Questions tagged [certificate]
Questions about importing/creating and using x509 certificates for SSL, iOS & macOS development. Questions about accessing and using certificates programmatically are off topic.
264
questions
0
votes
0
answers
28
views
Root CA on Apple Watch / watchOS
How can I install my own custom Root CA on an Apple Watch?
I know how to do it on iOS/iPad OS (→ I use Apple Configurator 2) and I also know how to do it for macOS as well as for Firefox.
However, I ...
0
votes
0
answers
15
views
MacOS Homebrew Easy-Rsa wont sign CSR: '$ easyrsa sign-req server home-server' easyrsa_openssl - Command has failed: openssl ca -utf8 -batch -in
I am trying to build an OpenVPN certificate for an openvpn server on MacOS using Easy-Rsa from Homebrew installation. I am following these instructions from the downloadable guide here: https://forum....
- 660
1
vote
1
answer
40
views
Can I generate Apple Wallet passes for other businesses?
My idea is to help small businesses without an IT infrastructure to generate Apple Wallet passes for their customers to identify them later. All the data would be stored in my database and will be ...
- 11
1
vote
0
answers
18
views
S/MIME certificate not trusted
I actually own a S/MIME certificate for my e-mail address. I got no problem installing it on my Mac, and it perfectly works with Apple Mail (except the encryption icon that is greyed out, but I don't ...
- 11
1
vote
0
answers
44
views
Adding own certificate authority to macOS
I currently facing the problem that I created a certificate authority certificate and would like to add this custom CA to macOS.
The general way would be to add it to the "System" area in my ...
- 11
1
vote
1
answer
562
views
'The server identity of ttotaliampleton.com could not be verified.' Why is that?
This pop-message just comes out of nowhere. How can i fix this? Is it a bug?
- 13
0
votes
0
answers
269
views
How can I get pip3 to find my root certificate in macOS?
I am trying to use pip3 to install matplotlib. My company's root certificate is at ~/Documents/the-certificate-name.cer. The output is:
myprompt % pip3 install matplotlib
ERROR: Could not install ...
- 123
1
vote
0
answers
71
views
AirPrint authentication using client certificate
Is the AirPrint authentication via client certificates supported in iOS 16.1?
Bonjour specification defines an "air" key in the TXT record with a "certificate" as a valid option. ...
- 111
1
vote
1
answer
149
views
How to sign an application bundle with the same display name as the installer package?
I can sign a bundle with "Mac Developer" identity which is connected to my Apple account user name (ie a "person").
I can sign the package (.pkg) that contains the bundle with a &...
- 113
0
votes
0
answers
51
views
macOS Create a machine CSR to submit to a Certificate Authority
I am in enterprise IT and need to develop a process for scripting the creation of a Certificate Signing Request for the machine. There must also be no MDM dependences. I support our CA infrastructure ...
- 101
1
vote
0
answers
117
views
How to stop keychain / Safari from storing identity preferences?
I have several digital certificates installed in my computer and stored on my keychain. Certain websites (normally from Spanish government) require user identification through these certificates. ...
- 113
0
votes
0
answers
440
views
Make iPad trust my HTTPS certificate signed by CA that I created and have added to iPad
Everything is in my LAN. I created a CA certificate using XCA. On Windows and Android, I could install the CA's ".cer" file system-wise. Chrome-based browsers said that the HTTPS certificate ...
- 1,949
6
votes
2
answers
6k
views
Mac: Import .p12 certificate into the Keychain via command line
I'm trying to import .p12 certificate into the keychain on my Mac via bash script. So far, I've been trying:
sudo security import command.
It returns that import was successful but, in fact, it ...
- 161
1
vote
0
answers
1k
views
Previously trusted WiFi now asking me to select a certificate but the list is empty
I had this WPA2 Enterprise WiFi saved on my MacBook since forever, and the certificate was trusted first time I connected to it.
Suddenly the MacBook seems to have automatically forgotten the network (...
- 53
1
vote
1
answer
1k
views
How do I import a .pfx certificate into my iphone?
I have iphone 13, but downloading the single .pfx certificate didn't show any option to install it, the guides on the internet suggest mailing it, so I've tried sending it to my gmail but that also ...
- 115
0
votes
1
answer
242
views
Missing certificates after upgrading offlineimap
I upgraded offlineimap via Homebrew and it is now now 8.0.0 with Python 3.10. Now I am missing the certificates:
ERROR: Unknown SSL protocol connecting to host 'imap.mail.eu-west-1.awsapps.com' for ...
- 1,005
0
votes
1
answer
562
views
Apple mail can't verify certificate
I have set up a local mail server on our NAS to backup mails.
For some time now Apple Mail can't verify the certificate.
I found this Apple help post: https://support.apple.com/guide/mail/trust-a-...
- 221
0
votes
0
answers
1k
views
Codesign: The specified item could not be found in the keychain
I am trying to codesign one VST plugin in Terminal. I added a self-signed certificate to the login keychain. I try to codesign using the following command:
sudo codesign --force --deep --sign Ozone\ 9\...
- 101
1
vote
1
answer
527
views
iOS distribution certificates expiring for two apps from same team: Do I need to take separate actions?
I have two apps both associated with the same development team, and I've gotten notifications for both of them that Your iOS Distribution Certificate will no longer be valid in 30 days. I got these ...
- 461
3
votes
1
answer
4k
views
How do I view the TLS certificate in iOS 15 Safari?
How do I view the TLS certificate in iOS 15 Safari?
I tried every button on the tool bar, and still couldn't find the view cert option.
- 1,628
0
votes
0
answers
983
views
Cannot delete duplicate certificate
I have a duplicate certificate in my keychain which I cannot seem to be able to delete. If I delete it from the keychain app by first unlocking the system keychain and then right clicking and ...
- 792
0
votes
1
answer
706
views
Add self-signed certificate
I would like to access my Synology NAS via HTTPS, but don't have the money to buy a certificate. I've read that you can generate your own and manually trust it. So after following the step here, I ...
- 2,503
0
votes
2
answers
3k
views
Many sites are displaying SSL Certificate invalid but their date is in the future and the computer's clock is fine
I reinstalled an old 2015 Apple computer today, and I ran into a few issues.
During system install, it failed because of some SSL issues, and I had to change the system's clock to prior 2017 for the ...
- 139
1
vote
0
answers
210
views
Export x509 Certificate from iPad
Question: Is there a way to export a public certificate from an iPad running the latest iOS? (PEM formatted Base64 if possible)
Scenario:
AirWatch manages our iPads.
There is a profile configured to ...
- 111
0
votes
2
answers
1k
views
Install a package with an expired certificate
I just noticed I can double-clik, open and install a .pkg package installer that has an expired certificate without any popup like "This package is from an developer whose certificate has expired&...
- 191
1
vote
1
answer
348
views
macOS - How do I change cert trust state from command line?
My workflow involves changing a cert installed in the system's trust states between 'Use Custom Settings' and 'Never Trust' (see the Keychain Access screenshot below).
How do I do this from command ...
- 1,628
0
votes
0
answers
142
views
There is an unknown developer's iPhone Distribution certificate in my keychain. Where does it come from?
I'm an iOS developer, and today I noticed that in my project's build settings, Xcode suggests a Code Signing Identity that I have never seen before. Turns out there is an iPhone Distribution ...
- 141
0
votes
2
answers
767
views
Is importing just the CA certificate to Keychain Access enough for trusting certs issued with that CA?
I've created a PKI with easy-rsa. I create keys for websites and sign them with my CA certificate. I imported the CA certificate into Keychain Access, clicked the cert name, and specified "...
2
votes
2
answers
3k
views
How to delete Self-Signed certificate from System Keychain (Big Sur)
I just can't find a way to delete the Self-Signed Root CA from Keychain under System.
When I open KeyChain I select System under System Keychains. Then I click on the File in menu and then click on ...
- 131
6
votes
1
answer
1k
views
Can I disable the certificate pinning checks on MacOS to relax proxy inspection detection?
I'm behind a proxy and some websites don't work, in particular ones related to MacOS update, app store etc. I imported the proxy certificate to the MacOS keychain.
When I go to https://apps.apple.com ...
- 61
1
vote
1
answer
1k
views
Where can I find the syntax for macos spctl (gatekeeper) rules?
I'm trying to code-sign an electron app for submission to the "Mac App Store". As expected, it has been a tremendous pain for 101 reasons.
However, I have now discovered a ray of light in ...
- 123
2
votes
2
answers
214
views
Restoring Silicon Mac in enterprise environment
Is there some way to do a full IPSW restore in an enterprise environment?
In our case this means no DHCP and behind a proxy. Other machines all have a fixed IP and proxy certificate installed. But ...
- 21
1
vote
1
answer
937
views
Find trust setting of a login keychain using cmd
Is there a way to find the trust settings of a certificate in login keychain using command line
I tried this security dump-trust-settings -d. But this only returns for the System Keychain
Also when i ...
- 131
1
vote
0
answers
56
views
macOS 11.6 "DST Root CA X3" certificate warnings
System: macOS 11.6.1
For an internal domain with Let's Encrypt, I am still getting outdated certificate warnings on Safari and Chrome. Firefox with its own store is fine.
I checked Keychain Access and ...
- 141
0
votes
1
answer
28
views
Mail.app refuses to send e-mail
I have just upgraded to Monterey (12.0.1 (21A559)), and cannot send e-mails. Mail.app tells me that the certificate is not valid.
We own our own domain and host the primary MX here, and this worked ...
- 21
0
votes
1
answer
535
views
Certain SSL Websites not loading in Chrome, Safari, Curl
I'm trying to open bisonbrew.com but am getting ERR_CONNECTION_RESET with Chrome, and with Safari:
'Safari can't open the page "https://bisonbrew.com" because Safari can't establish a ...
- 123
1
vote
1
answer
466
views
Viewing certificates in certificate chain conveniently in MacOS from finder
In the MacOS finder, there is a convenient viewer for certificates, with the "icon" view
. If the file contains a single certificate, it formats and displays the certificate very nicely, e.g....
- 232
11
votes
1
answer
6k
views
App / curl still getting certificate expired error due to expired Let's Encrypt certificate
An open source app running on my macOS 10.13.6 and 10.14.6 system is failing to access a website via https that uses a Let's Encrypt certificate. If I use curl to access the same site, it also gets an ...
- 2,194
7
votes
3
answers
4k
views
iOS: Safari "could not establish a secure connection to the server"
When I try to access our dev sites, I get this error on my iPhone X running the latest general release of iOS 15. Now 15.1.
Safari cannot open the page because it could not establish a secure ...
- 120
9
votes
2
answers
9k
views
iOS marked a certificate as "Expired" even though the certificate is still active and issued by a trusted authority
I am having a strange issue I cannot find the cause of: I have a website certificate issued on 31.07.2021 by letsencrypt.org and valid until 29.11.2021, however on my main iPhone (iOS 15) I get this ...
- 191
1
vote
2
answers
734
views
How to install an Automator action from unidentified developer?
I downloaded an APN certificate from Certificates, Identifiers & Profiles from the Apple Developer configuration pane. It's an .action file that I cannot open, though.
Do you want to install the &...
- 225
3
votes
1
answer
526
views
Cloning apps on iOS
For some reasons I want to get two similar apps on my iPhone (in fact not similar — different versions). I have already installed this app from AppStore, and I have an IPA file of this app but of ...
- 31
33
votes
3
answers
42k
views
How do I update my root certificates on an older version of Mac OS (e.g. El Capitan)?
I have difficulty reaching various secure web sites. They give me a certificate expired error. They work on Firefox but not Safari or Chrome. They also work on newer versions of macOS (e.g. Catalina, ...
- 961
0
votes
1
answer
97
views
Different SSL certs being delivered to different platforms
I received reports of an invalid SSL cert on a site that I recently started managing. Testing it on a Linux PC and a Windows PC, I find that the cert being delivered is different from the one ...
- 126
4
votes
1
answer
4k
views
What are the private and public keys associated with an Apple Distribution Certificate?
I'm following this guide on how to generate a new Apple Distribution Certificate, and on the ‘Download your certificate’ page it says
Download your certificate to your Mac, then double click the .cer ...
- 461
1
vote
1
answer
4k
views
Xcode does not detect new Apple Distribution Certificate in my keychain
I generated a new Apple Distribution Certificate for my React Native project because I got an email saying my old one was going to expire. It appears to be in my keychain:
but when I try to upload my ...
- 461
0
votes
1
answer
126
views
Behaviour of development certificate in apple developer portal and keychain
This is a question regarding Apple Development Certificates. There are two parts:
Part 1: create and download certificates on apple developer portal.
Background:
I can download my teammates ...
- 103
2
votes
1
answer
3k
views
Big Sur Add trusted certificate via command line (Safari Can't establish a secure connection)
I am trying to have Safari stop preventing me from visiting one of my dev machines with an invalid cert.
I am trying to use the solution in this thread but install it using the CLI:
security add-...
2
votes
1
answer
2k
views
How can I fix '"HPDM.framework" will damage your computer' on macOS Big Sur?
Since updating to macOS Big Sur, I can no longer print to my HP DeskJet 1010 printer. Each time that I start a print job, I get a dialog with error message that says '"HPDM.framework" will ...
- 340
1
vote
2
answers
581
views
Invalid certificate for a specific website
When trying to navigate to a specific website (amazon.com in my case) I always get the "NET::ERR_CERT_COMMON_NAME_INVALID" error in Chrome (and equivalent errors in Safari/other browsers). ...
- 143