Questions tagged [certificate]

Questions about importing/creating and using x509 certificates for SSL, iOS & macOS development. Questions about accessing and using certificates programmatically are off topic.

Filter by
Sorted by
Tagged with
4
votes
1answer
100 views

Strange looking certificate in macOS Keychain

I need help with a strange looking certificate which has appeared in the Keychain of my Mac. The name of the certificate is "A9936B80-41C7-4D34-8020-59C3E40A31A8 A98369B2-0C8C-4CF8-9921-015C5D9A4C86"....
2
votes
1answer
73 views

Apple iPhone won't connect to insecure website

A certificate is expired of an application of ours and a client still wants to access it. He is using an Apple iPhone and gets the message Safari cannot open the page because it could not establish ...
1
vote
1answer
17 views

How do you clear SSL leaf certificates mappings to particular domains

I visit my website using Chrome on macOS Mojave, for example, qa.abc.com, and the SSL leaf certificate is from customer-test.ssl.fastly.net. I recently updated the CNAME record in my DNS for qa.abc....
9
votes
1answer
2k views

Why is the Turkish Government in my computer?

Perusing Keychain Access, I see that "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" is listed as a trusted root certificate authority. Per this 2013 article, I understand that: my ...
0
votes
0answers
22 views

Connect to VPN based on IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol with root certification on MacOS?

I am trying to connect to VPN via IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol. But after adding my certification in to the keychain access, I am still not able to select this ...
0
votes
1answer
17 views

Detect if Apple Certificate File is Development versus Distribution

When building an iOS App, Apple requires that you obtain a Development or Distribution certificate through their Apple Development Program. Using only the file itself, how can the type of certificate ...
25
votes
6answers
9k views

“Unknown Error = -2,147,414,007” on creating certificate with Certificate Assistant

I am getting "Unknown Error = -2,147,414,007" on creating a certificate through the Keychain app. Steps to Recreate: Open the Keychain Access application. Select Certificate Assistant > Create a ...
10
votes
2answers
4k views

Keychain Access error when creating new system certificate

I am following the instructions to codesign gdb on my MBP however when I get to the end of the System certificate creation process, keychain says "Unknown Error = -2,147,414,007" and the certificate ...
1
vote
1answer
140 views

How to disable certificate transparency check in macOS Mojave(10.14)

In macOS Mojave, certificate transparency check is enabled. Because the OS terminates all TLS connections that doesn’t use transparent certificates, macOS Mojave cannot connect to WPA2 Enterprise ...
63
votes
3answers
152k views

How do I transfer my iOS developer profile to another computer?

I got a new MBP and would like to transfer my certificates and profiles from my old computer. According to TN 2250, under "Transferring Your Identities," I need to transfer three sets of items: all ...
0
votes
0answers
19 views

How to mass-deploy a root certificate in a corporate environment

Our Windows administrator deploys a root CA certificate to all the machines through Group Policies, which works very well in a corporate setting. Is there something similar to this we can use for our ...
2
votes
0answers
4k views

Can't use self signed certificates any more, because “Enable full trust for root certificates” is gone from settings

As you can see, "Enable full trust for root certificates" is completely missing. What do I do? This is on iPhone X 11.4 btw.
2
votes
0answers
69 views

Trust SSL certificate via terminal in MacOS

I'm trying to setup WPA2 with EAP-TLS authentication using certificates in pfx format. As adding the certificate to the keychain and changing the Trust settings can be difficult for some users, I ...
1
vote
2answers
47 views

How to create an identity who can be used for signing code from custom certificate?

I want to codesign one of my applications by using my own certificate (not created with Keychain Access). First, I create a v3.ext file: keyUsage = digitalSignature Then, I created my certificate ...
3
votes
0answers
45 views

How to create /etc/certificates/*.{cert,chain,concat,key}.pem files without reboot?

I am trying to move from Comodo to Let's Encrypt certificates on OS X Server (10.7). Something in Apple's server.app and ServerAdmin.app is broken. I can see and select newly imported certificates in ...
5
votes
4answers
14k views

When i try to install my certificate in keychain, the error says: Unable to import - Error Code 25294

I am using the 10.9.5 version and ios 8. When i try to install my certificate i got through my developer account for push notification for my app in the keychain local items, its not importing. The ...
2
votes
2answers
6k views

Identity not found when trying to code-sign an application with a certificate

After properly creating a valid certificate for code signing, when running the command: $ codesign -s CertificateName AppPathName I always get a: CertificateName: no identity found Anyways, When I ...
4
votes
1answer
4k views

Apple Mail warning: Unable to verify message signature

After upgrading from Sierra to Mojave (macOS 10.14), Apple mail started to display the warning Unable to verify message signature above all signed and encrypted emails. When clicking on Details, it ...
10
votes
5answers
21k views

How to add a .crt certificate to iPhone's keychain?

I moved a .crt certificate file onto my iPhone device via Dropbox and tried following these instructions to add it to the device keychain: It suggests to open the certificate file but my iPhone doesn'...
0
votes
3answers
4k views

Cydia Impactor won't sideload

When I try to sign/resign (sideload) H3lix-RC5.ipa (iPhone 5C w/ iOS 10.3.3 x32) or g0blin_rc2.ipa (iPhone 6S w/ iOS 10.3.3 x64) I get: Error: file: installation.cpp; line: 42; what: Failed to ...
0
votes
1answer
32 views

Cannot seem to install VMware vCSA 6.7 cert on macOS 10.13.6 High Sierra

Trying to install the web certificate for my vCenter Server Appliance (vCSA 6.7) on my Mac Mini (running macOS High Sierra 10.13.6). I download the cert.0 file, change the extension to .crt and double-...
0
votes
0answers
26 views

How do I find out which app uses which distribution certificate?

I want to build the app using Expo React Native. Expo can handle all credentials for me automatically: distribution certificate, push notifications key, and provisioning profile. Unfortunately, we ...
0
votes
0answers
73 views

Open Keychain Access Get Info window after loading certificate

I add in my program certificate to login keychain and opened Keychain Access application. I wanted also to open Get Info window for this specific certificate automatically. But it is neither possible ...
2
votes
1answer
3k views

Invalid Root Certificate (Comodo RSA)

Regularly, a duplicate certificate of COMODO RSA appears on my keychain (Google Chrome?) and when I browse on a website which use a COMODO certificate. Google Chrome blocks the website. (Normal). I ...
1
vote
1answer
245 views

Problem loading images from googleusercontent

Recently switched from Chrome to Firefox Quantum and noticed that images from *.googleusercontent.com aren't loading because "The connection used to fetch the resource was not secure" If I attempt to ...
4
votes
2answers
50 views

How can I tell that a certificate is a root certificate?

Are these certificates root certificates or not and how can I disable them if they are?
2
votes
2answers
147 views

How to import X.509 certificates into MacOS?

I have the file with X.509 certificates and the following preamble: # This is a bundle of X.509 certificates of public Certificate # Authorities. It was generated from the Mozilla root CA list. # ...
1
vote
1answer
319 views

How can I see what permissions an enterprise app certificate has?

I live in Iran, and here most Iranian apps are banned from the App Store, and are distributed using enterprise certificates. There are even Iranian app stores that use a single such certificate to ...
0
votes
0answers
91 views

Fixing a Mac unable to fetch software updates? Requests to https://swdist.apple.com/* seem to be failing HTTPS cert validation

I've discovered that my Mac can't fetch software updates because the requests to Apple server's are failing. I think it's something related to HTTPS cert validating or cert pinning. I was tipped off ...
1
vote
0answers
45 views

Which keychain holds user trusted certificates?

I tried to do a clean install of my El Capitan MacBook but realised that much of my keychain migrated over. When I went into keychain access it showed a number of different keychains. I reset the "...
12
votes
1answer
6k views

Any way to temporarily allow insecure SSL on Safari in High Sierra?

Apparently High Sierra has changed the way Safari handles untrusted SSL certificates. In the past you could bypass an SSL warning and visit a site. But if you visited that site again in a new session,...
1
vote
0answers
187 views

Cannot export System.keychain Certificate from with private key as p12 via Terminal security export command

I have a machine certificate installed in system.keychain and want to export certificate with privet key via security export command. But getting error :security: SecKeychainItemExport: User ...
0
votes
1answer
63 views

Kiosk app for iPad that allows using a client side certificate

My web application is demanding a client side certificate to be installed. When opening the web app from a browser on my iPad, I'm prompted to allow using the certificate and all works well. Do you ...
1
vote
1answer
228 views

How to store and retrieve S/MIME certificates in Open Directory (LDAP) of macOS Server?

Is it possible to use the Open Directory of the macOS Server app to store and retrieve S/MIME (X.509) certificates with the user data? Background: I would like to share our public S/MIME ...
1
vote
1answer
519 views

Internet Access after renew the expired com.apple.servermgrd certificate

I inherited some months ago a Mac mini server running OS X 10.8.5 Initially, I configured it with the new network settings, DNS name, etc and all was working fine in regard to file sharing, accessing ...
1
vote
1answer
103 views

Do I need to renew the Institutional Recovery Key certificate with FileVault

We plan to roll out FileVault via Apple's own MDM (Server.app). I already have some test-computers enrolled. When I look at the certificate used for the Institutional Recovery Key, it expires in ...
4
votes
1answer
1k views

How to make Chrome trust self signed certificates?

I have followed these instructions (available from Wayback Machine in case they disappear) to add the certificate of my Asus Router to the keychain but Chrome still refuses to trust it, with the error ...
20
votes
4answers
30k views

How to view certificate info without installing

I have a certificate and/or private key file (pfx) on my OS X desktop. I'd like to look at its information (CN, SAN, OU, thumbprint, etc) but when I double click on it, it attempts to install into my ...
1
vote
0answers
64 views

Can I use a letsencrypt certificate to secure macOS High Sierra Server Open Directory?

I have services (mail, web) on macOS High Sierra Server protected with a letsencrypt certificate and that works fine. I'd like to extend that use of letsencrypt to Open Directory, to fully get rid of ...
1
vote
3answers
1k views

Re-added certificate leads to unknown authority

Messing around with Keychain Access on macOS Sierra, it seems like I have accidentally deleted trusted root certificates in Keychain Access. What I did was opening a *.p7s file to add a S/MIME ...
0
votes
2answers
1k views

iOS 10.2 + Safari + Client Certificates crashes Safari

Yesterday I updated my iPhone 6S to iOS 10.2, and now I cannot access web sites requiring client certificates. Safari prompts me for the client certificate to use but then immediately crashes. I tried ...
4
votes
1answer
392 views

MacBook Pro Certificate - no value specified - Business Category : Private Organization

Today after I signed into my computer and opened Safari this window popped up: I am looking for help to know what this is, and what I need to do. Thank you.
0
votes
1answer
645 views

OS X 10.11 CardDAV with self-signed certificate

The CardDAV server I'm trying to connect to uses a self-signed certificate. Unfortunately I cannot do anything about it. In previous OS X versions, when connecting to this server the system asked if ...
5
votes
1answer
1k views

Import CA certificate into Chrome via command line

Is it possible to import a custom Certificate Authority (.crt) using Terminal or over SSH on macOS 10.13 High Sierra?
0
votes
0answers
90 views

Recreate Certificate for Profile manager

I'm on a remote Mac (10.13.6) via VNC. So I cannot do a clean install os High Sierra. I had a name issue with the certificates as the correct server name was set after installation of the server app. ...
2
votes
2answers
5k views

“This certificate was signed by an untrusted issuer” problem after updating to El Capitan

Most of the https connections returns that. Most of them is signed by Symantec. But not all. I tried to google the problem, but with no luck, seems like I only the one who experiencing this problem. ...
3
votes
2answers
57 views

Should I Trust a Certificate

Basically, my school is apparently having a network 'update' and are telling us to go to keychain access and trust a certificate. This is what they sent us. Exactly what will happen if I do this any? ...
0
votes
1answer
1k views

Safari incorrectly demands to select an SSL client certificate

Several websites suddenly recently have popped up the dialog sheet in Safari requesting me to select an SSL client certificate. None of these sites (one example is forums.macrumors.com) actually use ...
0
votes
1answer
173 views

terminal: ERROR cannot verify www.important_website certificate, issued by ‘CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US’:

I am installing a large amount of files with wget and all of a sudden I get the error message: cannot verify www.ncei.noaa.gov's certificate, issued by ‘CN=DigiCert SHA2 Secure Server CA,O=DigiCert ...
0
votes
1answer
9k views

Certificates not updating

I'm trying to visit my university research group's website at home. The website requires a username and password to view and probably has who knows what kind of security systems in place. On Safari ...