Questions tagged [certificate]

Questions about importing/creating and using x509 certificates for SSL, iOS & macOS development. Questions about accessing and using certificates programmatically are off topic.

Filter by
Sorted by
Tagged with
3
votes
2answers
45 views

How to see certificate for intermediate CA in Keychain?

When I check details of a certificate I only see information about the certificate itself. Is there any way to see the issuer’s certificate? In my case it’s an intermediate CA. The certificate that I ...
3
votes
1answer
93 views

Work computer shows “This connection is not private” warning on almost all sites

My workplace allows me to use a Mac, but doesn't have much experience with them; their support is minimal if well intentioned, and generally as much harm as help. This includes installing antivirus ...
1
vote
1answer
32 views

How to get Apple certificate to sign files?

I was tasked by my boss to handle new project at work - JAMF to manage our MacOS devices (we are mostly Windows corporation, so it isn't easy). We bought it, had some training. I want now to use ...
1
vote
1answer
207 views

Apple iPhone won't connect to insecure website

A certificate is expired of an application of ours and a client still wants to access it. He is using an Apple iPhone and gets the message Safari cannot open the page because it could not establish ...
1
vote
2answers
59 views

How do you clear SSL leaf certificates mappings to particular domains

I visit my website using Chrome on macOS Mojave, for example, qa.abc.com, and the SSL leaf certificate is from customer-test.ssl.fastly.net. I recently updated the CNAME record in my DNS for qa.abc....
7
votes
1answer
325 views

Strange looking certificate in macOS Keychain

I need help with a strange looking certificate which has appeared in the Keychain of my Mac. The name of the certificate is "A9936B80-41C7-4D34-8020-59C3E40A31A8 A98369B2-0C8C-4CF8-9921-015C5D9A4C86"....
0
votes
0answers
50 views

Connect to VPN based on IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol with root certification on MacOS?

I am trying to connect to VPN via IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol. But after adding my certification in to the keychain access, I am still not able to select this ...
0
votes
1answer
23 views

Detect if Apple Certificate File is Development versus Distribution

When building an iOS App, Apple requires that you obtain a Development or Distribution certificate through their Apple Development Program. Using only the file itself, how can the type of certificate ...
0
votes
0answers
25 views

How to mass-deploy a root certificate in a corporate environment

Our Windows administrator deploys a root CA certificate to all the machines through Group Policies, which works very well in a corporate setting. Is there something similar to this we can use for our ...
2
votes
0answers
156 views

Trust SSL certificate via terminal in MacOS

I'm trying to setup WPA2 with EAP-TLS authentication using certificates in pfx format. As adding the certificate to the keychain and changing the Trust settings can be difficult for some users, I ...
1
vote
2answers
119 views

How to create an identity who can be used for signing code from custom certificate?

I want to codesign one of my applications by using my own certificate (not created with Keychain Access). First, I create a v3.ext file: keyUsage = digitalSignature Then, I created my certificate ...
4
votes
0answers
89 views

How to create /etc/certificates/*.{cert,chain,concat,key}.pem files without reboot?

I am trying to move from Comodo to Let's Encrypt certificates on OS X Server (10.7). Something in Apple's server.app and ServerAdmin.app is broken. I can see and select newly imported certificates in ...
1
vote
1answer
286 views

How to disable certificate transparency check in macOS Mojave(10.14)

In macOS Mojave, certificate transparency check is enabled. Because the OS terminates all TLS connections that doesn’t use transparent certificates, macOS Mojave cannot connect to WPA2 Enterprise ...
0
votes
1answer
75 views

How do I find out which app uses which distribution certificate?

I want to build the app using Expo React Native. Expo can handle all credentials for me automatically: distribution certificate, push notifications key, and provisioning profile. Unfortunately, we ...
0
votes
0answers
84 views

Open Keychain Access Get Info window after loading certificate

I add in my program certificate to login keychain and opened Keychain Access application. I wanted also to open Get Info window for this specific certificate automatically. But it is neither possible ...
0
votes
1answer
83 views

Cannot seem to install VMware vCSA 6.7 cert on macOS 10.13.6 High Sierra

Trying to install the web certificate for my vCenter Server Appliance (vCSA 6.7) on my Mac Mini (running macOS High Sierra 10.13.6). I download the cert.0 file, change the extension to .crt and double-...
0
votes
3answers
4k views

Cydia Impactor won't sideload

When I try to sign/resign (sideload) H3lix-RC5.ipa (iPhone 5C w/ iOS 10.3.3 x32) or g0blin_rc2.ipa (iPhone 6S w/ iOS 10.3.3 x64) I get: Error: file: installation.cpp; line: 42; what: Failed to ...
2
votes
2answers
284 views

How to import X.509 certificates into MacOS?

I have the file with X.509 certificates and the following preamble: # This is a bundle of X.509 certificates of public Certificate # Authorities. It was generated from the Mozilla root CA list. # ...
1
vote
1answer
396 views

How can I see what permissions an enterprise app certificate has?

I live in Iran, and here most Iranian apps are banned from the App Store, and are distributed using enterprise certificates. There are even Iranian app stores that use a single such certificate to ...
0
votes
0answers
120 views

Fixing a Mac unable to fetch software updates? Requests to https://swdist.apple.com/* seem to be failing HTTPS cert validation

I've discovered that my Mac can't fetch software updates because the requests to Apple server's are failing. I think it's something related to HTTPS cert validating or cert pinning. I was tipped off ...
1
vote
0answers
52 views

Which keychain holds user trusted certificates?

I tried to do a clean install of my El Capitan MacBook but realised that much of my keychain migrated over. When I went into keychain access it showed a number of different keychains. I reset the "...
1
vote
0answers
249 views

Cannot export System.keychain Certificate from with private key as p12 via Terminal security export command

I have a machine certificate installed in system.keychain and want to export certificate with privet key via security export command. But getting error :security: SecKeychainItemExport: User ...
4
votes
2answers
60 views

How can I tell that a certificate is a root certificate?

Are these certificates root certificates or not and how can I disable them if they are?
1
vote
1answer
120 views

Do I need to renew the Institutional Recovery Key certificate with FileVault

We plan to roll out FileVault via Apple's own MDM (Server.app). I already have some test-computers enrolled. When I look at the certificate used for the Institutional Recovery Key, it expires in ...
1
vote
1answer
342 views

Problem loading images from googleusercontent

Recently switched from Chrome to Firefox Quantum and noticed that images from *.googleusercontent.com aren't loading because "The connection used to fetch the resource was not secure" If I attempt to ...
5
votes
1answer
5k views

Apple Mail warning: Unable to verify message signature

After upgrading from Sierra to Mojave (macOS 10.14), Apple mail started to display the warning Unable to verify message signature above all signed and encrypted emails. When clicking on Details, it ...
1
vote
0answers
68 views

Can I use a letsencrypt certificate to secure macOS High Sierra Server Open Directory?

I have services (mail, web) on macOS High Sierra Server protected with a letsencrypt certificate and that works fine. I'd like to extend that use of letsencrypt to Open Directory, to fully get rid of ...
0
votes
1answer
74 views

Kiosk app for iPad that allows using a client side certificate

My web application is demanding a client side certificate to be installed. When opening the web app from a browser on my iPad, I'm prompted to allow using the certificate and all works well. Do you ...
4
votes
1answer
392 views

MacBook Pro Certificate - no value specified - Business Category : Private Organization

Today after I signed into my computer and opened Safari this window popped up: I am looking for help to know what this is, and what I need to do. Thank you.
3
votes
2answers
62 views

Should I Trust a Certificate

Basically, my school is apparently having a network 'update' and are telling us to go to keychain access and trust a certificate. This is what they sent us. Exactly what will happen if I do this any? ...
0
votes
1answer
195 views

terminal: ERROR cannot verify www.important_website certificate, issued by ‘CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US’:

I am installing a large amount of files with wget and all of a sudden I get the error message: cannot verify www.ncei.noaa.gov's certificate, issued by ‘CN=DigiCert SHA2 Secure Server CA,O=DigiCert ...
5
votes
1answer
2k views

Import CA certificate into Chrome via command line

Is it possible to import a custom Certificate Authority (.crt) using Terminal or over SSH on macOS 10.13 High Sierra?
1
vote
0answers
69 views

Safari and Chrome loading the wrong website

My client is having an issue that is exclusive to her computer. When viewing her website on any other computer the website that shows is the current one being hosted by Squarespace. When viewing on ...
2
votes
0answers
4k views

Can't use self signed certificates any more, because “Enable full trust for root certificates” is gone from settings

As you can see, "Enable full trust for root certificates" is completely missing. What do I do? This is on iPhone X 11.4 btw.
1
vote
0answers
861 views

How do I configure an iPad to use EAP-TLS?

I try to connect an iPad (iOS 11.3.1) to a WiFi network which uses EAP-TLS. There is no way to specify EAP-TLS mode because of the lack of the certificate, so I need to import the certificate first. ...
5
votes
2answers
11k views

Certificates not updating

I'm trying to visit my university research group's website at home. The website requires a username and password to view and probably has who knows what kind of security systems in place. On Safari ...
3
votes
1answer
648 views

How to create a new identity in macOS?

I've done likely stupid things in Keychain Access and now I don't have access to identities: user@host:~$ security find-identity Policy: X.509 Basic Matching identities 0 identities found ...
1
vote
0answers
50 views

Why do browsers still not trust my internal sites even after installing the CA chain?

I host several web services on my internal network and have created TLS certificates for each of them, all signed by my home-baked OpenSSL certificate authority. I've imported the CA certificates into ...
1
vote
1answer
87 views

HTTP URLs aren't working on OS X Yosemite

My OS X Yosemite 10.10.5 Mac seems to only be able to hit HTTPS URLs, but not HTTP URLs. I tested another computer on my network, and that machine seems to work fine. I tested using this URL: http://...
1
vote
1answer
285 views

How to store and retrieve S/MIME certificates in Open Directory (LDAP) of macOS Server?

Is it possible to use the Open Directory of the macOS Server app to store and retrieve S/MIME (X.509) certificates with the user data? Background: I would like to share our public S/MIME ...
2
votes
0answers
78 views

Wrong Account Name with Certificate Authentication for VPN

I installed a user certificate and the enterprise CA onto an iOS device (iOS11). The user certificate contains UPN (User Principal Name) in its alternative subject name. I then tried to set up an ...
4
votes
1answer
1k views

How to make Chrome trust self signed certificates?

I have followed these instructions (available from Wayback Machine in case they disappear) to add the certificate of my Asus Router to the keychain but Chrome still refuses to trust it, with the error ...
27
votes
6answers
9k views

“Unknown Error = -2,147,414,007” on creating certificate with Certificate Assistant

I am getting "Unknown Error = -2,147,414,007" on creating a certificate through the Keychain app. Steps to Recreate: Open the Keychain Access application. Select Certificate Assistant > Create a ...
11
votes
2answers
5k views

Keychain Access error when creating new system certificate

I am following the instructions to codesign gdb on my MBP however when I get to the end of the System certificate creation process, keychain says "Unknown Error = -2,147,414,007" and the certificate ...
3
votes
0answers
543 views

Reset Safari SSL Exceptions on iOS 11

On iOS if you visit a website with an invalid SSL certificate, you are presented with this prompt (ok, it’s in italian but you get the picture): Tapping “show details” allows the user to proceed to ...
2
votes
0answers
82 views

Recreating distribution certs in enterprise apps

I have an enterprise account and the distribution certificate for the account is going to expire. I read through the documentation here and understand that I need to generate a new certificate and ...
12
votes
1answer
7k views

Any way to temporarily allow insecure SSL on Safari in High Sierra?

Apparently High Sierra has changed the way Safari handles untrusted SSL certificates. In the past you could bypass an SSL warning and visit a site. But if you visited that site again in a new session,...
6
votes
1answer
17k views

How can I delete a certificate that got restored from a backup under iOS 10/11?

With iOS, certificates are installed as part of profiles. Deleting a certificate means removing the profile. When an iPhone with profiles is backed up, and then the backup is restored to a new device,...
0
votes
1answer
143 views

Would like to delete certificates

How can I delete certificates on my MacBook? In the All Items category I am having to spend to much time looking for the most current certificates.
11
votes
1answer
12k views

What happens when a distribution certificate expires or revoked?

My app is already in App Store. Now my distribution certificate is expired. I know my app in App Store will continue running, but my questions are: If now I have a bug fix in my app, does it mean I ...