0
votes
0answers
38 views

Using custom Certificate Authority for SSL websites with Safari on OS X 10.9.4

I have followed the directions here (http://datacenteroverlords.com/2012/03/01/creating-your-own-ssl-certificate-authority/) to create a CA and SSL certs signed by the CA for my own internal websites. ...
1
vote
1answer
64 views

How can I tell which SSL ciphersuite Safari is using?

Qualsys tells me that current versions of Safari on OS X don't support AES-GCM for the SSL/TLS cipher algorithm. I'd like to verify this by observing which cipher suite is selected when visiting my ...
1
vote
1answer
763 views

How do you remove SSL certificate exceptions on iOS?

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), iOS shows a dialog asking whether the certificate should be accepted. If you accept the ...
0
votes
1answer
99 views

Why when I increase SSL certificate security on my mac am I unable to use the app store (preflight error)?

Given the recent OSX issues with certificates and SSL, I want to increase the security of the certificate validation in general. I came across a setting in the keychain that has a selection between ...
11
votes
4answers
3k views

Does iOS 5 have a SSL security bug that got patched on iOS 6/7?

Apple released iOS 7.0.6 and 6.1.6 to patch a specific SSL/TLS security bug. I can't find anything official about iOS 5. Does iOS 5 have the same bug? Please cite your answer.
15
votes
6answers
32k views

Is it possible to update any iOS 6 device to iOS 6.1.6?

Apple have just released software updates to fix a rather serious security problem where a valid SSL response wasn't checked properly to ensure it matches the site actually being browsed. I have an ...
4
votes
3answers
1k views

View SSL/TLS certificate in Safari 5+ when no padlock icon shown

According to Apple, With Safari 5 through 5.1.7, a lock icon appears near the top right corner [only] if all of the webpage's content uses a secure connection. That's all very well, but ...
0
votes
2answers
884 views

Forcing use of SSL connections in web dependent applications

Many websites allow it, to use an SSL connection. But how can I force my web dependent applications (Safari e.g.) to establish such a more secure (I know, that SSL is not the solution for all security ...
13
votes
1answer
5k views

How do I un-trust or remove blacklisted root CAs from mobile Safari on my iPhone or iPad?

The DigiNotar root CA has been compromised and has been blacklisted by Mozilla and Chrome. I've already un-trusted their root CA in Keychain on my OS X devices, but how can I do something similar on ...