A message from our CEO about the future of Stack Overflow and Stack Exchange. Read now.

Questions tagged [certificate]

Questions about importing/creating and using x509 certificates for SSL, iOS & macOS development. Questions about accessing and using certificates programmatically are off topic.

Filter by
Sorted by
Tagged with
2
votes
1answer
42 views

Why are these corporate certificates pre-installed and is it safe to delete/“Never Trust” most/all of them?

I was going through this macOS Security and Privacy Guide repo, step by step, and found some good privacy tips. However, when I arrived at the Certificate Authorities section I got a little confused. ...
4
votes
1answer
59 views

How to access a website despite a certificate error?

I am moving a web server to a new infrastructure. Before switching the DNS records I would like to check if the new configuration is working. I modified /private/etc/hosts/ with the IP addresses (IPv4 ...
0
votes
1answer
68 views

How do I remove a certificate from Certificate Trust Settings if the profile doesn't exist?

If I go to Settings > General > About > Certificate Trust Settings... I see several profiles installed under the "ENABLE FULL TRUST FOR ROOT CERTIFICATES" heading. There is a way to toggle them off, ...
1
vote
2answers
42 views

Signed pkg using productbuild --distribute but codesign says “code object is not signed at all”

I am signing my package during distribution using SIGN_IDENTITY_INSTALLER="Developer ID Installer: Pxxxxxxx, LLC (AXXXXXXXXX)" productbuild --distribution final-distribution.xml --package-path /tmp/...
1
vote
1answer
37 views

How to convert a .cer file to .p12 without the keychain password?

I have to "codesign" a distribution certificate inside a .ipa file to deploy an in-house application for a company. I have access to their developer account. The new provisioning profile had been ...
0
votes
0answers
6 views

How to detect and prevent adding key to a system keychain?

I have system keychain that contained root certificate that was set to be trusted. After removing it and locking keychain certificate appeared again after some time (with locked keychain). Is there ...
2
votes
0answers
32 views

How to view expiration date of code signing cert?

I know pkgutil --check-signature and codesign -d -vvv but neither of them show the expiration date. Is there a way to view the expiration date of a code signing cert? Say for instance...macOS ...
0
votes
0answers
10 views

How to automate _removing_ expired “Let's Encrypt” SSL certificates from macOS server?

I have been using Let's Encrypt for adding new SSL certificates to my macOS server for a few months now, and it seems to be working quite well. However, I have not been able to figure out how to ...
0
votes
1answer
78 views

Execute App (Apps Authorization Revoked)

Hello there I am trying to start an app (downloaded from the Internet) on macOS Mojave 10.14.5 though when I double click I get the following pop up message: “Ascabart” can’t be opened. You should ...
3
votes
2answers
62 views

How to see certificate for intermediate CA in Keychain?

When I check details of a certificate I only see information about the certificate itself. Is there any way to see the issuer’s certificate? In my case it’s an intermediate CA. The certificate that I ...
3
votes
1answer
299 views

Work computer shows “This connection is not private” warning on almost all sites

My workplace allows me to use a Mac, but doesn't have much experience with them; their support is minimal if well intentioned, and generally as much harm as help. This includes installing antivirus ...
1
vote
1answer
34 views

How to get Apple certificate to sign files?

I was tasked by my boss to handle new project at work - JAMF to manage our MacOS devices (we are mostly Windows corporation, so it isn't easy). We bought it, had some training. I want now to use ...
1
vote
1answer
834 views

Apple iPhone won't connect to insecure website

A certificate is expired of an application of ours and a client still wants to access it. He is using an Apple iPhone and gets the message Safari cannot open the page because it could not establish ...
1
vote
2answers
131 views

How do you clear SSL leaf certificates mappings to particular domains

I visit my website using Chrome on macOS Mojave, for example, qa.abc.com, and the SSL leaf certificate is from customer-test.ssl.fastly.net. I recently updated the CNAME record in my DNS for qa.abc....
7
votes
1answer
600 views

Strange looking certificate in macOS Keychain

I need help with a strange looking certificate which has appeared in the Keychain of my Mac. The name of the certificate is "A9936B80-41C7-4D34-8020-59C3E40A31A8 A98369B2-0C8C-4CF8-9921-015C5D9A4C86"....
0
votes
0answers
112 views

Connect to VPN based on IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol with root certification on MacOS?

I am trying to connect to VPN via IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol. But after adding my certification in to the keychain access, I am still not able to select this ...
0
votes
1answer
27 views

Detect if Apple Certificate File is Development versus Distribution

When building an iOS App, Apple requires that you obtain a Development or Distribution certificate through their Apple Development Program. Using only the file itself, how can the type of certificate ...
0
votes
0answers
29 views

How to mass-deploy a root certificate in a corporate environment

Our Windows administrator deploys a root CA certificate to all the machines through Group Policies, which works very well in a corporate setting. Is there something similar to this we can use for our ...
3
votes
0answers
323 views

Trust SSL certificate via terminal in MacOS

I'm trying to setup WPA2 with EAP-TLS authentication using certificates in pfx format. As adding the certificate to the keychain and changing the Trust settings can be difficult for some users, I ...
1
vote
2answers
353 views

How to create an identity who can be used for signing code from custom certificate?

I want to codesign one of my applications by using my own certificate (not created with Keychain Access). First, I create a v3.ext file: keyUsage = digitalSignature Then, I created my certificate ...
4
votes
0answers
131 views

How to create /etc/certificates/*.{cert,chain,concat,key}.pem files without reboot?

I am trying to move from Comodo to Let's Encrypt certificates on OS X Server (10.7). Something in Apple's server.app and ServerAdmin.app is broken. I can see and select newly imported certificates in ...
1
vote
1answer
433 views

How to disable certificate transparency check in macOS Mojave(10.14)

In macOS Mojave, certificate transparency check is enabled. Because the OS terminates all TLS connections that doesn’t use transparent certificates, macOS Mojave cannot connect to WPA2 Enterprise ...
0
votes
1answer
206 views

How do I find out which app uses which distribution certificate?

I want to build the app using Expo React Native. Expo can handle all credentials for me automatically: distribution certificate, push notifications key, and provisioning profile. Unfortunately, we ...
0
votes
0answers
100 views

Open Keychain Access Get Info window after loading certificate

I add in my program certificate to login keychain and opened Keychain Access application. I wanted also to open Get Info window for this specific certificate automatically. But it is neither possible ...
0
votes
1answer
214 views

Cannot seem to install VMware vCSA 6.7 cert on macOS 10.13.6 High Sierra

Trying to install the web certificate for my vCenter Server Appliance (vCSA 6.7) on my Mac Mini (running macOS High Sierra 10.13.6). I download the cert.0 file, change the extension to .crt and double-...
0
votes
3answers
5k views

Cydia Impactor won't sideload

When I try to sign/resign (sideload) H3lix-RC5.ipa (iPhone 5C w/ iOS 10.3.3 x32) or g0blin_rc2.ipa (iPhone 6S w/ iOS 10.3.3 x64) I get: Error: file: installation.cpp; line: 42; what: Failed to ...
2
votes
2answers
515 views

How to import X.509 certificates into MacOS?

I have the file with X.509 certificates and the following preamble: # This is a bundle of X.509 certificates of public Certificate # Authorities. It was generated from the Mozilla root CA list. # ...
1
vote
1answer
555 views

How can I see what permissions an enterprise app certificate has?

I live in Iran, and here most Iranian apps are banned from the App Store, and are distributed using enterprise certificates. There are even Iranian app stores that use a single such certificate to ...
1
vote
0answers
177 views

Fixing a Mac unable to fetch software updates? Requests to https://swdist.apple.com/* seem to be failing HTTPS cert validation

I've discovered that my Mac can't fetch software updates because the requests to Apple server's are failing. I think it's something related to HTTPS cert validating or cert pinning. I was tipped off ...
1
vote
0answers
57 views

Which keychain holds user trusted certificates?

I tried to do a clean install of my El Capitan MacBook but realised that much of my keychain migrated over. When I went into keychain access it showed a number of different keychains. I reset the "...
2
votes
0answers
292 views

Cannot export System.keychain Certificate from with private key as p12 via Terminal security export command

I have a machine certificate installed in system.keychain and want to export certificate with privet key via security export command. But getting error :security: SecKeychainItemExport: User ...
4
votes
2answers
74 views

How can I tell that a certificate is a root certificate?

Are these certificates root certificates or not and how can I disable them if they are?
1
vote
1answer
162 views

Do I need to renew the Institutional Recovery Key certificate with FileVault

We plan to roll out FileVault via Apple's own MDM (Server.app). I already have some test-computers enrolled. When I look at the certificate used for the Institutional Recovery Key, it expires in ...
1
vote
1answer
503 views

Problem loading images from googleusercontent

Recently switched from Chrome to Firefox Quantum and noticed that images from *.googleusercontent.com aren't loading because "The connection used to fetch the resource was not secure" If I attempt to ...
5
votes
1answer
6k views

Apple Mail warning: Unable to verify message signature

After upgrading from Sierra to Mojave (macOS 10.14), Apple mail started to display the warning Unable to verify message signature above all signed and encrypted emails. When clicking on Details, it ...
1
vote
0answers
74 views

Can I use a letsencrypt certificate to secure macOS High Sierra Server Open Directory?

I have services (mail, web) on macOS High Sierra Server protected with a letsencrypt certificate and that works fine. I'd like to extend that use of letsencrypt to Open Directory, to fully get rid of ...
0
votes
1answer
78 views

Kiosk app for iPad that allows using a client side certificate

My web application is demanding a client side certificate to be installed. When opening the web app from a browser on my iPad, I'm prompted to allow using the certificate and all works well. Do you ...
4
votes
1answer
398 views

MacBook Pro Certificate - no value specified - Business Category : Private Organization

Today after I signed into my computer and opened Safari this window popped up: I am looking for help to know what this is, and what I need to do. Thank you.
3
votes
2answers
70 views

Should I Trust a Certificate

Basically, my school is apparently having a network 'update' and are telling us to go to keychain access and trust a certificate. This is what they sent us. Exactly what will happen if I do this any? ...
0
votes
1answer
222 views

terminal: ERROR cannot verify www.important_website certificate, issued by ‘CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US’:

I am installing a large amount of files with wget and all of a sudden I get the error message: cannot verify www.ncei.noaa.gov's certificate, issued by ‘CN=DigiCert SHA2 Secure Server CA,O=DigiCert ...
6
votes
1answer
2k views

Import CA certificate into Chrome via command line

Is it possible to import a custom Certificate Authority (.crt) using Terminal or over SSH on macOS 10.13 High Sierra?
1
vote
0answers
92 views

Safari and Chrome loading the wrong website

My client is having an issue that is exclusive to her computer. When viewing her website on any other computer the website that shows is the current one being hosted by Squarespace. When viewing on ...
2
votes
0answers
5k views

Can't use self signed certificates any more, because “Enable full trust for root certificates” is gone from settings

As you can see, "Enable full trust for root certificates" is completely missing. What do I do? This is on iPhone X 11.4 btw.
2
votes
1answer
1k views

How do I configure an iPad to use EAP-TLS?

I try to connect an iPad (iOS 11.3.1) to a WiFi network which uses EAP-TLS. There is no way to specify EAP-TLS mode because of the lack of the certificate, so I need to import the certificate first. ...
5
votes
2answers
12k views

Certificates not updating

I'm trying to visit my university research group's website at home. The website requires a username and password to view and probably has who knows what kind of security systems in place. On Safari ...
3
votes
1answer
706 views

How to create a new identity in macOS?

I've done likely stupid things in Keychain Access and now I don't have access to identities: user@host:~$ security find-identity Policy: X.509 Basic Matching identities 0 identities found ...
1
vote
0answers
53 views

Why do browsers still not trust my internal sites even after installing the CA chain?

I host several web services on my internal network and have created TLS certificates for each of them, all signed by my home-baked OpenSSL certificate authority. I've imported the CA certificates into ...
1
vote
1answer
94 views

HTTP URLs aren't working on OS X Yosemite

My OS X Yosemite 10.10.5 Mac seems to only be able to hit HTTPS URLs, but not HTTP URLs. I tested another computer on my network, and that machine seems to work fine. I tested using this URL: http://...
1
vote
1answer
340 views

How to store and retrieve S/MIME certificates in Open Directory (LDAP) of macOS Server?

Is it possible to use the Open Directory of the macOS Server app to store and retrieve S/MIME (X.509) certificates with the user data? Background: I would like to share our public S/MIME ...
2
votes
0answers
78 views

Wrong Account Name with Certificate Authentication for VPN

I installed a user certificate and the enterprise CA onto an iOS device (iOS11). The user certificate contains UPN (User Principal Name) in its alternative subject name. I then tried to set up an ...