Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [certificate]

Questions about importing/creating and using x509 certificates for SSL, iOS & macOS development. Questions about accessing and using certificates programmatically are off topic.

2
votes
2answers
18 views

How to import X.509 certificates into MacOS?

I have the file with X.509 certificates and the following preamble: # This is a bundle of X.509 certificates of public Certificate # Authorities. It was generated from the Mozilla root CA list. # ...
1
vote
1answer
66 views

How can I see what permissions an enterprise app certificate has?

I live in Iran, and here most Iranian apps are banned from the App Store, and are distributed using enterprise certificates. There are even Iranian app stores that use a single such certificate to ...
0
votes
0answers
23 views

Fixing a Mac unable to fetch software updates? Requests to https://swdist.apple.com/* seem to be failing HTTPS cert validation

I've discovered that my Mac can't fetch software updates because the requests to Apple server's are failing. I think it's something related to HTTPS cert validating or cert pinning. I was tipped off ...
1
vote
0answers
31 views

Which keychain holds user trusted certificates?

I tried to do a clean install of my El Capitan MacBook but realised that much of my keychain migrated over. When I went into keychain access it showed a number of different keychains. I reset the "...
0
votes
0answers
36 views

Cannot export System.keychain Certificate from with private key as p12 via Terminal security export command

I have a machine certificate installed in system.keychain and want to export certificate with privet key via security export command. But getting error :security: SecKeychainItemExport: User ...
3
votes
2answers
31 views

How can I tell that a certificate is a root certificate?

Are these certificates root certificates or not and how can I disable them if they are?
2
votes
1answer
42 views

Do I need to renew the Institutional Recovery Key certificate with FileVault

We plan to roll out FileVault via Apple's own MDM (Server.app). I already have some test-computers enrolled. When I look at the certificate used for the Institutional Recovery Key, it expires in ...
0
votes
0answers
40 views

Problem loading images from googleusercontent

Recently switched from Chrome to Firefox Quantum and noticed that images from *.googleusercontent.com aren't loading because "The connection used to fetch the resource was not secure" If I attempt to ...
0
votes
1answer
640 views

Apple Mail warning: Unable to verify message signature

After upgrading from Sierra to Mojave (macOS 10.14), Apple mail started to display the warning Unable to verify message signature above all signed and encrypted emails. When clicking on Details, it ...
1
vote
0answers
37 views

Can I use a letsencrypt certificate to secure macOS High Sierra Server Open Directory?

I have services (mail, web) on macOS High Sierra Server protected with a letsencrypt certificate and that works fine. I'd like to extend that use of letsencrypt to Open Directory, to fully get rid of ...
0
votes
1answer
56 views

Kiosk app for iPad that allows using a client side certificate

My web application is demanding a client side certificate to be installed. When opening the web app from a browser on my iPad, I'm prompted to allow using the certificate and all works well. Do you ...
4
votes
1answer
387 views

MacBook Pro Certificate - no value specified - Business Category : Private Organization

Today after I signed into my computer and opened Safari this window popped up: I am looking for help to know what this is, and what I need to do. Thank you.
0
votes
0answers
38 views

Recreate Certificate for Profile manager

I'm on a remote Mac (10.13.6) via VNC. So I cannot do a clean install os High Sierra. I had a name issue with the certificates as the correct server name was set after installation of the server app. ...
3
votes
2answers
48 views

Should I Trust a Certificate

Basically, my school is apparently having a network 'update' and are telling us to go to keychain access and trust a certificate. This is what they sent us. Exactly what will happen if I do this any? ...
0
votes
1answer
123 views

terminal: ERROR cannot verify www.important_website certificate, issued by ‘CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US’:

I am installing a large amount of files with wget and all of a sudden I get the error message: cannot verify www.ncei.noaa.gov's certificate, issued by ‘CN=DigiCert SHA2 Secure Server CA,O=DigiCert ...
5
votes
1answer
546 views

Import CA certificate into Chrome via command line

Is it possible to import a custom Certificate Authority (.crt) using Terminal or over SSH on macOS 10.13 High Sierra?
1
vote
0answers
38 views

Safari and Chrome loading the wrong website

My client is having an issue that is exclusive to her computer. When viewing her website on any other computer the website that shows is the current one being hosted by Squarespace. When viewing on ...
2
votes
0answers
2k views

Can't use self signed certificates any more, because “Enable full trust for root certificates” is gone from settings

As you can see, "Enable full trust for root certificates" is completely missing. What do I do? This is on iPhone X 11.4 btw.
1
vote
0answers
457 views

How do I configure an iPad to use EAP-TLS?

I try to connect an iPad (iOS 11.3.1) to a WiFi network which uses EAP-TLS. There is no way to specify EAP-TLS mode because of the lack of the certificate, so I need to import the certificate first. ...
0
votes
1answer
6k views

Certificates not updating

I'm trying to visit my university research group's website at home. The website requires a username and password to view and probably has who knows what kind of security systems in place. On Safari ...
2
votes
1answer
322 views

How to create a new identity in macOS?

I've done likely stupid things in Keychain Access and now I don't have access to identities: user@host:~$ security find-identity Policy: X.509 Basic Matching identities 0 identities found ...
1
vote
0answers
41 views

Why do browsers still not trust my internal sites even after installing the CA chain?

I host several web services on my internal network and have created TLS certificates for each of them, all signed by my home-baked OpenSSL certificate authority. I've imported the CA certificates into ...
1
vote
1answer
69 views

HTTP URLs aren't working on OS X Yosemite

My OS X Yosemite 10.10.5 Mac seems to only be able to hit HTTPS URLs, but not HTTP URLs. I tested another computer on my network, and that machine seems to work fine. I tested using this URL: http://...
1
vote
1answer
114 views

How to store and retrieve S/MIME certificates in Open Directory (LDAP) of macOS Server?

Is it possible to use the Open Directory of the macOS Server app to store and retrieve S/MIME (X.509) certificates with the user data? Background: I would like to share our public S/MIME ...
1
vote
0answers
220 views

Loading Kernel Extension takes too long while kextd repeatedly tries to get crl from the network

it's appears that loading my kernel extension sometimes takes too long, and the following set of messages repeats during the load time : kextd: (Security) SecTrustEvaluateIfNecessary trustd: [com....
0
votes
0answers
210 views

Is it possible for provisioning profiles to have an expiry date that comes after the expiry date of its certificate?

In our app, we display the details of the provisioning profile and certificate. So I came to notice that the date of expiry of the certificate precedes the date of expiry of the provisioning profile. ...
2
votes
0answers
65 views

Wrong Account Name with Certificate Authentication for VPN

I installed a user certificate and the enterprise CA onto an iOS device (iOS11). The user certificate contains UPN (User Principal Name) in its alternative subject name. I then tried to set up an ...
5
votes
1answer
811 views

How to make Chrome trust self signed certificates?

I have followed these instructions (available from Wayback Machine in case they disappear) to add the certificate of my Asus Router to the keychain but Chrome still refuses to trust it, with the error ...
23
votes
5answers
7k views

“Unknown Error = -2,147,414,007” on creating certificate with Certificate Assistant

I am getting "Unknown Error = -2,147,414,007" on creating a certificate through the Keychain app. Steps to Recreate: Open the Keychain Access application. Select Certificate Assistant > Create a ...
1
vote
0answers
388 views

Lowering Safari HTTPS strictness level for web developers and local http hosts

I am on latest High Sierra 10.13.2 and using Safari 11.0.2 (as up to date in Dec 2017). Issues did not exist on High Sierra 10.13.1 I followed the following steps: Chrome on macOS suddenly rejects ...
9
votes
1answer
4k views

Keychain Access error when creating new system certificate

I am following the instructions to codesign gdb on my MBP however when I get to the end of the System certificate creation process, keychain says "Unknown Error = -2,147,414,007" and the certificate ...
3
votes
0answers
473 views

Reset Safari SSL Exceptions on iOS 11

On iOS if you visit a website with an invalid SSL certificate, you are presented with this prompt (ok, it’s in italian but you get the picture): Tapping “show details” allows the user to proceed to ...
2
votes
0answers
59 views

Recreating distribution certs in enterprise apps

I have an enterprise account and the distribution certificate for the account is going to expire. I read through the documentation here and understand that I need to generate a new certificate and ...
1
vote
0answers
104 views

Can Mail-app present a client certificate to an SMTP-server?

I have configured my SMTP-server to allow relaying of e-mails to clients, who present a certificate issued by my own Certificate Authority. Things work for sendmail and Thunderbird, but now I ...
11
votes
1answer
4k views

Any way to temporarily allow insecure SSL on Safari in High Sierra?

Apparently High Sierra has changed the way Safari handles untrusted SSL certificates. In the past you could bypass an SSL warning and visit a site. But if you visited that site again in a new session,...
4
votes
1answer
13k views

How can I delete a certificate that got restored from a backup under iOS 10/11?

With iOS, certificates are installed as part of profiles. Deleting a certificate means removing the profile. When an iPhone with profiles is backed up, and then the backup is restored to a new device,...
0
votes
1answer
100 views

Would like to delete certificates

How can I delete certificates on my MacBook? In the All Items category I am having to spend to much time looking for the most current certificates.
7
votes
1answer
9k views

What happens when a distribution certificate expires or revoked?

My app is already in App Store. Now my distribution certificate is expired. I know my app in App Store will continue running, but my questions are: If now I have a bug fix in my app, does it mean I ...
3
votes
1answer
2k views

Your browser does not currently recognize any of the video formats available

I am not sure what happened… My internet was working fine all day, so I do not know what would cause this message and notice my browser is currently not recognized.
9
votes
1answer
492 views

Problems connecting to HTTPS websites on unsecured WiFi

I am on a MacBook Air running OSX 10.10.2. I try to connect to an HTTPS website on Firefox and I get the message Your connection is not secure The owner of www.google.co.il has configured ...
1
vote
1answer
339 views

Advanced configuration for email notifications about Apple Developer Certificates expiration

Mainly, I just wanted to ask the same question here, because the community here is active (comparing to what is seen on Apple Developer Forums, unfortunately): https://forums.developer.apple.com/...
0
votes
1answer
231 views

SSL Client authentication with non-exportable certificates in Mac

We use our organization's provided SSO certificate for SSL client authentication from our Java based desktop clients (Mac and Windows). It seems in Mac, the certificate is marked with non-exportable ...
0
votes
1answer
314 views

Developer ID Installer certificate “unusable” on another iMac

I asked our Team Agent to produce a Developer ID Installer certificate in order to sign our Mac OSX installer. He sent me the developerID_installer.cer file via e-mail and I added it to my Keychain. ...
0
votes
1answer
281 views

MacOSX Installer signed but Gatekeeper complains

My C++ daemon for MacOSX is being successfully signed with productbuild: productbuild: Wrote product to Installers/app.pkg-unsigned productsign: signing product with identity "3rd Party Mac Developer ...
1
vote
1answer
3k views

iPhone untrusted certificate warning

My iPhone 7 iOS 10.3.1 randomly started receiving untrusted certificate pop-ups from onboard.info (but I’ve seen it on devices going back to iPhone 5): This was at home last night and I had just ...
1
vote
1answer
382 views

My signed .pkg file is not accepted

I'm struggling with signing my installer to keep Gatekeeper happy. When building i sign the .pkg: productsign --sign "3rd Party Mac Developer Installer: GNXXXXXXXXXX (XXXXXXXXXXX)" ...
0
votes
1answer
937 views

Safari incorrectly demands to select an SSL client certificate

Several websites suddenly recently have popped up the dialog sheet in Safari requesting me to select an SSL client certificate. None of these sites (one example is forums.macrumors.com) actually use ...
1
vote
3answers
896 views

Re-added certificate leads to unknown authority

Messing around with Keychain Access on macOS Sierra, it seems like I have accidentally deleted trusted root certificates in Keychain Access. What I did was opening a *.p7s file to add a S/MIME ...
8
votes
1answer
2k views

Why is the Turkish Government in my computer?

Perusing Keychain Access, I see that "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" is listed as a trusted root certificate authority. Per this 2013 article, I understand that: my ...
1
vote
1answer
822 views

Sign flat package with non-Apple certificate

I have a program that I ported from the Windows environment to macOS. I would like to sign the flat installer .pkg with the same certificate I used on Windows, which is valid and granted by DigiCert. ...