The tag has no wiki summary.

learn more… | top users | synonyms

15
votes
6answers
32k views

Is it possible to update any iOS 6 device to iOS 6.1.6?

Apple have just released software updates to fix a rather serious security problem where a valid SSL response wasn't checked properly to ensure it matches the site actually being browsed. I have an ...
13
votes
1answer
5k views

How do I un-trust or remove blacklisted root CAs from mobile Safari on my iPhone or iPad?

The DigiNotar root CA has been compromised and has been blacklisted by Mozilla and Chrome. I've already un-trusted their root CA in Keychain on my OS X devices, but how can I do something similar on ...
11
votes
4answers
3k views

Does iOS 5 have a SSL security bug that got patched on iOS 6/7?

Apple released iOS 7.0.6 and 6.1.6 to patch a specific SSL/TLS security bug. I can't find anything official about iOS 5. Does iOS 5 have the same bug? Please cite your answer.
10
votes
1answer
10k views

Safari can't connect to https

Safari suddenly can't connect to any HTTPS site because it "can't establish a secure connection". This is on an administrator account, not a managed account. A different administrator account is ...
8
votes
2answers
1k views

iPad Mail client - IMAP with X.509 client certificates?

Short version: Does anyone know if X.509 client certificates are supposed to work on the iPad for IMAP mail? Am I wasting my time trying to get a feature that doesn't work to work? If the built-in ...
7
votes
5answers
1k views

Why are Safari and Chrome not throwing warnings after removing the root certificates

Certificates issued by DigiNotar have been blacklisted today by Mozilla. Viewing websites with certificates issued by DigiNotar with a nightly build of Firefox will render warnings. Instead of ...
6
votes
2answers
3k views

How do I get com.apple.servermgrd to use a non-self-signed SSL certificate?

I have received a valid SSL certificate for my Mountain Lion Server (10.8.2 Build 12C3104) and have installed that cert for use by all services (and SSL and other services do not pop up the "Verify ...
6
votes
1answer
2k views

Setting Safari SSL/TLS Cipher Suites

Does anyone know how to set the priority order of SSL/TLS cipher suites on Safari for Mac OSX (10.7 ideally, but any version would be helpful). Can't seem to find any documentation on that point.
5
votes
5answers
4k views

How to fix curl: (60) SSL certificate: Invalid certificate chain when using sudo

So since the Mavericks upgrade curl has more issues with certificates. When trying to curl a file from my web server with it's self-signed certificate it was getting the error "SSL Certificate: ...
5
votes
1answer
168 views

how do you load the US Department of Defense Certificate into an iPhone?

How do you load the US Department of Defense SSL certificate (or any SSL certificate) into iOS?
5
votes
2answers
3k views

Certificate error when using Chrome for iOS with company CA

I am using an iPad with Google Chrome installed to access the internet. I have downloaded and installed the Netbox Blue certificate authority from their website. I can currently access https:// ...
5
votes
1answer
745 views

Built-in WebDAV client able to connect via HTTPS with client certificate?

Using Mac OS 10.6.8, I'm trying to connect via HTTPS to a WebDAV server that requires client certificates. Without luck so far. The certificate is stored in the keychain. Is this possible with the ...
4
votes
3answers
736 views

Chrome showing the site's security certificate is not trusted for GitHub

Today, out of no-where Chrome just started showing invalid SSL certificate errors for popular sites like Github, Stripe, etc. The site's security certificate is not trusted! I know the SSL ...
4
votes
2answers
5k views

Configuring SSL with Apache under Lion

Following on from my previous question (which I answered myself), Configuring OS X 10.7 Lion Server to serve Rails Apps via Apache ...I'm now looking to set up SSL. Again, I have the config working ...
4
votes
3answers
1k views

View SSL/TLS certificate in Safari 5+ when no padlock icon shown

According to Apple, With Safari 5 through 5.1.7, a lock icon appears near the top right corner [only] if all of the webpage's content uses a secure connection. That's all very well, but ...
4
votes
1answer
418 views

Can't create a Fluid App due to “Invalid Certificate”

I am trying to create a Fluid App for a work intranet. It says the certificate is invalid, is there a way to get around that?
4
votes
0answers
357 views

Is it possible to update an iPhone 4 to iOS 6.1.6? [duplicate]

I need the latest SSL security fix, as I'm running iOS 6.1.3. But, I don't have enough space to go to iOS 7 which is the only option iTunes and my phone are giving me to upgrade. I have an 8 GB ...
3
votes
1answer
61 views

MacBook cannot connect to non-SSL websites

I have the late 2013 MBP 15″ with Retina and recently I've been unable to connect to websites not using SSL with either Firefox or Safari. This includes other applications that use HTTP such as the ...
3
votes
1answer
872 views

Chrome AutoSelectCertificateForUrls OSX

I have a client SSL certificate for authentication. I'm trying to map it to a URL in Chrome on OSX, however the Chromium documentation is of no use. I have no idea what file to put the ...
2
votes
2answers
24 views

Make Macports use HTTPS (SSL/TLS) to fetch packages

By default, Macports uses HTTP to fetch packages. For example: ---> Attempting to fetch port_cutleaves-0.1.4_0.darwin_10.noarch.tbz2 from http://lil.fr.packages.macports.org/port_cutleaves How ...
2
votes
2answers
1k views

How to get wiki and profile manager to run on different port

Currently the wiki and the profile manager runs on port 443 (ssl). We have other services using port 443 on our network, and therefore I cannot port forward that port to my Lion Server. How can I ...
2
votes
1answer
49 views

How do I fix the SSL warning I get when visiting github.com?

I see the following warning when visiting http://www.github.com/ after July 26, 2014. I get this warning in both Chrome and Safari on my OS X Mavericks-equipped iMac. Should I worry about this? How ...
2
votes
0answers
272 views

Mavericks Server: Unable to use 3rd party SSL Certificates with Open Directory

We have a Mac OS X Server (Mavericks) - Mac OS X: 10.9.2, Server: 3.1 Our Open Directory Master is set up and running but we cannot for the life of us get it to accept our 3rd Party (DigiCert) SSL ...
2
votes
0answers
131 views

Default email signing with OS X Mail

I have both a GPG key and an SSL certificate. I am able to sign emails by choosing OpenPGP or S/MIME in the upper right corner of the window: I can then activate the signing by clicking the ...
2
votes
1answer
5k views

SMTP Issues with Mountain Lion 10.8

BACKGROUND I upgraded from 10.7 to 10.8 on 7/28/12 I upgraded Xcode from 4.4 to 4.4.1 on 8/8/12 PROBLEM On 8/9/12, on my MacBook Air, Mail.app refuses to connect to the SMTP service on a server ...
1
vote
3answers
4k views

how to install stunnel on mountain lion?

I currently bought an Mac, so I'm a noob :). I used to connect to my server using stunnel on windows & ubuntu. I'm also a noob in networking. I check website download section, and there's no mac ...
1
vote
2answers
75 views

What password does OSX Server use when importing SSL certificates?

I am migrating my website away from my home OSX server to a virtual Linux server, hosted within a proper data centre, and I have a problem with the SSL certificates I imported into OSX Server. It ...
1
vote
1answer
64 views

How can I tell which SSL ciphersuite Safari is using?

Qualsys tells me that current versions of Safari on OS X don't support AES-GCM for the SSL/TLS cipher algorithm. I'd like to verify this by observing which cipher suite is selected when visiting my ...
1
vote
1answer
70 views

Safari SSL Errors

What led to the problem While I was trying to fix the Github SSL error caused by the DigiCert certificates, I deleted some of the certificates in the "Keychain Access" application. By doing this I ...
1
vote
1answer
38 views

Postfix SSL/TLS certificates issue

I'm trying to set up postfix to send mail through Gmail's SMTP server on port 587. Here's what I've put in my /etc/postfix/main.cf: relayhost = [smtp.gmail.com]:587 smtp_sasl_auth_enable = yes ...
1
vote
1answer
743 views

How do you remove SSL certificate exceptions on iOS?

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), iOS shows a dialog asking whether the certificate should be accepted. If you accept the ...
1
vote
1answer
50 views

Maverics VPN to Windows 2008 SSTP with Certificate (PPTP)

I'm unable to connect to a Windows VPN using my macbook air 2013. The VPN Settings given to me are, Server URL Username & Password SSL Ceritificate VPN Type - SSTP I have added image on how to ...
1
vote
1answer
310 views

Connection error when remotely managing 10.9 OS X Server (SSL Handshake)

I am managing a Mac Mini with OS X Server (10.9) at the office and I got everything running perfectly. However, since some days ago I have lost the ability to connect remotely to the server using the ...
1
vote
0answers
213 views

Can't access Xserve through Aventail SSL VPN with AD authentication

In testing our Aventail SSL VPN with Mac clients we're finding that once connected to the VPN we can't access Xserve shares when authenticating via Active Directory like we normally do on our internal ...
1
vote
0answers
176 views

Turn off SSL/TLS at Sparrow mail client

Is that possible to turn off default SSL/TLS negotiation with mail server at Sparrow mail client? I want to analyze IMAP protocol work with my IMAP server but can't do this due to TLS encodes ...
1
vote
0answers
318 views

Why do I get an invalid certificate error with my Gmail account in iChat/Messages?

I've had this problem for a long time now, and it's finally bothered me enough to ask. Can anyone explain why I get an invalid certificate error when I try to sign into my @gmail.com account within ...
0
votes
1answer
99 views

Why when I increase SSL certificate security on my mac am I unable to use the app store (preflight error)?

Given the recent OSX issues with certificates and SSL, I want to increase the security of the certificate validation in general. I came across a setting in the keychain that has a selection between ...
0
votes
1answer
107 views

How to get private key on IOS used for SSL traffic?

I need to debug/view an IOS app's encrypted traffic, so i had captured SSL encrypted TCP packets via pirni. and trying to decrypt them via Wireshark. but i need private key for that. is there any way ...
0
votes
2answers
881 views

Forcing use of SSL connections in web dependent applications

Many websites allow it, to use an SSL connection. But how can I force my web dependent applications (Safari e.g.) to establish such a more secure (I know, that SSL is not the solution for all security ...
0
votes
1answer
2k views

Downgrade 10.7.2 to 10.7.1?

Is it possible to downgrade from Mac OS X 10.7.2 to 10.7.1 without deleting all files? I want to do this because of this: http://superuser.com/questions/349740/mac-os-x-lion-10-7-2-update-breaks-ssl
0
votes
1answer
960 views

I updated to 10.9.2 and now SSL is broken. How do I fix this?

As per the title, I upgraded my Mac to Mavericks 10.9.2, and now a bunch of websites which use SSL (aka https) don't work! What do I do?
0
votes
1answer
607 views

How do I view or verify signed .mobileconfig files using Terminal?

I need to troubleshoot problems with signed .mobileconfig profiles. How can I show the signature of a these files using Terminal? Is it also possible to verify the certificates that were used to sign ...
0
votes
0answers
14 views

xcode - Bot creation failed with error: An SSL error has occurred and a secure connection to the server cannot be made

I am trying to create a bot on my server running 10.9, and I keep getting the following error: Bot creation failed with error: An SSL error has occurred and a secure connection to the server ...
0
votes
0answers
37 views

Using custom Certificate Authority for SSL websites with Safari on OS X 10.9.4

I have followed the directions here (http://datacenteroverlords.com/2012/03/01/creating-your-own-ssl-certificate-authority/) to create a CA and SSL certs signed by the CA for my own internal websites. ...
0
votes
0answers
56 views

SVN error with certificated self-signed server with error svn: E670008: nodename nor servname provided, or not known

I try to checkout SVN but I face with this issue svn: E670008: Unable to connect to a repository at URL 'https://abc.xyz' svn: E670008: nodename nor servname provided, or not known https://abc.xyz ...
0
votes
0answers
55 views

Mac OS X Server - Web require SSL

I'm using Mac OS X Server 3.1.2 (Mavericks) and I want all connection through HTTP to be encrypted. On a normal Apache server, I would append this ModRewrite rule on the bottom of https.conf. ...
0
votes
0answers
225 views

Fix iOS 7(.1) Chrome SSL error

Quick Word I know I'm not supposed to talk about the iOS betas here, however, my question is not related to the beta itself, it's just what I use currently, and could (possibly) happen to anyone on ...
0
votes
0answers
99 views

Mavericks having SSL errors and more after restore from Mountain Lion backup

I badly corrupted my boot sequence a few days ago, so had to restore from a Mountain Lion backup from last year (I'm on Mavericks). Now, on only Chrome and Safari I am getting SSL connection errors, ...
0
votes
0answers
587 views

safari website requires a client certificate

I went to a site I regularly use and got this when logging in with Safari I seem to have 2 certificated of the same name both issued by Apple and both are not expired (found by searching in ...
0
votes
1answer
2k views

Mail won't let me turn off SSL for SMTP

I just upgraded from Lion to Mountain Lion. I have eight email accounts set up in Mail.app. Some of my SMTP servers support SSL and some don't. But now Mail.app turned SSL on for every server (except ...