Questions tagged [certificate]

Questions about importing/creating and using x509 certificates for SSL, iOS & macOS development. Questions about accessing and using certificates programmatically are off topic.

Filter by
Sorted by
Tagged with
1
vote
1answer
534 views

Advanced configuration for email notifications about Apple Developer Certificates expiration

Mainly, I just wanted to ask the same question here, because the community here is active (comparing to what is seen on Apple Developer Forums, unfortunately): https://forums.developer.apple.com/...
0
votes
1answer
319 views

SSL Client authentication with non-exportable certificates in Mac

We use our organization's provided SSO certificate for SSL client authentication from our Java based desktop clients (Mac and Windows). It seems in Mac, the certificate is marked with non-exportable ...
0
votes
1answer
369 views

Developer ID Installer certificate “unusable” on another iMac

I asked our Team Agent to produce a Developer ID Installer certificate in order to sign our Mac OSX installer. He sent me the developerID_installer.cer file via e-mail and I added it to my Keychain. ...
0
votes
1answer
334 views

MacOSX Installer signed but Gatekeeper complains

My C++ daemon for MacOSX is being successfully signed with productbuild: productbuild: Wrote product to Installers/app.pkg-unsigned productsign: signing product with identity "3rd Party Mac Developer ...
1
vote
1answer
3k views

iPhone untrusted certificate warning

My iPhone 7 iOS 10.3.1 randomly started receiving untrusted certificate pop-ups from onboard.info (but I’ve seen it on devices going back to iPhone 5): This was at home last night and I had just ...
2
votes
1answer
503 views

My signed .pkg file is not accepted

I'm struggling with signing my installer to keep Gatekeeper happy. When building i sign the .pkg: productsign --sign "3rd Party Mac Developer Installer: GNXXXXXXXXXX (XXXXXXXXXXX)" ...
0
votes
1answer
1k views

Safari incorrectly demands to select an SSL client certificate

Several websites suddenly recently have popped up the dialog sheet in Safari requesting me to select an SSL client certificate. None of these sites (one example is forums.macrumors.com) actually use ...
2
votes
3answers
1k views

Re-added certificate leads to unknown authority

Messing around with Keychain Access on macOS Sierra, it seems like I have accidentally deleted trusted root certificates in Keychain Access. What I did was opening a *.p7s file to add a S/MIME ...
9
votes
1answer
2k views

Why is the Turkish Government in my computer?

Perusing Keychain Access, I see that "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" is listed as a trusted root certificate authority. Per this 2013 article, I understand that: my ...
1
vote
1answer
1k views

Sign flat package with non-Apple certificate

I have a program that I ported from the Windows environment to macOS. I would like to sign the flat installer .pkg with the same certificate I used on Windows, which is valid and granted by DigiCert. ...
1
vote
0answers
71 views

Cisco AnyConnect: Certificate Failure while ssh'd in

/opt/cisco/anyconnect/bin vpn connect HOST works from the command line, but not after ssh localhost. How can I make these certificates available to myself after ssh'ing in?
12
votes
1answer
3k views

What is Department of Defense Root CA 2 doing on my Mac?

I accidentally came across the keychain certificate part of my Mac and saw Department of Defense certificate. What is this certificate doing on my laptop. I am not a military member and never had any ...
0
votes
1answer
45 views

What are these private keys?

If you run 'security find-identity -v /Library/Keychains/system.keychain' command from your terminal, you can see available/valid identities from your macbook with these private keys. What are ...
2
votes
2answers
8k views

New iTunes gives error: iTunes cannot verify the identity of the server “safebrowsing.clients.google.com”

I can browse to https://safebrowsing.clients.google.com/ but it just redirects me to Google's home page. iTunes 12.5.5.5, Windows 8.1
4
votes
5answers
4k views

How to replace missing root and intermediate certificates in Mac OS X v10.8

Let me preface this with the fact that I know nothing about networking / security / etc. Twice now, I've had issues with root certificates not working and throwing errors, even though they are still ...
6
votes
3answers
427 views

What is the security impact of installing a macOS configuration profile containing certificates?

I want to install a configuration profile to automatically connect to my university network but along with the two wifi network configurations there are also two certificates, their description is "AC ...
0
votes
1answer
61 views

“err_certificate_invalid” for only one host, on only one device, but in all browsers

Currently, when I try to access www.comic-rocket.com on my iPad (iOS 10.2), the site will not load. Safari simply won't load the page, as if I hadn't even tried to do so. Chrome and Dolphin will ...
1
vote
1answer
57 views

Signed application cannot be opened once downloaded - (“unidentified developer”) error

I have developed an application for OS X. As changes to this application are pushed to my code repository, a build server (Jenkins) automatically detects those changes and kicks off a build process. ...
0
votes
1answer
462 views

Do I need to enroll in “Apple Developer Program Enrollment” for creating a certificate?

I have a website that I am trying to convert to a iOS app using Phonegap. But it requires that I provide ‘certificate (p12) file’ and a ‘provisioning profile’. I am using a Windows machine and have ...
0
votes
2answers
1k views

iOS 10.2 + Safari + Client Certificates crashes Safari

Yesterday I updated my iPhone 6S to iOS 10.2, and now I cannot access web sites requiring client certificates. Safari prompts me for the client certificate to use but then immediately crashes. I tried ...
1
vote
0answers
1k views

Can't view SSL certificate with chrome?

When I try to view a certificate, a dialog popup and I'm unable to see the contents. What could the problems be?
0
votes
1answer
1k views

AlphaSSL intermediate CA certificate revoked

I'm unable to access JQuery CDN as Safari states that the certificate AlphaSSL CA - SHA256 - G2 is revoked. Recently, I also had this problem with Wikipedia. However, accessing the page in Firefox ...
1
vote
1answer
6k views

I have several hundred expired certificates starting with com.apple.idms.appleid.prd. What are they and are they safe to delete?

I recently looked at Keychain Access and found that I have 394 certificates prefixed with com.apple.idms.appleid.prd, all of which are expired. When I get more info on one of them, I see that it is ...
42
votes
5answers
18k views

How to tell why macOS thinks that a certificate is revoked?

I cannot access Wikipedia on both my Macs. macOS says that the intermediate certificate used to sign Wikipedia’s certificate (GlobalSign Organization Validation CA - SHA256 - G2) has been revoked. I ...
3
votes
1answer
2k views

Does apple notify you when a certificate is going to expire?

Do apple notify the developer or email when a push notification is going to expired?
2
votes
2answers
3k views

Does iOS 10 Allow Self-Signed Certificates for PEAP?

The campus I work for (I'm a student, not faculty or staff) is having issues with iOS 10 (for sure, haven't been able to get a single device running iOS 10 to work, even though 9.x.x worked just fine. ...
0
votes
1answer
314 views

How do I extract X.509 certificates embedded in executables?

This should be very simple, but I am unable to find a straightforward answer to this question. I have a few Mach-O binaries that have certificates embedded in them. Some of these might not be ...
2
votes
1answer
78 views

Certificate Assistant swaps extension settings for CA / Users

I am trying to set up a Root Certificate Authority using Keychain Access/Certificate Assistant but I am running into some trouble. When creating the authority the assistant asks you to enter Key ...
1
vote
1answer
1k views

Cannot find expired certificate in Keychain Access

Trying to pull from a git repository I got an "SSL certificate problem: Invalid certificate chain", and was unable to access. The answer here: git SSL certificate- Invalid certificate chain while ...
2
votes
1answer
480 views

Extract Installer Package Signing Certificates from xip archive

It's possible to extract Code Signing Certificates (CSCs) from an .app or signed .dmg as ASN.1 (DER) with codesign -d --extract-certificates prefix /path/to/file.dmg After that you can do stuff with ...
2
votes
2answers
519 views

Getting “Certificate signed by untrusted issuer” on Mac

When I try to launch an application that is developed by my company, I get the "Certificate signed by untrusted issuer" error. I checked both these posts. I don't have any certificates in my ...
3
votes
1answer
1k views

Renewing the Developer Program Membership after it expires

My Developer Program Membership (along with the iOS Distribution Certificate - it seems) expires in a couple of weeks. About a week ago, Apple sent me an email implying that I must renew the ...
1
vote
2answers
2k views

Forgot the password of a keychain (non the login one)

I have installed a bunch of certificates on my mac, due to italian legal system, in order to login to a certain website with a smartcard. It all worked well for a few months and then yesterday it ...
0
votes
1answer
6k views

How to forcefully open a blocked Java Applet?

I downloaded from Internet (topcoder.com) a Java applet. When I try to open it, it says "Application blocked for security reasons" because "The certificate has expired". I really want to launch it... ...
0
votes
1answer
369 views

Cannot reach webpage for certificate generation on my developer account

I am trying to reach the webpage for certificates under developer.apple.com. But I get redirected to the Welcome page. My Apple ID is an iCloud address *...@icloud.com. Why does https://developer....
2
votes
0answers
387 views

SCEP Request on Mac

I am looking for a way to issue a SCEP request to my organizations CAIssuing server. I manage a number of Macs and we currently import the certificates by hand using a profile on a web server. I know ...
0
votes
1answer
951 views

Nsurl error domain (1012) subscribing MDM Server

I'm trying to manage iPads with an own MDM-server. I configured the ProfileManagement but it doesn't work (anymore).. I always get an Nsurl error domain 2012 when trying to prepare the iPad (on the ...
7
votes
1answer
11k views

Why does OS X repeatedly prompt for certificate trust when joining WPA2 Enterprise WiFi

WHY does OS X always prompt for certificate trust when connecting to WPA2 Enterprise (EAP-PEAP in my case) networks, even if the certificate is already marked as 'trusted'? Even weirder.. if I delete ...
2
votes
1answer
266 views

Is there a truly user friendly guide on how to handle iOS Certificates and Provisioning Profiles? – Xcode 7.3 / iOS 9.3

I'm getting a warning that The provisioning profile "iOSTeam Provisioning Profile: *" is expiring soon. I'm not sure what to do and the Apple documentation, even the Quick Start Guide, is overwhelming ...
1
vote
1answer
66 views

Is it possible to detect any certificates not packaged by Apple?

I recently received a Mac and connected to my employer's network. When I connected, my Mac (not browser, it was in the connection dialog) asked me to do something with a new certificate. I ...
1
vote
1answer
594 views

Does My Company Need To Code Sign with Two Digital Certificates? Apple Developer and EV Certificate?

My employer plans to distribute Mac OSX software outside the App Store through their website. Do I need to get an organizational developer ID from Apple ($99 USD/yr) plus purchase an EV code-signing ...
4
votes
1answer
2k views

Duplicate Apple ID Keys?

Why do I have all these duplicate public (& one duplicate private) Apple ID keys? & Can I remove the extras so I just have one public & one private key? There is no identifying information ...
3
votes
1answer
3k views

How to add an CA to the default TrustStore in OSX and iOS

Recently, I want to capture the ingress package in iOS, after I installed p12 using Safari. It shows can't establish secure link. However after I add NSAppTransportSecurity/NSAllowsArbitraryLoads = ...
1
vote
1answer
5k views

Where are the root CAs stored on OS X?

I need one of the root CA certificates, as a filename, to pass to a command-line program. I could download it from DigiCert (and convert it to the required format, .crt) manually, but I figure it's ...
1
vote
0answers
2k views

Enable/Disable the list of trusted credentials & certificates on iPhone with iOS 9

On Android, you can see and uncheck a certificate via Security/Trusted credentials. How do you do the same on iOS devices?
2
votes
1answer
297 views

Python-based app requires bypassing 'unknown developer' warning

Using a Python utility called py2app, I've built a distributable .app. from a Python-based project. It launches fine (when double-clicked) on my own machine, yet when tried elsewhere (other users on ...
3
votes
1answer
5k views

Where can I see the installed profiles in iOS9

Where is Settings > General > Profile in iOS 9? I was part of a testing-team for an iOS app and using testflight. Back then, under iOS 6, I had to install a profile on my iPhone. Now, years ...
1
vote
1answer
2k views

OS X Safari Comodo SSL issue

Strange issue on OS X Safari - visit Skiplex UK and you will receive an alert 'Safari can't verify the identity of the website "www.skiplex.co.uk".'. I have been advised by Comodo and our hosting ...
2
votes
1answer
8k views

“This certificate was signed by an untrusted issuer”: what's causing such an error?

I am having trouble with a specific financial services provider; every time I try to visit myvisaaccount.com to check my card balance etc, I get the dreaded Chrome red strikethrough https and x-ed ...
3
votes
1answer
1k views

When replacing an expired Enterprise Distribution certificate, do I have to resign the whole App?

Our Customer has an Enterprise Distribution certificate. We are signing their Apps and distribute them to their devices via Airwatch MDM. Their Enterprise Distribution certificate is about to expire ...