Questions tagged [certificate]

Questions about importing/creating and using x509 certificates for SSL, iOS & macOS development. Questions about accessing and using certificates programmatically are off topic.

Filter by
Sorted by
Tagged with
63
votes
3answers
153k views

How do I transfer my iOS developer profile to another computer?

I got a new MBP and would like to transfer my certificates and profiles from my old computer. According to TN 2250, under "Transferring Your Identities," I need to transfer three sets of items: all ...
42
votes
5answers
18k views

How to tell why macOS thinks that a certificate is revoked?

I cannot access Wikipedia on both my Macs. macOS says that the intermediate certificate used to sign Wikipedia’s certificate (GlobalSign Organization Validation CA - SHA256 - G2) has been revoked. I ...
31
votes
5answers
48k views

“iTunes can’t verify the identity of the server …” after a Security Update in Mavericks or upgrade to El Capitan

Prior to the security update released early April my system was working fine. After that, I'm getting invalid certificates everywhere: iTunes says "iTunes can’t verify the identity of the server “...
26
votes
7answers
80k views

Safari can't connect to https

Safari suddenly can't connect to any HTTPS site because it "can't establish a secure connection". This is on an administrator account, not a managed account. A different administrator account is ...
25
votes
6answers
9k views

“Unknown Error = -2,147,414,007” on creating certificate with Certificate Assistant

I am getting "Unknown Error = -2,147,414,007" on creating a certificate through the Keychain app. Steps to Recreate: Open the Keychain Access application. Select Certificate Assistant > Create a ...
22
votes
4answers
32k views

How to view certificate info without installing

I have a certificate and/or private key file (pfx) on my OS X desktop. I'd like to look at its information (CN, SAN, OU, thumbprint, etc) but when I double click on it, it attempts to install into my ...
12
votes
1answer
3k views

What is Department of Defense Root CA 2 doing on my Mac?

I accidentally came across the keychain certificate part of my Mac and saw Department of Defense certificate. What is this certificate doing on my laptop. I am not a military member and never had any ...
12
votes
1answer
7k views

Any way to temporarily allow insecure SSL on Safari in High Sierra?

Apparently High Sierra has changed the way Safari handles untrusted SSL certificates. In the past you could bypass an SSL warning and visit a site. But if you visited that site again in a new session,...
11
votes
3answers
19k views

View SSL/TLS certificate in Safari 5+ when no padlock icon shown

According to Apple, With Safari 5 through 5.1.7, a lock icon appears near the top right corner [only] if all of the webpage's content uses a secure connection. That's all very well, but normally ...
11
votes
5answers
31k views

“This copy of the Install OSX Mavericks…” error message via USB boot

I have an old Leopard MBP and a 2013 Mavericks iMac. I want to install Mavericks on the Leopard MBP, but had no success since. Here's what I did. I downloaded Mavericks from the MAS on the iMac I ...
11
votes
2answers
4k views

Keychain Access error when creating new system certificate

I am following the instructions to codesign gdb on my MBP however when I get to the end of the System certificate creation process, keychain says "Unknown Error = -2,147,414,007" and the certificate ...
11
votes
2answers
3k views

iPad Mail client - IMAP with X.509 client certificates?

Short version: Does anyone know if X.509 client certificates are supposed to work on the iPad for IMAP mail? Am I wasting my time trying to get a feature that doesn't work to work? If the built-in ...
10
votes
5answers
23k views

How to add a .crt certificate to iPhone's keychain?

I moved a .crt certificate file onto my iPhone device via Dropbox and tried following these instructions to add it to the device keychain: It suggests to open the certificate file but my iPhone doesn'...
10
votes
2answers
20k views

Certificate error when using Chrome for iOS with company CA

I am using an iPad with Google Chrome installed to access the internet. I have downloaded and installed the Netbox Blue certificate authority from their website. I can currently access https:// ...
9
votes
1answer
3k views

Mac OS X (10.9) and 8192 bit certificates - Error -67762

I've only recently upgraded to Mavericks and hence I'm not entirely sure whether this is a Mavericks only problem or not, but here it is: Security update 2006-007 apparently broke 8192-bit ...
9
votes
2answers
7k views

Unable to export .p12 certificate from Keychain Access [duplicate]

I'm trying to export a Developer certificate from Keychain Access. I've followed all the instructions and got to the point where I need to enter the "login" keychain password. However, when I enter ...
9
votes
1answer
12k views

What happens when a distribution certificate expires or revoked?

My app is already in App Store. Now my distribution certificate is expired. I know my app in App Store will continue running, but my questions are: If now I have a bug fix in my app, does it mean I ...
9
votes
1answer
2k views

Why is the Turkish Government in my computer?

Perusing Keychain Access, I see that "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" is listed as a trusted root certificate authority. Per this 2013 article, I understand that: my ...
9
votes
1answer
709 views

Problems connecting to HTTPS websites on unsecured WiFi

I am on a MacBook Air running OSX 10.10.2. I try to connect to an HTTPS website on Firefox and I get the message Your connection is not secure The owner of www.google.co.il has configured ...
7
votes
4answers
7k views

How do I get com.apple.servermgrd to use a non-self-signed SSL certificate?

I have received a valid SSL certificate for my Mountain Lion Server (10.8.2 Build 12C3104) and have installed that cert for use by all services (and SSL and other services do not pop up the "Verify ...
7
votes
1answer
11k views

Why does OS X repeatedly prompt for certificate trust when joining WPA2 Enterprise WiFi

WHY does OS X always prompt for certificate trust when connecting to WPA2 Enterprise (EAP-PEAP in my case) networks, even if the certificate is already marked as 'trusted'? Even weirder.. if I delete ...
7
votes
2answers
5k views

Enable a CRL endpoint for my CA in Keychain Access

I have a Certificate Authority and I'd like to configure CRL. Is there a way to do this in Keychain Access? (I am running OS X Server).
6
votes
1answer
16k views

How can I delete a certificate that got restored from a backup under iOS 10/11?

With iOS, certificates are installed as part of profiles. Deleting a certificate means removing the profile. When an iPhone with profiles is backed up, and then the backup is restored to a new device,...
6
votes
3answers
446 views

What is the security impact of installing a macOS configuration profile containing certificates?

I want to install a configuration profile to automatically connect to my university network but along with the two wifi network configurations there are also two certificates, their description is "AC ...
5
votes
4answers
15k views

When i try to install my certificate in keychain, the error says: Unable to import - Error Code 25294

I am using the 10.9.5 version and ios 8. When i try to install my certificate i got through my developer account for push notification for my app in the keychain local items, its not importing. The ...
5
votes
1answer
1k views

how do you load the US Department of Defense Certificate into an iPhone?

How do you load the US Department of Defense SSL certificate (or any SSL certificate) into iOS?
5
votes
2answers
16k views

Deleted all certificates by mistake. How to recreate?

I started seeing an issue in Chrome (38 on OSX 10.7.5) accessing GitHub. I got a Privacy error. One of the recommendations on SuperUser, and the reply I got from GitHub support, was to delete all ...
5
votes
1answer
4k views

Apple Mail warning: Unable to verify message signature

After upgrading from Sierra to Mojave (macOS 10.14), Apple mail started to display the warning Unable to verify message signature above all signed and encrypted emails. When clicking on Details, it ...
5
votes
1answer
1k views

Import CA certificate into Chrome via command line

Is it possible to import a custom Certificate Authority (.crt) using Terminal or over SSH on macOS 10.13 High Sierra?
4
votes
1answer
392 views

MacBook Pro Certificate - no value specified - Business Category : Private Organization

Today after I signed into my computer and opened Safari this window popped up: I am looking for help to know what this is, and what I need to do. Thank you.
4
votes
1answer
5k views

How do I view or verify signed .mobileconfig files using Terminal?

I need to troubleshoot problems with signed .mobileconfig profiles. How can I show the signature of a these files using Terminal? Is it also possible to verify the certificates that were used to sign ...
4
votes
3answers
43k views

Safari not accepting website certificate

I've been using an internal website at work without any issues until today when I received the error message: "Safari can't open the page "https://...". The error is: "The server "..." did not ...
4
votes
1answer
36k views

View TLS Certificate in Safari 8 / Yosemite

i've installed the new OS X Yosemite recently. Now i'm trying to view the TLS Certificate and the Certificate Chain in the new Safari. In the older versions of Safari one just had to click onto the ...
4
votes
5answers
4k views

How to replace missing root and intermediate certificates in Mac OS X v10.8

Let me preface this with the fact that I know nothing about networking / security / etc. Twice now, I've had issues with root certificates not working and throwing errors, even though they are still ...
4
votes
1answer
2k views

Duplicate Apple ID Keys?

Why do I have all these duplicate public (& one duplicate private) Apple ID keys? & Can I remove the extras so I just have one public & one private key? There is no identifying information ...
4
votes
1answer
10k views
+100

Certificates not updating

I'm trying to visit my university research group's website at home. The website requires a username and password to view and probably has who knows what kind of security systems in place. On Safari ...
4
votes
1answer
457 views

Mac App Store apps damaged? [duplicate]

Overnight, TextWrangler crashed with a message "TextWrangler" is damaged and can't be opened. I deleted "TextWrangler" and download it again from the App Store. I couldn't update from the Mac App ...
4
votes
1answer
202 views

Strange looking certificate in macOS Keychain

I need help with a strange looking certificate which has appeared in the Keychain of my Mac. The name of the certificate is "A9936B80-41C7-4D34-8020-59C3E40A31A8 A98369B2-0C8C-4CF8-9921-015C5D9A4C86"....
4
votes
2answers
58 views

How can I tell that a certificate is a root certificate?

Are these certificates root certificates or not and how can I disable them if they are?
4
votes
1answer
2k views

Does apple notify you when a certificate is going to expire?

Do apple notify the developer or email when a push notification is going to expired?
4
votes
1answer
1k views

How to make Chrome trust self signed certificates?

I have followed these instructions (available from Wayback Machine in case they disappear) to add the certificate of my Asus Router to the keychain but Chrome still refuses to trust it, with the error ...
4
votes
1answer
1k views

Mavericks Server: Unable to use 3rd party SSL Certificates with Open Directory

We have a Mac OS X Server (Mavericks) - Mac OS X: 10.9.2, Server: 3.1 Our Open Directory Master is set up and running but we cannot for the life of us get it to accept our 3rd Party (DigiCert) SSL ...
4
votes
0answers
81 views

How to create /etc/certificates/*.{cert,chain,concat,key}.pem files without reboot?

I am trying to move from Comodo to Let's Encrypt certificates on OS X Server (10.7). Something in Apple's server.app and ServerAdmin.app is broken. I can see and select newly imported certificates in ...
3
votes
1answer
2k views

Your browser does not currently recognize any of the video formats available

I am not sure what happened… My internet was working fine all day, so I do not know what would cause this message and notice my browser is currently not recognized.
3
votes
2answers
4k views

Is it important to backup public keys for iOS Developer Certificates?

I have read everywhere that you need to backup your private keys for iOS Developer Certificates on your Mac. I want to know if public key is important to backup or not. In case if a person just keeps ...
3
votes
2answers
2k views

What are the trusted Certificate Authorities in iOS?

I'm wondering if StartCom is a trusted CA on iOS. I'd like to setup a mail server for a TLD, and use their free certificate. It's only about $10/year cheaper than more well known authorities, so the ...
3
votes
1answer
5k views

Why is the CAcert root certificate not trusted on iOS devices?

I distinctly remember that when I bought my first iPhone and iPad a couple of years back, I was able to install the CAcert root certificate on those devices and iOS would trust the certificate. These ...
3
votes
1answer
1k views

Renewing the Developer Program Membership after it expires

My Developer Program Membership (along with the iOS Distribution Certificate - it seems) expires in a couple of weeks. About a week ago, Apple sent me an email implying that I must renew the ...
3
votes
1answer
5k views

Where can I see the installed profiles in iOS9

Where is Settings > General > Profile in iOS 9? I was part of a testing-team for an iOS app and using testflight. Back then, under iOS 6, I had to install a profile on my iPhone. Now, years ...
3
votes
1answer
14k views

com.apple.WebKit.Networking.xpc wants to sign using key “privateKey” in your keychain

I've seen this error in a few other areas of the forums; however, I'm trying to understand what does "key 'privateKey'" means. I'm trying to authenticate to a VPN portal and this is the error that ...