The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
20 views

Disabling password saving for certificates

I work in a HIPAA environment where we purposefully put passwords on our certificates. However, when connecting to one of our servers via SSH, it seems keychain is 'remembering' the password between ...
1
vote
0answers
54 views

Thawte SSL certificate issues after security update 2015-004

After upgrading my Mac to Security update 2015-004 I started experiencing issues on website that use Thawte SSL certificate and with mandrillapp SMTP which as well use Thawte certificate. I'm running ...
2
votes
1answer
46 views

Broken SSL certificates

When trying to access a couple of high-profile websites (*.apple.com, twitter.com) via HTTPS, they've since recently been getting their certificates rejected by some client apps (Chrome, App Store, ...
1
vote
1answer
52 views

How do I determine what TLS ciphers are being used in OSX, Outlook 2011?

I just limited all my SSL ciphers to TLS 1.X and TLS1_RSA_AES and my up-to-date OSX machine is no longer able to connect to the server via Outlook 2011. I can use Safari to connect to the same ...
0
votes
0answers
27 views

How do I remove the fiddler certificate authority?

I used Fiddler as a proxy to my Mac to debug a tricky HTTPS problem. Now that I'm done I'd like to uninstall the certificate authority Fiddler uses to decrypt SSL traffic. I've tried using Keychain ...
1
vote
0answers
46 views

Which iOS calendar apps support iCalendar over TLS with client certificate authentication?

For a long time, I have accessed my calendars (iCalendar format, *.ics) via WebDAV over TLS with client certificate authentication. I now want to provide access to my calendars to another person who ...
0
votes
0answers
23 views

Connect to https without SSL connection

When I am at college I sometimes need to access websites such as http://draw.io (for designing networks diagrams). The only issue is I cannot go to on my own laptop (MacBook Air) since the open Wi-Fi ...
0
votes
1answer
103 views

Cannot access Google services through HTTP (only HTTPS)

I recently reformatted my hard drive and installed OS X 10.10 Yosemite on my Late 2013 Macbook Pro. So far everything's great, but within the last two days I haven't been able to access any google ...
2
votes
1answer
35 views

Is there anything we can do on iOS to stay safe while waiting for Apple to issue an update for the latest FREAK SSL vulnerability?

I guess the vulnerability has been around for a decade [ars technica], but should we just stay away from using any personal information until there is a security patch?
1
vote
0answers
38 views

How do I configure CURL to use the same root certificates as Safari?

It seems that CURL on OS X (10.10) is broken because it does not contain the same set of root SSL certificates as Safari. Due to this it seems that there is a high chance for your to be unable to ...
0
votes
0answers
13 views

Can iOS devices be made to print over SSL?

I configured the Avahi/CUPS combination here and we can now submit print-jobs from iPhones and iPads on the LAN. However, it seems, the job-submissions are not encrypted -- something, I'd like to ...
0
votes
1answer
146 views

Apple Yosemite Server configure secure website

I am running Server 4.0.3 on a Mac Mini running Yosemite 10.10.2 and am having trouble with setting up a secure website. In my DNS, I have a primary zone with a machine record for my website,e.g. ...
0
votes
4answers
1k views

https ( ssl secured ) local websites are not working in Safari and chrome in Mac Yosemeti. How can I fix this?

As a developer, I will be running and testing the webapps that I am developing in my local. But Chrome and safari are not allowing me to hit my local server with ssl enabled. ...
0
votes
0answers
195 views

Certificate mix up and warnings on OS X Yosemite

Since upgrading to Yosemite, Mail and Safari seem to be getting their Certificates mixed up. For example, when checking email Mail.app will tell me the certificate looks invalid, and that the hostname ...
2
votes
1answer
75 views

How to view certificate info without installing

I have a certificate and/or private key file (pfx) on my OS X desktop. I'd like to look at its information (CN, SAN, OU, thumbprint, etc) but when I double click on it, it attempts to install into my ...
0
votes
0answers
121 views

Messed up my keychain and certificates, how I can put it all in factory settings?

I had some problem with SSL authentification in homebrew program and follow a stackoverflow advice to delete Digicert certificates in my keychain, which helped, but since then I couldn't open certain ...
1
vote
0answers
48 views

How to trust SHA2 cert in OS X?

I have an SSL Root Cert from my Active Directory Root CA, in SHA256(SHA2) format. It most definitely is the root certificate. However, when I import it into either keychain on my Mac it says ...
0
votes
0answers
129 views

How does Mail.app do SMTP with iCloud servers?

I am trying to troubleshoot the connection between me and the iCloud servers at smtp.mail.me.com. It works for Mail.app, but I need to know what's going on (so I can replicate this within my iOS ...
1
vote
0answers
226 views

STARTTLS handshake against Apple smtp server fails

Recently, my email setup using Emacs/24.4 + Gnus/5.13 on OX Yosemite stopped working against the Apple smtp server: smtp.mail.me.com. It has been working fine for years before. It seems that it ...
2
votes
1answer
1k views

iOS 8 Safari verify server identity error

We have a site running on https in production. In QA we run it on https but we don't have a valid SSL cert for it. So on iOS Safari 8, we get a error message saying that "Server identity cannot be ...
1
vote
1answer
5k views

View TLS Certificate in Safari 8 / Yosemite

i've installed the new OS X Yosemite recently. Now i'm trying to view the TLS Certificate and the Certificate Chain in the new Safari. In the older versions of Safari one just had to click onto the ...
1
vote
0answers
126 views

What SSL VPN client do you recommend for the mac?

I am currently using FortiClient. It would be nice to use the native MacOS VPN client (in the Settings) but I don't think it supports SSL VPN. I googled but did not find anything. Does anyone have a ...
0
votes
2answers
34 views

Find out which certificate authorities do not come with the system

I believe that some of the programs I downloaded in the past have installed some root certificate authorities on my Mac (the OS is Mavericks). After learning more about SSL/TLS, I figure that this is ...
0
votes
0answers
251 views

Chrome/Safari Linkedin SSL certificate untrusted issuer

About a week ago after no particular actions from me, I tried to open linkedin.com and I got the screen you see. This happens with Chrome and Safari but not with Firefox. What should I do? Thanks
0
votes
2answers
945 views

Cannot connect to Linked In on Chrome or Safari on OS-X SSL Issue

I tried fixing the issue of not being able to access LinkedLn by installing lots of certs from DigiCert in my Keychain and while that fixed LinkedIn, I then couldn't go to Github.com. I ended up ...
0
votes
0answers
205 views

xcode - Bot creation failed with error: An SSL error has occurred and a secure connection to the server cannot be made

I am trying to create a bot on my server running 10.9, and I keep getting the following error: Bot creation failed with error: An SSL error has occurred and a secure connection to the server ...
2
votes
2answers
82 views

Make Macports use HTTPS (SSL/TLS) to fetch packages

By default, Macports uses HTTP to fetch packages. For example: ---> Attempting to fetch port_cutleaves-0.1.4_0.darwin_10.noarch.tbz2 from http://lil.fr.packages.macports.org/port_cutleaves How ...
2
votes
1answer
160 views

How do I fix the SSL warning I get when visiting github.com?

I see the following warning when visiting http://www.github.com/ after July 26, 2014. I get this warning in both Chrome and Safari on my OS X Mavericks-equipped iMac. Should I worry about this? How ...
1
vote
2answers
2k views

Safari SSL Errors

What led to the problem While I was trying to fix the Github SSL error caused by the DigiCert certificates, I deleted some of the certificates in the "Keychain Access" application. By doing this I ...
1
vote
1answer
576 views

Maverics VPN to Windows 2008 SSTP with Certificate (PPTP)

I'm unable to connect to a Windows VPN using my macbook air 2013. The VPN Settings given to me are, Server URL Username & Password SSL Ceritificate VPN Type - SSTP I have added image on how to ...
0
votes
0answers
218 views

Using custom Certificate Authority for SSL websites with Safari on OS X 10.9.4

I have followed the directions here (http://datacenteroverlords.com/2012/03/01/creating-your-own-ssl-certificate-authority/) to create a CA and SSL certs signed by the CA for my own internal websites. ...
3
votes
1answer
135 views

MacBook cannot connect to non-SSL websites

I have the late 2013 MBP 15″ with Retina and recently I've been unable to connect to websites not using SSL with either Firefox or Safari. This includes other applications that use HTTP such as the ...
0
votes
1answer
378 views

SVN error with certificated self-signed server with error svn: E670008: nodename nor servname provided, or not known

I try to checkout SVN but I face with this issue svn: E670008: Unable to connect to a repository at URL 'https://abc.xyz' svn: E670008: nodename nor servname provided, or not known https://abc.xyz ...
1
vote
1answer
246 views

Postfix SSL/TLS certificates issue

I'm trying to set up postfix to send mail through Gmail's SMTP server on port 587. Here's what I've put in my /etc/postfix/main.cf: relayhost = [smtp.gmail.com]:587 smtp_sasl_auth_enable = yes ...
4
votes
3answers
8k views

Chrome showing the site's security certificate is not trusted for GitHub

Today, out of no-where Chrome just started showing invalid SSL certificate errors for popular sites like Github, Stripe, etc. The site's security certificate is not trusted! I know the SSL ...
0
votes
0answers
114 views

Mac OS X Server - Web require SSL

I'm using Mac OS X Server 3.1.2 (Mavericks) and I want all connection through HTTP to be encrypted. On a normal Apache server, I would append this ModRewrite rule on the bottom of https.conf. ...
1
vote
1answer
861 views

How can I tell which SSL ciphersuite Safari is using?

Qualsys tells me that current versions of Safari on OS X don't support AES-GCM for the SSL/TLS cipher algorithm. I'd like to verify this by observing which cipher suite is selected when visiting my ...
1
vote
2answers
405 views

What password does OSX Server use when importing SSL certificates?

I am migrating my website away from my home OSX server to a virtual Linux server, hosted within a proper data centre, and I have a problem with the SSL certificates I imported into OSX Server. It ...
7
votes
3answers
27k views

How do you remove SSL certificate exceptions on iOS?

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), iOS shows a dialog asking whether the certificate should be accepted. If you accept the ...
3
votes
0answers
466 views

Mavericks Server: Unable to use 3rd party SSL Certificates with Open Directory

We have a Mac OS X Server (Mavericks) - Mac OS X: 10.9.2, Server: 3.1 Our Open Directory Master is set up and running but we cannot for the life of us get it to accept our 3rd Party (DigiCert) SSL ...
0
votes
0answers
305 views

Fix iOS 7(.1) Chrome SSL error

Quick Word I know I'm not supposed to talk about the iOS betas here, however, my question is not related to the beta itself, it's just what I use currently, and could (possibly) happen to anyone on ...
0
votes
1answer
2k views

I updated to 10.9.2 and now SSL is broken. How do I fix this?

As per the title, I upgraded my Mac to Mavericks 10.9.2, and now a bunch of websites which use SSL (aka https) don't work! What do I do?
0
votes
1answer
155 views

Why when I increase SSL certificate security on my mac am I unable to use the app store (preflight error)?

Given the recent OSX issues with certificates and SSL, I want to increase the security of the certificate validation in general. I came across a setting in the keychain that has a selection between ...
4
votes
0answers
359 views

Is it possible to update an iPhone 4 to iOS 6.1.6? [duplicate]

I need the latest SSL security fix, as I'm running iOS 6.1.3. But, I don't have enough space to go to iOS 7 which is the only option iTunes and my phone are giving me to upgrade. I have an 8 GB ...
11
votes
4answers
3k views

Does iOS 5 have a SSL security bug that got patched on iOS 6/7?

Apple released iOS 7.0.6 and 6.1.6 to patch a specific SSL/TLS security bug. I can't find anything official about iOS 5. Does iOS 5 have the same bug? Please cite your answer.
15
votes
6answers
47k views

Is it possible to update any iOS 6 device to iOS 6.1.6?

Apple have just released software updates to fix a rather serious security problem where a valid SSL response wasn't checked properly to ensure it matches the site actually being browsed. I have an ...
6
votes
6answers
14k views

How to fix curl: (60) SSL certificate: Invalid certificate chain when using sudo

So since the Mavericks upgrade curl has more issues with certificates. When trying to curl a file from my web server with it's self-signed certificate it was getting the error "SSL Certificate: ...
0
votes
1answer
194 views

How to get private key on IOS used for SSL traffic?

I need to debug/view an IOS app's encrypted traffic, so i had captured SSL encrypted TCP packets via pirni. and trying to decrypt them via Wireshark. but i need private key for that. is there any way ...
6
votes
3answers
6k views

View SSL/TLS certificate in Safari 5+ when no padlock icon shown

According to Apple, With Safari 5 through 5.1.7, a lock icon appears near the top right corner [only] if all of the webpage's content uses a secure connection. That's all very well, but ...
1
vote
1answer
416 views

Connection error when remotely managing 10.9 OS X Server (SSL Handshake)

I am managing a Mac Mini with OS X Server (10.9) at the office and I got everything running perfectly. However, since some days ago I have lost the ability to connect remotely to the server using the ...