Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [certificate]

Questions about importing/creating and using x509 certificates for SSL, iOS & macOS development. Questions about accessing and using certificates programmatically are off topic.

0
votes
1answer
11 views

Detect if Apple Certificate File is Development versus Distribution

When building an iOS App, Apple requires that you obtain a Development or Distribution certificate through their Apple Development Program. Using only the file itself, how can the type of certificate ...
0
votes
0answers
18 views

How to mass-deploy a root certificate in a corporate environment

Our Windows administrator deploys a root CA certificate to all the machines through Group Policies, which works very well in a corporate setting. Is there something similar to this we can use for our ...
2
votes
0answers
40 views

Trust SSL certificate via terminal in MacOS

I'm trying to setup WPA2 with EAP-TLS authentication using certificates in pfx format. As adding the certificate to the keychain and changing the Trust settings can be difficult for some users, I ...
1
vote
2answers
39 views

How to create an identity who can be used for signing code from custom certificate?

I want to codesign one of my applications by using my own certificate (not created with Keychain Access). First, I create a v3.ext file: keyUsage = digitalSignature Then, I created my certificate ...
3
votes
0answers
40 views

How to create /etc/certificates/*.{cert,chain,concat,key}.pem files without reboot?

I am trying to move from Comodo to Let's Encrypt certificates on OS X Server (10.7). Something in Apple's server.app and ServerAdmin.app is broken. I can see and select newly imported certificates in ...
1
vote
1answer
91 views

How to disable certificate transparency check in macOS Mojave(10.14)

In macOS Mojave, certificate transparency check is enabled. Because the OS terminates all TLS connections that doesn’t use transparent certificates, macOS Mojave cannot connect to WPA2 Enterprise ...
0
votes
0answers
21 views

How do I find out which app uses which distribution certificate?

I want to build the app using Expo React Native. Expo can handle all credentials for me automatically: distribution certificate, push notifications key, and provisioning profile. Unfortunately, we ...
0
votes
0answers
60 views

Open Keychain Access Get Info window after loading certificate

I add in my program certificate to login keychain and opened Keychain Access application. I wanted also to open Get Info window for this specific certificate automatically. But it is neither possible ...
0
votes
1answer
30 views

Cannot seem to install VMware vCSA 6.7 cert on macOS 10.13.6 High Sierra

Trying to install the web certificate for my vCenter Server Appliance (vCSA 6.7) on my Mac Mini (running macOS High Sierra 10.13.6). I download the cert.0 file, change the extension to .crt and double-...
0
votes
3answers
4k views

Cydia Impactor won't sideload

When I try to sign/resign (sideload) H3lix-RC5.ipa (iPhone 5C w/ iOS 10.3.3 x32) or g0blin_rc2.ipa (iPhone 6S w/ iOS 10.3.3 x64) I get: Error: file: installation.cpp; line: 42; what: Failed to ...
2
votes
2answers
100 views

How to import X.509 certificates into MacOS?

I have the file with X.509 certificates and the following preamble: # This is a bundle of X.509 certificates of public Certificate # Authorities. It was generated from the Mozilla root CA list. # ...
1
vote
1answer
292 views

How can I see what permissions an enterprise app certificate has?

I live in Iran, and here most Iranian apps are banned from the App Store, and are distributed using enterprise certificates. There are even Iranian app stores that use a single such certificate to ...
0
votes
0answers
79 views

Fixing a Mac unable to fetch software updates? Requests to https://swdist.apple.com/* seem to be failing HTTPS cert validation

I've discovered that my Mac can't fetch software updates because the requests to Apple server's are failing. I think it's something related to HTTPS cert validating or cert pinning. I was tipped off ...
1
vote
0answers
44 views

Which keychain holds user trusted certificates?

I tried to do a clean install of my El Capitan MacBook but realised that much of my keychain migrated over. When I went into keychain access it showed a number of different keychains. I reset the "...
1
vote
0answers
154 views

Cannot export System.keychain Certificate from with private key as p12 via Terminal security export command

I have a machine certificate installed in system.keychain and want to export certificate with privet key via security export command. But getting error :security: SecKeychainItemExport: User ...
4
votes
2answers
47 views

How can I tell that a certificate is a root certificate?

Are these certificates root certificates or not and how can I disable them if they are?
1
vote
1answer
94 views

Do I need to renew the Institutional Recovery Key certificate with FileVault

We plan to roll out FileVault via Apple's own MDM (Server.app). I already have some test-computers enrolled. When I look at the certificate used for the Institutional Recovery Key, it expires in ...
1
vote
1answer
208 views

Problem loading images from googleusercontent

Recently switched from Chrome to Firefox Quantum and noticed that images from *.googleusercontent.com aren't loading because "The connection used to fetch the resource was not secure" If I attempt to ...
3
votes
1answer
3k views

Apple Mail warning: Unable to verify message signature

After upgrading from Sierra to Mojave (macOS 10.14), Apple mail started to display the warning Unable to verify message signature above all signed and encrypted emails. When clicking on Details, it ...
1
vote
0answers
63 views

Can I use a letsencrypt certificate to secure macOS High Sierra Server Open Directory?

I have services (mail, web) on macOS High Sierra Server protected with a letsencrypt certificate and that works fine. I'd like to extend that use of letsencrypt to Open Directory, to fully get rid of ...
0
votes
1answer
63 views

Kiosk app for iPad that allows using a client side certificate

My web application is demanding a client side certificate to be installed. When opening the web app from a browser on my iPad, I'm prompted to allow using the certificate and all works well. Do you ...
4
votes
1answer
392 views

MacBook Pro Certificate - no value specified - Business Category : Private Organization

Today after I signed into my computer and opened Safari this window popped up: I am looking for help to know what this is, and what I need to do. Thank you.
0
votes
0answers
81 views

Recreate Certificate for Profile manager

I'm on a remote Mac (10.13.6) via VNC. So I cannot do a clean install os High Sierra. I had a name issue with the certificates as the correct server name was set after installation of the server app. ...
3
votes
2answers
55 views

Should I Trust a Certificate

Basically, my school is apparently having a network 'update' and are telling us to go to keychain access and trust a certificate. This is what they sent us. Exactly what will happen if I do this any? ...
0
votes
1answer
169 views

terminal: ERROR cannot verify www.important_website certificate, issued by ‘CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US’:

I am installing a large amount of files with wget and all of a sudden I get the error message: cannot verify www.ncei.noaa.gov's certificate, issued by ‘CN=DigiCert SHA2 Secure Server CA,O=DigiCert ...
5
votes
1answer
1k views

Import CA certificate into Chrome via command line

Is it possible to import a custom Certificate Authority (.crt) using Terminal or over SSH on macOS 10.13 High Sierra?
1
vote
0answers
57 views

Safari and Chrome loading the wrong website

My client is having an issue that is exclusive to her computer. When viewing her website on any other computer the website that shows is the current one being hosted by Squarespace. When viewing on ...
2
votes
0answers
3k views

Can't use self signed certificates any more, because “Enable full trust for root certificates” is gone from settings

As you can see, "Enable full trust for root certificates" is completely missing. What do I do? This is on iPhone X 11.4 btw.
1
vote
0answers
702 views

How do I configure an iPad to use EAP-TLS?

I try to connect an iPad (iOS 11.3.1) to a WiFi network which uses EAP-TLS. There is no way to specify EAP-TLS mode because of the lack of the certificate, so I need to import the certificate first. ...
0
votes
1answer
9k views

Certificates not updating

I'm trying to visit my university research group's website at home. The website requires a username and password to view and probably has who knows what kind of security systems in place. On Safari ...
3
votes
1answer
513 views

How to create a new identity in macOS?

I've done likely stupid things in Keychain Access and now I don't have access to identities: user@host:~$ security find-identity Policy: X.509 Basic Matching identities 0 identities found ...
1
vote
0answers
45 views

Why do browsers still not trust my internal sites even after installing the CA chain?

I host several web services on my internal network and have created TLS certificates for each of them, all signed by my home-baked OpenSSL certificate authority. I've imported the CA certificates into ...
1
vote
1answer
77 views

HTTP URLs aren't working on OS X Yosemite

My OS X Yosemite 10.10.5 Mac seems to only be able to hit HTTPS URLs, but not HTTP URLs. I tested another computer on my network, and that machine seems to work fine. I tested using this URL: http://...
1
vote
1answer
198 views

How to store and retrieve S/MIME certificates in Open Directory (LDAP) of macOS Server?

Is it possible to use the Open Directory of the macOS Server app to store and retrieve S/MIME (X.509) certificates with the user data? Background: I would like to share our public S/MIME ...
2
votes
0answers
74 views

Wrong Account Name with Certificate Authentication for VPN

I installed a user certificate and the enterprise CA onto an iOS device (iOS11). The user certificate contains UPN (User Principal Name) in its alternative subject name. I then tried to set up an ...
4
votes
1answer
1k views

How to make Chrome trust self signed certificates?

I have followed these instructions (available from Wayback Machine in case they disappear) to add the certificate of my Asus Router to the keychain but Chrome still refuses to trust it, with the error ...
25
votes
6answers
8k views

“Unknown Error = -2,147,414,007” on creating certificate with Certificate Assistant

I am getting "Unknown Error = -2,147,414,007" on creating a certificate through the Keychain app. Steps to Recreate: Open the Keychain Access application. Select Certificate Assistant > Create a ...
10
votes
2answers
4k views

Keychain Access error when creating new system certificate

I am following the instructions to codesign gdb on my MBP however when I get to the end of the System certificate creation process, keychain says "Unknown Error = -2,147,414,007" and the certificate ...
3
votes
0answers
526 views

Reset Safari SSL Exceptions on iOS 11

On iOS if you visit a website with an invalid SSL certificate, you are presented with this prompt (ok, it’s in italian but you get the picture): Tapping “show details” allows the user to proceed to ...
2
votes
0answers
66 views

Recreating distribution certs in enterprise apps

I have an enterprise account and the distribution certificate for the account is going to expire. I read through the documentation here and understand that I need to generate a new certificate and ...
12
votes
1answer
6k views

Any way to temporarily allow insecure SSL on Safari in High Sierra?

Apparently High Sierra has changed the way Safari handles untrusted SSL certificates. In the past you could bypass an SSL warning and visit a site. But if you visited that site again in a new session,...
6
votes
1answer
16k views

How can I delete a certificate that got restored from a backup under iOS 10/11?

With iOS, certificates are installed as part of profiles. Deleting a certificate means removing the profile. When an iPhone with profiles is backed up, and then the backup is restored to a new device,...
0
votes
1answer
126 views

Would like to delete certificates

How can I delete certificates on my MacBook? In the All Items category I am having to spend to much time looking for the most current certificates.
8
votes
1answer
11k views

What happens when a distribution certificate expires or revoked?

My app is already in App Store. Now my distribution certificate is expired. I know my app in App Store will continue running, but my questions are: If now I have a bug fix in my app, does it mean I ...
3
votes
1answer
2k views

Your browser does not currently recognize any of the video formats available

I am not sure what happened… My internet was working fine all day, so I do not know what would cause this message and notice my browser is currently not recognized.
9
votes
1answer
608 views

Problems connecting to HTTPS websites on unsecured WiFi

I am on a MacBook Air running OSX 10.10.2. I try to connect to an HTTPS website on Firefox and I get the message Your connection is not secure The owner of www.google.co.il has configured ...
1
vote
1answer
483 views

Advanced configuration for email notifications about Apple Developer Certificates expiration

Mainly, I just wanted to ask the same question here, because the community here is active (comparing to what is seen on Apple Developer Forums, unfortunately): https://forums.developer.apple.com/...
0
votes
1answer
307 views

SSL Client authentication with non-exportable certificates in Mac

We use our organization's provided SSO certificate for SSL client authentication from our Java based desktop clients (Mac and Windows). It seems in Mac, the certificate is marked with non-exportable ...
0
votes
1answer
360 views

Developer ID Installer certificate “unusable” on another iMac

I asked our Team Agent to produce a Developer ID Installer certificate in order to sign our Mac OSX installer. He sent me the developerID_installer.cer file via e-mail and I added it to my Keychain. ...
0
votes
1answer
316 views

MacOSX Installer signed but Gatekeeper complains

My C++ daemon for MacOSX is being successfully signed with productbuild: productbuild: Wrote product to Installers/app.pkg-unsigned productsign: signing product with identity "3rd Party Mac Developer ...