Questions tagged [certificate]

Questions about importing/creating and using x509 certificates for SSL, iOS & macOS development. Questions about accessing and using certificates programmatically are off topic.

Filter by
Sorted by
Tagged with
0
votes
0answers
5 views

How can I use a certificate from the keychain to sign e-mail on iOS?

My logon keychain contains a certificate for signing e-mail. I can use this certificate in Mail.app or Outlook 365 on the Mac in order to sign outgoing mail. On the iPhone or on the iPad, the ...
2
votes
1answer
136 views

How can I disable a root certificate in iOS?

I want to disable all root certificates in iOS since I'll be using a proxy to access all HTTPS sites. How do I disable all root certs in iOS?
1
vote
2answers
304 views

Client certificate authentication fails with iOS 13.4.1 (works with 13.2.2)

I've previously posted this question and since then further investigated the issue. The problem seems to be the latest iOS (13.4.1), which fails to send the client certificate upon authentication ...
0
votes
1answer
170 views

Unable to deploy Mobile Config for Active Sync on iOS 13.4.1

I'm trying to deploy a mobile configuration for a number of iPhones. The mobile configuration only includes PKCS12 for the client certificate authentication and the configuration of the MS Exchange ...
0
votes
0answers
21 views

Root CA certificate invalid on Mac

I have a root certificate authority file that works on Windows computers, but it is not accepted on Macs since macOS Catalina. The file was imported into Keychain and marked as trusted in its ...
0
votes
0answers
15 views

Can OS X use SmartCards (YubiKeys) for VPN authentication?

By all appearances this should be simple: I have a YubiKey configured as a SmartCard and paired with my OS X user account. It works fine in all respects: I can use it to authenticate to OS X, and my ...
1
vote
0answers
17 views

How to fix ERR_SSL_PROTOCOL_ERROR for only one specific site

Working on a site for a client, and for some reason I keep getting the "can't provide a secure connection" error in ALL browsers. Everyone outside me seems to see it fine. If I log in to my work ...
2
votes
0answers
164 views

“Safari can't establish a secure connection” and OmniFocus sync is broken

Symptoms macOS 10.14.6, Safari 13.1, all updates applied. Safari refuses to connect to some websites. Safari Can't Open the Page [...] because Safari can't establish a secure connection to the ...
1
vote
1answer
31 views

Creating SHA-2 certificate using keychain assistant

I am trying to enable https on my localhost (for testing). Using Keychain Assistant, I have created both a self-signed CA and a certificate issued by that same CA. I have enabled trust on the CA in ...
1
vote
0answers
18 views

See letter below: IOS Distribution cert. revoked: What does this mean? I have an app developer developing this APP for me [duplicate]

Any input on the following: I have no idea if these means that we need to simply resubmit our APP, or our they denying our APP for any future development? Dear Jane Doe, You have revoked your ...
3
votes
3answers
113 views

Checking Certificates Meet Apple Requirements

is there a command or UI I can use to test certificates or diagnose why they aren't valid? A while back Apple changed the requirements for TLS certificates, and announced dates from when those ...
0
votes
0answers
125 views

Installed Root Certificate does not appear in Certificate Trust Settings

I have an iPad Pro and an iPhone SE both running iOS 13.3.1 I successfully installed a root certificate on the iPad and was able to "Enable Full Trust for Root Certificates" from Settings/General/...
0
votes
1answer
411 views

Default macOS certificates not trusted and not verified by third party

When I start a new Mac OS system from scratch, inside the keychain application I notice there are 3 certificates that are not trusted or not verified yet. I know I can double click each one of them ...
7
votes
2answers
925 views

Strange looking certificate in macOS Keychain

I need help with a strange looking certificate which has appeared in the Keychain of my Mac. The name of the certificate is "A9936B80-41C7-4D34-8020-59C3E40A31A8 A98369B2-0C8C-4CF8-9921-015C5D9A4C86"....
0
votes
1answer
354 views

cannot sign iOS app in XCode - in a catch 22

I have built then Archived my iOS app now need to submit to Validate and push to app store xcode says this on main page when checkmark off Automatic signing ... so do manual sign then picked ...
5
votes
0answers
202 views

How to create /etc/certificates/*.{cert,chain,concat,key}.pem files without reboot?

I am trying to move from Comodo to Let's Encrypt certificates on OS X Server (10.7). Something in Apple's server.app and ServerAdmin.app is broken. I can see and select newly imported certificates in ...
8
votes
2answers
15k views

Why does OS X repeatedly prompt for certificate trust when joining WPA2 Enterprise WiFi

WHY does OS X always prompt for certificate trust when connecting to WPA2 Enterprise (EAP-PEAP in my case) networks, even if the certificate is already marked as 'trusted'? Even weirder.. if I delete ...
0
votes
1answer
500 views

Not able to generate private.key file

I am developing MDM solution for that I need to create several certificates. For that I have following this document. When I'm firing this command, I am getting this error. openssl rsa -in key.pem -...
2
votes
1answer
63 views

Why are these corporate certificates pre-installed and is it safe to delete/“Never Trust” most/all of them?

I was going through this macOS Security and Privacy Guide repo, step by step, and found some good privacy tips. However, when I arrived at the Certificate Authorities section I got a little confused. ...
4
votes
1answer
65 views

How to access a website despite a certificate error?

I am moving a web server to a new infrastructure. Before switching the DNS records I would like to check if the new configuration is working. I modified /private/etc/hosts/ with the IP addresses (IPv4 ...
1
vote
1answer
343 views

How do I remove a certificate from Certificate Trust Settings if the profile doesn't exist?

If I go to Settings > General > About > Certificate Trust Settings... I see several profiles installed under the "ENABLE FULL TRUST FOR ROOT CERTIFICATES" heading. There is a way to toggle them off, ...
2
votes
1answer
2k views

How do I configure an iPad to use EAP-TLS?

I try to connect an iPad (iOS 11.3.1) to a WiFi network which uses EAP-TLS. There is no way to specify EAP-TLS mode because of the lack of the certificate, so I need to import the certificate first. ...
1
vote
2answers
262 views

Signed pkg using productbuild --distribute but codesign says “code object is not signed at all”

I am signing my package during distribution using SIGN_IDENTITY_INSTALLER="Developer ID Installer: Pxxxxxxx, LLC (AXXXXXXXXX)" productbuild --distribution final-distribution.xml --package-path /tmp/...
1
vote
1answer
164 views

How to convert a .cer file to .p12 without the keychain password?

I have to "codesign" a distribution certificate inside a .ipa file to deploy an in-house application for a company. I have access to their developer account. The new provisioning profile had been ...
0
votes
0answers
7 views

How to detect and prevent adding key to a system keychain?

I have system keychain that contained root certificate that was set to be trusted. After removing it and locking keychain certificate appeared again after some time (with locked keychain). Is there ...
31
votes
6answers
53k views

“iTunes can’t verify the identity of the server …” after a Security Update in Mavericks or upgrade to El Capitan

Prior to the security update released early April my system was working fine. After that, I'm getting invalid certificates everywhere: iTunes says "iTunes can’t verify the identity of the server “...
11
votes
1answer
22k views

How can I delete a certificate that got restored from a backup under iOS 10/11?

With iOS, certificates are installed as part of profiles. Deleting a certificate means removing the profile. When an iPhone with profiles is backed up, and then the backup is restored to a new device,...
2
votes
1answer
671 views

Extract Installer Package Signing Certificates from xip archive

It's possible to extract Code Signing Certificates (CSCs) from an .app or signed .dmg as ASN.1 (DER) with codesign -d --extract-certificates prefix /path/to/file.dmg After that you can do stuff with ...
2
votes
0answers
73 views

How to view expiration date of code signing cert?

I know pkgutil --check-signature and codesign -d -vvv but neither of them show the expiration date. Is there a way to view the expiration date of a code signing cert? Say for instance...macOS ...
0
votes
1answer
164 views

Execute App (Apps Authorization Revoked)

Hello there I am trying to start an app (downloaded from the Internet) on macOS Mojave 10.14.5 though when I double click I get the following pop up message: “Ascabart” can’t be opened. You should ...
0
votes
0answers
13 views

How to automate _removing_ expired “Let's Encrypt” SSL certificates from macOS server?

I have been using Let's Encrypt for adding new SSL certificates to my macOS server for a few months now, and it seems to be working quite well. However, I have not been able to figure out how to ...
7
votes
5answers
19k views

When i try to install my certificate in keychain, the error says: Unable to import - Error Code 25294

I am using the 10.9.5 version and ios 8. When i try to install my certificate i got through my developer account for push notification for my app in the keychain local items, its not importing. The ...
4
votes
2answers
764 views

My signed .pkg file is not accepted

I'm struggling with signing my installer to keep Gatekeeper happy. When building i sign the .pkg: productsign --sign "3rd Party Mac Developer Installer: GNXXXXXXXXXX (XXXXXXXXXXX)" ...
3
votes
2answers
77 views

How to see certificate for intermediate CA in Keychain?

When I check details of a certificate I only see information about the certificate itself. Is there any way to see the issuer’s certificate? In my case it’s an intermediate CA. The certificate that I ...
6
votes
2answers
13k views

Certificates not updating

I'm trying to visit my university research group's website at home. The website requires a username and password to view and probably has who knows what kind of security systems in place. On Safari ...
3
votes
1answer
463 views

Work computer shows “This connection is not private” warning on almost all sites

My workplace allows me to use a Mac, but doesn't have much experience with them; their support is minimal if well intentioned, and generally as much harm as help. This includes installing antivirus ...
0
votes
1answer
422 views

How do I find out which app uses which distribution certificate?

I want to build the app using Expo React Native. Expo can handle all credentials for me automatically: distribution certificate, push notifications key, and provisioning profile. Unfortunately, we ...
1
vote
2answers
221 views

How do you clear SSL leaf certificates mappings to particular domains

I visit my website using Chrome on macOS Mojave, for example, qa.abc.com, and the SSL leaf certificate is from customer-test.ssl.fastly.net. I recently updated the CNAME record in my DNS for qa.abc....
1
vote
1answer
35 views

How to get Apple certificate to sign files?

I was tasked by my boss to handle new project at work - JAMF to manage our MacOS devices (we are mostly Windows corporation, so it isn't easy). We bought it, had some training. I want now to use ...
1
vote
1answer
1k views

Apple iPhone won't connect to insecure website

A certificate is expired of an application of ours and a client still wants to access it. He is using an Apple iPhone and gets the message Safari cannot open the page because it could not establish ...
9
votes
1answer
2k views

Why is the Turkish Government in my computer?

Perusing Keychain Access, I see that "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" is listed as a trusted root certificate authority. Per this 2013 article, I understand that: my ...
0
votes
0answers
200 views

Connect to VPN based on IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol with root certification on MacOS?

I am trying to connect to VPN via IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol. But after adding my certification in to the keychain access, I am still not able to select this ...
0
votes
1answer
38 views

Detect if Apple Certificate File is Development versus Distribution

When building an iOS App, Apple requires that you obtain a Development or Distribution certificate through their Apple Development Program. Using only the file itself, how can the type of certificate ...
34
votes
6answers
12k views

“Unknown Error = -2,147,414,007” on creating certificate with Certificate Assistant

I am getting "Unknown Error = -2,147,414,007" on creating a certificate through the Keychain app. Steps to Recreate: Open the Keychain Access application. Select Certificate Assistant > Create a ...
11
votes
2answers
6k views

Keychain Access error when creating new system certificate

I am following the instructions to codesign gdb on my MBP however when I get to the end of the System certificate creation process, keychain says "Unknown Error = -2,147,414,007" and the certificate ...
1
vote
1answer
540 views

How to disable certificate transparency check in macOS Mojave(10.14)

In macOS Mojave, certificate transparency check is enabled. Because the OS terminates all TLS connections that doesn’t use transparent certificates, macOS Mojave cannot connect to WPA2 Enterprise ...
63
votes
3answers
157k views

How do I transfer my iOS developer profile to another computer?

I got a new MBP and would like to transfer my certificates and profiles from my old computer. According to TN 2250, under "Transferring Your Identities," I need to transfer three sets of items: all ...
0
votes
0answers
32 views

How to mass-deploy a root certificate in a corporate environment

Our Windows administrator deploys a root CA certificate to all the machines through Group Policies, which works very well in a corporate setting. Is there something similar to this we can use for our ...
2
votes
0answers
5k views

Can't use self signed certificates any more, because “Enable full trust for root certificates” is gone from settings

As you can see, "Enable full trust for root certificates" is completely missing. What do I do? This is on iPhone X 11.4 btw.
3
votes
0answers
472 views

Trust SSL certificate via terminal in MacOS

I'm trying to setup WPA2 with EAP-TLS authentication using certificates in pfx format. As adding the certificate to the keychain and changing the Trust settings can be difficult for some users, I ...

1
2 3 4 5