13

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), Safari shows a dialog asking whether the certificate should be accepted. If you accept the certificate, OS X adds an SSL exception and will never ask about that certificate again.

The question is, where is that exception stored? And how can I get rid of it?

Note that this question is essentially the OS X version of “How do you remove SSL certificate exceptions on iOS?”, however the iOS answers make no sense for OS X.

Improve this question
9

The exceptions are stored in Keychain Access. The certificate will be copied there, together with the trust settings. Double-click a certificate and you will be able to change it's settings. Note: you can have trust setting on system level and user level! They have separate keychains as listed in the sidebar.

Improve this answer
2
  • Thanks John. Do you know if deleting immediately makes a certificate stop working or does it require a restart? I'm testing the quality of our SSL certificates in Apple Mail. – Foliovision Aug 30 '16 at 14:14
  • Deleting or changing the trust settings take effect immediately. – John Keates Aug 30 '16 at 18:18
1

The other answer didn't work for me. A method that work for me is to open the "Keychain Access" app (which can be found through Spotlight Search), then click the "Certificates" category. Then right-click on the certificate you want to delete and delete it.

Improve this answer
1
  • For me also, only this answer works – Vadim Motorine May 5 '20 at 12:21

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .