In macOS Mojave, certificate transparency check is enabled. Because the OS terminates all TLS connections that doesn’t use transparent certificates, macOS Mojave cannot connect to WPA2 Enterprise corporate networks. Is there any solution to turn off certificate transparency check for one special certificate or for all certificates?
1 Answer
Certificate Transparency only applies to publicly trusted certificates, which mean WPA2 certs aren’t affected by CT. It’s probably because the certificate was signed with MD5, which isn’t trusted, starting from iOS 12 and macOS Mojave.
The reason why MD5-signed certs aren’t trusted is because MD5 weaknesses allow fake TLS certs to be created.
There is simply no such way to make macOS Mojave to make trust MD5 certs; request the network administrator to update & resign the cert with a different algorithm.