile Manager: Enroll gives a error 500

I'm new to iOS and I'm trying to configure a server to use it as a MDM solution via Profile Manager. So far I have: Configured my OS X Server. Added a signed SSL certificate. Sent some invitations ...
1
vote
0answers
429 views

How can I identify the cause of this SSL error in Safari 6?

I was seeing an SSL error in Safari 6.1.6 (8537.78.2) on OSX 10.8.5 when visiting a website, and the debug information provided from the developer tools didn't indicate the source of the issue. The ...
1
vote
2answers
34 views

Disabling password saving for certificates

I work in a HIPAA environment where we purposefully put passwords on our certificates. However, when connecting to one of our servers via SSH, it seems keychain is 'remembering' the password between ...
1
vote
0answers
117 views

Thawte SSL certificate issues after security update 2015-004

After upgrading my Mac to Security update 2015-004 I started experiencing issues on website that use Thawte SSL certificate and with mandrillapp SMTP which as well use Thawte certificate. I'm running ...
2
votes
1answer
113 views

Broken SSL certificates

When trying to access a couple of high-profile websites (*.apple.com, twitter.com) via HTTPS, they've since recently been getting their certificates rejected by some client apps (Chrome, App Store, ...
1
vote
1answer
244 views

How do I determine what TLS ciphers are being used in OSX, Outlook 2011?

I just limited all my SSL ciphers to TLS 1.X and TLS1_RSA_AES and my up-to-date OSX machine is no longer able to connect to the server via Outlook 2011. I can use Safari to connect to the same ...
0
votes
0answers
160 views

How do I remove the fiddler certificate authority?

I used Fiddler as a proxy to my Mac to debug a tricky HTTPS problem. Now that I'm done I'd like to uninstall the certificate authority Fiddler uses to decrypt SSL traffic. I've tried using Keychain ...
1
vote
0answers
65 views

Which iOS calendar apps support iCalendar over TLS with client certificate authentication?

For a long time, I have accessed my calendars (iCalendar format, *.ics) via WebDAV over TLS with client certificate authentication. I now want to provide access to my calendars to another person who ...
0
votes
0answers
46 views

Connect to https without SSL connection

When I am at college I sometimes need to access websites such as http://draw.io (for designing networks diagrams). The only issue is I cannot go to on my own laptop (MacBook Air) since the open Wi-Fi ...
0
votes
1answer
243 views

Cannot access Google services through HTTP (only HTTPS)

I recently reformatted my hard drive and installed OS X 10.10 Yosemite on my Late 2013 Macbook Pro. So far everything's great, but within the last two days I haven't been able to access any google ...
2
votes
1answer
40 views

Is there anything we can do on iOS to stay safe while waiting for Apple to issue an update for the latest FREAK SSL vulnerability?

I guess the vulnerability has been around for a decade [ars technica], but should we just stay away from using any personal information until there is a security patch?
1
vote
0answers
113 views

How do I configure CURL to use the same root certificates as Safari?

It seems that CURL on OS X (10.10) is broken because it does not contain the same set of root SSL certificates as Safari. Due to this it seems that there is a high chance for your to be unable to ...
0
votes
0answers
15 views

Can iOS devices be made to print over SSL?

I configured the Avahi/CUPS combination here and we can now submit print-jobs from iPhones and iPads on the LAN. However, it seems, the job-submissions are not encrypted -- something, I'd like to ...
0
votes
1answer
247 views

Apple Yosemite Server configure secure website

I am running Server 4.0.3 on a Mac Mini running Yosemite 10.10.2 and am having trouble with setting up a secure website. In my DNS, I have a primary zone with a machine record for my website,e.g. ...
0
votes
4answers
4k views

https (ssl secured) local websites are not working in Safari and Chrome in Mac Yosemite. How can I fix this?

As a developer, I will be running and testing the web apps that I am developing locally. But Chrome and Safari are not allowing me to hit my local server with SSL enabled. https://localhost:8443/ ...
2
votes
1answer
569 views

How to view certificate info without installing

I have a certificate and/or private key file (pfx) on my OS X desktop. I'd like to look at its information (CN, SAN, OU, thumbprint, etc) but when I double click on it, it attempts to install into my ...
0
votes
0answers
284 views

Messed up my keychain and certificates, how I can put it all in factory settings?

I had some problem with SSL authentification in homebrew program and follow a stackoverflow advice to delete Digicert certificates in my keychain, which helped, but since then I couldn't open certain ...
1
vote
0answers
88 views

How to trust SHA2 cert in OS X?

I have an SSL Root Cert from my Active Directory Root CA, in SHA256(SHA2) format. It most definitely is the root certificate. However, when I import it into either keychain on my Mac it says ...
1
vote
0answers
319 views

STARTTLS handshake against Apple smtp server fails

Recently, my email setup using Emacs/24.4 + Gnus/5.13 on OX Yosemite stopped working against the Apple smtp server: smtp.mail.me.com. It has been working fine for years before. It seems that it ...
2
votes
1answer
2k views

iOS 8 Safari verify server identity error

We have a site running on https in production. In QA we run it on https but we don't have a valid SSL cert for it. So on iOS Safari 8, we get a error message saying that "Server identity cannot be ...
1
vote
1answer
14k views

View TLS Certificate in Safari 8 / Yosemite

i've installed the new OS X Yosemite recently. Now i'm trying to view the TLS Certificate and the Certificate Chain in the new Safari. In the older versions of Safari one just had to click onto the ...
2
votes
1answer
281 views

What SSL VPN client do you recommend for the mac? [closed]

I am currently using FortiClient. It would be nice to use the native MacOS VPN client (in the Settings) but I don't think it supports SSL VPN. I googled but did not find anything. Does anyone have a ...
0
votes
2answers
61 views

Find out which certificate authorities do not come with the system

I believe that some of the programs I downloaded in the past have installed some root certificate authorities on my Mac (the OS is Mavericks). After learning more about SSL/TLS, I figure that this is ...
1
vote
0answers
314 views

Chrome/Safari Linkedin SSL certificate untrusted issuer

About a week ago after no particular actions from me, I tried to open linkedin.com and I got the screen you see. This happens with Chrome and Safari but not with Firefox. What should I do? Thanks
0
votes
2answers
2k views

Cannot connect to Linked In on Chrome or Safari on OS-X SSL Issue

I tried fixing the issue of not being able to access LinkedLn by installing lots of certs from DigiCert in my Keychain and while that fixed LinkedIn, I then couldn't go to Github.com. I ended up ...
2
votes
2answers
124 views

Make Macports use HTTPS (SSL/TLS) to fetch packages

By default, Macports uses HTTP to fetch packages. For example: ---> Attempting to fetch port_cutleaves-0.1.4_0.darwin_10.noarch.tbz2 from http://lil.fr.packages.macports.org/port_cutleaves How ...
2
votes
1answer
216 views

How do I fix the SSL warning I get when visiting github.com?

I see the following warning when visiting http://www.github.com/ after July 26, 2014. I get this warning in both Chrome and Safari on my OS X Mavericks-equipped iMac. Should I worry about this? How ...
1
vote
2answers
4k views

Safari SSL Errors

What led to the problem While I was trying to fix the Github SSL error caused by the DigiCert certificates, I deleted some of the certificates in the "Keychain Access" application. By doing this I ...
2
votes
1answer
1k views

Maverics VPN to Windows 2008 SSTP with Certificate (PPTP)

I'm unable to connect to a Windows VPN using my macbook air 2013. The VPN Settings given to me are, Server URL Username & Password SSL Ceritificate VPN Type - SSTP I have added image on how to ...
3
votes
1answer
192 views

MacBook cannot connect to non-SSL websites

I have the late 2013 MBP 15″ with Retina and recently I've been unable to connect to websites not using SSL with either Firefox or Safari. This includes other applications that use HTTP such as the ...
0
votes
1answer
628 views

SVN error with certificated self-signed server with error svn: E670008: nodename nor servname provided, or not known

I try to checkout SVN but I face with this issue svn: E670008: Unable to connect to a repository at URL 'https://abc.xyz' svn: E670008: nodename nor servname provided, or not known https://abc.xyz ...
2
votes
2answers
476 views

Postfix SSL/TLS certificates issue

I'm trying to set up postfix to send mail through Gmail's SMTP server on port 587. Here's what I've put in my /etc/postfix/main.cf: relayhost = [smtp.gmail.com]:587 smtp_sasl_auth_enable = yes ...