2022 Developer Survey is open! Take survey.

Questions tagged [certificate]

Questions about importing/creating and using x509 certificates for SSL, iOS & macOS development. Questions about accessing and using certificates programmatically are off topic.

Filter by
Sorted by
Tagged with
0 votes
0 answers
8 views

How do I view the TLS certificate in iOS 15 Safari?

How do I view the TLS certificate in iOS 15 Safari? I tried every button on the tool bar, and still couldn't find the view cert option.
user avatar
  • 1,076
0 votes
0 answers
31 views

Cannot delete duplicate certificate

I have a duplicate certificate in my keychain which I cannot seem to be able to delete. If I delete it from the keychain app by first unlocking the system keychain and then right clicking and ...
user avatar
0 votes
1 answer
32 views

Add self-signed certificate

I would like to access my Synology NAS via HTTPS, but don't have the money to buy a certificate. I've read that you can generate your own and manually trust it. So after following the step here, I ...
user avatar
  • 1,733
0 votes
2 answers
58 views

Many sites are displaying SSL Certificate invalid but their date is in the future and the computer's clock is fine

I reinstalled an old 2015 Apple computer today, and I ran into a few issues. During system install, it failed because of some SSL issues, and I had to change the system's clock to prior 2017 for the ...
user avatar
1 vote
0 answers
25 views

Export x509 Certificate from iPad

Question: Is there a way to export a public certificate from an iPad running the latest iOS? (PEM formatted Base64 if possible) Scenario: AirWatch manages our iPads. There is a profile configured to ...
user avatar
  • 111
0 votes
1 answer
119 views

Install a package with an expired certificate

I just noticed I can double-clik, open and install a .pkg package installer that has an expired certificate without any popup like "This package is from an developer whose certificate has expired&...
user avatar
  • 181
0 votes
0 answers
33 views

macOS - How do I change cert trust state from command line?

My workflow involves changing a cert installed in the system's trust states between 'Use Custom Settings' and 'Never Trust' (see the Keychain Access screenshot below). How do I do this from command ...
user avatar
  • 1,076
0 votes
0 answers
41 views

There is an unknown developer's iPhone Distribution certificate in my keychain. Where does it come from?

I'm an iOS developer, and today I noticed that in my project's build settings, Xcode suggests a Code Signing Identity that I have never seen before. Turns out there is an iPhone Distribution ...
user avatar
  • 141
0 votes
2 answers
27 views

Is importing just the CA certificate to Keychain Access enough for trusting certs issued with that CA?

I've created a PKI with easy-rsa. I create keys for websites and sign them with my CA certificate. I imported the CA certificate into Keychain Access, clicked the cert name, and specified "...
user avatar
  • 145
1 vote
1 answer
81 views

How to delete Self-Signed certificate from System Keychain (Big Sur)

I just can't find a way to delete the Self-Signed Root CA from Keychain under System. When I open KeyChain I select System under System Keychains. Then I click on the File in menu and then click on ...
user avatar
  • 121
2 votes
1 answer
99 views

Can I disable the certificate pinning checks on MacOS to relax proxy inspection detection?

I'm behind a proxy and some websites don't work, in particular ones related to MacOS update, app store etc. I imported the proxy certificate to the MacOS keychain. When I go to https://apps.apple.com ...
user avatar
0 votes
1 answer
97 views

Where can I find the syntax for macos spctl (gatekeeper) rules?

I'm trying to code-sign an electron app for submission to the "Mac App Store". As expected, it has been a tremendous pain for 101 reasons. However, I have now discovered a ray of light in ...
user avatar
  • 13
1 vote
2 answers
40 views

Restoring Silicon Mac in enterprise environment

Is there some way to do a full IPSW restore in an enterprise environment? In our case this means no DHCP and behind a proxy. Other machines all have a fixed IP and proxy certificate installed. But ...
user avatar
  • 11
0 votes
0 answers
21 views

How can I tell which security certificates are about to expire?

macOS pops up notifications that some of my certificates will expire soon. But when I click the notification, it takes me to the list of all of my Profiles in System Preferences, but doesn't tell me ...
user avatar
0 votes
0 answers
258 views

Safari won't load page: "Refused to execute a script because its hash, its nonce, or 'unsafe-inline' does not appear..."

I'm having an issue where a major website refuses to load the page on Safari for macOS (both latest versions). The Safari developer console shows the error: Refused to execute a script because its ...
user avatar
  • 5,742
0 votes
0 answers
16 views

iPhone: download & store Carrier APN certificate

Depending on carriers, a certificate might be necessary to use 3G/4G data on the iPhone. The procedure is go to the carrier website, APN download page download the APN certificate from Safari (only!) ...
user avatar
  • 679
1 vote
1 answer
70 views

Find trust setting of a login keychain using cmd

Is there a way to find the trust settings of a certificate in login keychain using command line I tried this security dump-trust-settings -d. But this only returns for the System Keychain Also when i ...
user avatar
0 votes
0 answers
10 views

Certificate appears in 'Certificates' instead of 'My Certificates' and is not detected by browser

I have a client certificate that I need to access my company's internal systems. I have exported it from Windows as a .pfx file, including the private key, and converted it to a .pem file using ...
user avatar
  • 131
1 vote
0 answers
16 views

macOS 11.6 "DST Root CA X3" certificate warnings

System: macOS 11.6.1 For an internal domain with Let's Encrypt, I am still getting outdated certificate warnings on Safari and Chrome. Firefox with its own store is fine. I checked Keychain Access and ...
user avatar
0 votes
0 answers
14 views

Get certificate access as an existing user

Today is my first day at work. I was added to an enterprise developer account with a developer role. However, it looks like I didn't get the certificate access like in this question. How can I get ...
user avatar
0 votes
1 answer
26 views

Mail.app refuses to send e-mail

I have just upgraded to Monterey (12.0.1 (21A559)), and cannot send e-mails. Mail.app tells me that the certificate is not valid. We own our own domain and host the primary MX here, and this worked ...
user avatar
0 votes
1 answer
229 views

Certain SSL Websites not loading in Chrome, Safari, Curl

I'm trying to open bisonbrew.com but am getting ERR_CONNECTION_RESET with Chrome, and with Safari: 'Safari can't open the page "https://bisonbrew.com" because Safari can't establish a ...
user avatar
  • 123
1 vote
1 answer
48 views

Viewing certificates in certificate chain conveniently in MacOS from finder

In the MacOS finder, there is a convenient viewer for certificates, with the "icon" view . If the file contains a single certificate, it formats and displays the certificate very nicely, e.g....
user avatar
10 votes
1 answer
3k views

App / curl still getting certificate expired error due to expired Let's Encrypt certificate

An open source app running on my macOS 10.13.6 and 10.14.6 system is failing to access a website via https that uses a Let's Encrypt certificate. If I use curl to access the same site, it also gets an ...
user avatar
  • 1,922
6 votes
2 answers
2k views

iOS: Safari "could not establish a secure connection to the server"

When I try to access our dev sites, I get this error on my iPhone X running the latest general release of iOS 15. Now 15.1. Safari cannot open the page because it could not establish a secure ...
user avatar
  • 110
8 votes
2 answers
7k views

iOS marked a certificate as "Expired" even though the certificate is still active and issued by a trusted authority

I am having a strange issue I cannot find the cause of: I have a website certificate issued on 31.07.2021 by letsencrypt.org and valid until 29.11.2021, however on my main iPhone (iOS 15) I get this ...
user avatar
1 vote
2 answers
273 views

How to install an Automator action from unidentified developer?

I downloaded an APN certificate from Certificates, Identifiers & Profiles from the Apple Developer configuration pane. It's an .action file that I cannot open, though. Do you want to install the &...
user avatar
0 votes
0 answers
40 views

Safari using wrong smart card certificate

I am trying to use Safari to access a web site that requires a smart card. Unfortunately, the card has 2 certificates on it and the first time I attempted to use the web site, I picked the wrong cert. ...
user avatar
  • 101
3 votes
1 answer
173 views

Cloning apps on iOS

For some reasons I want to get two similar apps on my iPhone (in fact not similar — different versions). I have already installed this app from AppStore, and I have an IPA file of this app but of ...
user avatar
23 votes
3 answers
18k views

How do I update my root certificates on an older version of Mac OS (e.g. El Capitan)?

I have difficulty reaching various secure web sites. They give me a certificate expired error. They work on Firefox but not Safari or Chrome. They also work on newer versions of macOS (e.g. Catalina, ...
user avatar
  • 711
0 votes
1 answer
73 views

Different SSL certs being delivered to different platforms

I received reports of an invalid SSL cert on a site that I recently started managing. Testing it on a Linux PC and a Windows PC, I find that the cert being delivered is different from the one ...
user avatar
4 votes
1 answer
2k views

What are the private and public keys associated with an Apple Distribution Certificate?

I'm following this guide on how to generate a new Apple Distribution Certificate, and on the ‘Download your certificate’ page it says Download your certificate to your Mac, then double click the .cer ...
user avatar
  • 389
0 votes
1 answer
2k views

Xcode does not detect new Apple Distribution Certificate in my keychain

I generated a new Apple Distribution Certificate for my React Native project because I got an email saying my old one was going to expire. It appears to be in my keychain: but when I try to upload my ...
user avatar
  • 389
0 votes
1 answer
44 views

Behaviour of development certificate in apple developer portal and keychain

This is a question regarding Apple Development Certificates. There are two parts: Part 1: create and download certificates on apple developer portal. Background: I can download my teammates ...
user avatar
  • 103
0 votes
1 answer
1k views

Big Sur Add trusted certificate via command line (Safari Can't establish a secure connection)

I am trying to have Safari stop preventing me from visiting one of my dev machines with an invalid cert. I am trying to use the solution in this thread but install it using the CLI: security add-...
user avatar
2 votes
1 answer
2k views

How can I fix '"HPDM.framework" will damage your computer' on macOS Big Sur?

Since updating to macOS Big Sur, I can no longer print to my HP DeskJet 1010 printer. Each time that I start a print job, I get a dialog with error message that says '"HPDM.framework" will ...
user avatar
  • 330
1 vote
2 answers
358 views

Invalid certificate for a specific website

When trying to navigate to a specific website (amazon.com in my case) I always get the "NET::ERR_CERT_COMMON_NAME_INVALID" error in Chrome (and equivalent errors in Safari/other browsers). ...
user avatar
  • 133
1 vote
0 answers
117 views

MacOS Catalina ldap browser supporting certificate authentication?

I’m looking for an GUI based ldap browser here that supports certificate authentication I previously used softerra on windows. I’ve looked into: PhpLdap admin, Jxplorer, Ldapadmin tool. I checked ...
user avatar
  • 11
1 vote
0 answers
242 views

When and how can I use client certificate authentication on iOS?

I have installed a x509/pfx certificate under profiles in my iOS settings and configured my webserver (nginx) to require this certificate. With Safari on iOS, I can browse to my main page using the ...
user avatar
4 votes
2 answers
4k views

What is the macOS equivalent of Windows certificate store names?

On Windows, when retrieving information about certificates, they come from named certificate stores, such as "Trusted Root Certification Authorities" or "Trusted Publishers" - what ...
user avatar
  • 162
3 votes
0 answers
465 views

Who creates /etc/ssl/cert.pem in MacOs

While using curl in verbose mode, I noticed the following line in the output: * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem * I googled and found out that etc/ssl/...
user avatar
16 votes
6 answers
17k views

HP Easy Scan - "HP Scanner 3" will damage your computer

I have been using a HP Envy 4500 printer with my iMac for 2 years using HP Easy Scan - with no issues. Today I tried to scan a document, when I press the "scan" button on the app a pop-up ...
user avatar
  • 329
4 votes
1 answer
151 views

Is it possible to develop an iOS application for my own use without having to pay 99$/year?

TL;DR How can I have a permanent profile for my Xcode-developped app on my own iPhone so that I could use it without having to rebuild it from Xcode every 6 days, likely by issuing myself the needed ...
user avatar
  • 215
4 votes
0 answers
75 views

Protect certificate access with TouchID on iPhone?

I installed a personal X.509 certificate on my iPhone (SE, iOS 14.0.1). I can use it on websites (in Safari) to authenticate myself, but with no permission check at all. Unlike for example filling in ...
user avatar
1 vote
1 answer
98 views

which certificate/identifiers/profilers should be used for python script to be distributed as a pyinstaller build/bundle outside the app store?

My program works as follows In a while loop, it checks for the active window change - AppKit library used from AppKit import NSWorkspace active_window = (NSWorkspace.sharedWorkspace()....
user avatar
0 votes
0 answers
30 views

Is renting App Store to others for test purpose a good idea?

Recently someone on Upwork post a job for renting an App Store account to test a tour application. The post is like, they need to test an app with so many devices and they are running out of their ...
user avatar
  • 1,157
2 votes
1 answer
444 views

Can a self-signed certificate use an IP address for an entry in Subject Alternative Name?

From https://support.apple.com/en-us/HT210176 TLS server certificates must present the DNS name of the server in the Subject Alternative Name extension of the certificate. DNS names in the CommonName ...
user avatar
1 vote
0 answers
240 views

Load .pem certificate to Apple KeyChain

When I drag my .pem certificate to the Apple Keychain it shows me "An error occurred. The content of this file cannot be recovered". Also I tried to double-click the .pem file but show me ...
user avatar
0 votes
1 answer
233 views

Trouble generating a p12 certificate for wallet signing

I've been trying to replace an expired p12 certificate which is used for signing AppleWallet passes in PHP. The problem I'm having is nothing to do with the PHP end of things but getting and exporting ...
user avatar
  • 111
3 votes
2 answers
2k views

Bypass for the certificate must be valid for 825 days or fewer

Is there a way to workaround issue with certs valid for long time (10 years)? I work in a corporation where Macs are not common and we have some internal long live certificates. I know I can add ...
user avatar

1
2 3 4 5 6