Questions tagged [certificate]

Questions about importing/creating and using x509 certificates for SSL, iOS & macOS development. Questions about accessing and using certificates programmatically are off topic.

32 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
0answers
79 views

How to create /etc/certificates/*.{cert,chain,concat,key}.pem files without reboot?

I am trying to move from Comodo to Let's Encrypt certificates on OS X Server (10.7). Something in Apple's server.app and ServerAdmin.app is broken. I can see and select newly imported certificates in ...
3
votes
0answers
538 views

Reset Safari SSL Exceptions on iOS 11

On iOS if you visit a website with an invalid SSL certificate, you are presented with this prompt (ok, it’s in italian but you get the picture): Tapping “show details” allows the user to proceed to ...
3
votes
0answers
2k views

Remove accepted self-signed certificate from iOS Safari

I was experimenting with self-signed certificates and while viewing my website from Safari on an iPhone I first got the warning that it is an untrusted site and I could review the details of the ...
2
votes
0answers
106 views

Trust SSL certificate via terminal in MacOS

I'm trying to setup WPA2 with EAP-TLS authentication using certificates in pfx format. As adding the certificate to the keychain and changing the Trust settings can be difficult for some users, I ...
2
votes
0answers
4k views

Can't use self signed certificates any more, because “Enable full trust for root certificates” is gone from settings

As you can see, "Enable full trust for root certificates" is completely missing. What do I do? This is on iPhone X 11.4 btw.
2
votes
0answers
77 views

Wrong Account Name with Certificate Authentication for VPN

I installed a user certificate and the enterprise CA onto an iOS device (iOS11). The user certificate contains UPN (User Principal Name) in its alternative subject name. I then tried to set up an ...
2
votes
0answers
77 views

Recreating distribution certs in enterprise apps

I have an enterprise account and the distribution certificate for the account is going to expire. I read through the documentation here and understand that I need to generate a new certificate and ...
2
votes
0answers
393 views

SCEP Request on Mac

I am looking for a way to issue a SCEP request to my organizations CAIssuing server. I manage a number of Macs and we currently import the certificates by hand using a profile on a web server. I know ...
2
votes
0answers
502 views

Bash script to import RootCA and set it to Always Trust from Server

I am working on a way to import a RootCA into the login keychain of OS X and set it to always trust, the cert is located on a file share server. I am relatively new to the whole Bash scripting scene ...
2
votes
0answers
1k views

How to avoid display HTTPS certificate warning in Chrome

When I browse with Chrome on a web site that has an invalid certificate for some reason (eg my NAS Synology using HTTPS protocol) a warning message like the following Chrome appears to me: If I ...
2
votes
0answers
123 views

How can I disable a root certificate in iOS?

I want to disable all root certificates in iOS since I'll be using a proxy to access all HTTPS sites. How do I disable all root certs in iOS?
2
votes
0answers
383 views

Dealing with bad Gmail certificate in Adium

My wife and I are both running current versions of OS X (10.7.2) and Adium (1.4.3). We both use gmail accounts in it for instant messaging. She launched Adium yesterday, and it complained that Gmail'...
1
vote
0answers
50 views

Which keychain holds user trusted certificates?

I tried to do a clean install of my El Capitan MacBook but realised that much of my keychain migrated over. When I went into keychain access it showed a number of different keychains. I reset the "...
1
vote
0answers
226 views

Cannot export System.keychain Certificate from with private key as p12 via Terminal security export command

I have a machine certificate installed in system.keychain and want to export certificate with privet key via security export command. But getting error :security: SecKeychainItemExport: User ...
1
vote
0answers
66 views

Can I use a letsencrypt certificate to secure macOS High Sierra Server Open Directory?

I have services (mail, web) on macOS High Sierra Server protected with a letsencrypt certificate and that works fine. I'd like to extend that use of letsencrypt to Open Directory, to fully get rid of ...
1
vote
0answers
65 views

Safari and Chrome loading the wrong website

My client is having an issue that is exclusive to her computer. When viewing her website on any other computer the website that shows is the current one being hosted by Squarespace. When viewing on ...
1
vote
0answers
808 views

How do I configure an iPad to use EAP-TLS?

I try to connect an iPad (iOS 11.3.1) to a WiFi network which uses EAP-TLS. There is no way to specify EAP-TLS mode because of the lack of the certificate, so I need to import the certificate first. ...
1
vote
0answers
47 views

Why do browsers still not trust my internal sites even after installing the CA chain?

I host several web services on my internal network and have created TLS certificates for each of them, all signed by my home-baked OpenSSL certificate authority. I've imported the CA certificates into ...
1
vote
0answers
73 views

Cisco AnyConnect: Certificate Failure while ssh'd in

/opt/cisco/anyconnect/bin vpn connect HOST works from the command line, but not after ssh localhost. How can I make these certificates available to myself after ssh'ing in?
1
vote
0answers
2k views

Can't view SSL certificate with chrome?

When I try to view a certificate, a dialog popup and I'm unable to see the contents. What could the problems be?
1
vote
0answers
2k views

Enable/Disable the list of trusted credentials & certificates on iPhone with iOS 9

On Android, you can see and uncheck a certificate via Security/Trusted credentials. How do you do the same on iOS devices?
1
vote
0answers
3k views

safari website requires a client certificate

I went to a site I regularly use and got this when logging in with Safari I seem to have 2 certificated of the same name both issued by Apple and both are not expired (found by searching in KeyChain ...
0
votes
0answers
26 views

Connect to VPN based on IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol with root certification on MacOS?

I am trying to connect to VPN via IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol. But after adding my certification in to the keychain access, I am still not able to select this ...
0
votes
0answers
22 views

How to mass-deploy a root certificate in a corporate environment

Our Windows administrator deploys a root CA certificate to all the machines through Group Policies, which works very well in a corporate setting. Is there something similar to this we can use for our ...
0
votes
0answers
33 views

How do I find out which app uses which distribution certificate?

I want to build the app using Expo React Native. Expo can handle all credentials for me automatically: distribution certificate, push notifications key, and provisioning profile. Unfortunately, we ...
0
votes
0answers
80 views

Open Keychain Access Get Info window after loading certificate

I add in my program certificate to login keychain and opened Keychain Access application. I wanted also to open Get Info window for this specific certificate automatically. But it is neither possible ...
0
votes
0answers
103 views

Fixing a Mac unable to fetch software updates? Requests to https://swdist.apple.com/* seem to be failing HTTPS cert validation

I've discovered that my Mac can't fetch software updates because the requests to Apple server's are failing. I think it's something related to HTTPS cert validating or cert pinning. I was tipped off ...
0
votes
0answers
106 views

Recreate Certificate for Profile manager

I'm on a remote Mac (10.13.6) via VNC. So I cannot do a clean install os High Sierra. I had a name issue with the certificates as the correct server name was set after installation of the server app. ...
0
votes
1answer
10k views
+100

Certificates not updating

I'm trying to visit my university research group's website at home. The website requires a username and password to view and probably has who knows what kind of security systems in place. On Safari ...
0
votes
0answers
788 views

How to activate TLS 1.0 in Adobe Acrobat on Mac?

I've an issue with filling out an interactive PDF in Adobe Acrobat, so I was suggested to do the following steps in order to fix/activate the authenticate process: Click on Edit in the Toolbar ...
0
votes
0answers
160 views

trust self signed certificates from employer

I manually set the permissions to each individual from my employer to Always Trust, is there a way to just Always Trust my companies self signed cert? The biggest problem is email attachments, they ...
0
votes
0answers
152 views

Autokey NTP client?

What's a reasonably short path to getting OS X to be an NTP client of an NTP server, using autokey? I tried adding the server's public keyfile (iffpar) and the appropriate commands in ntp.conf in the ...