Questions tagged [certificate]

Questions about importing/creating and using x509 certificates for SSL, iOS & macOS development. Questions about accessing and using certificates programmatically are off topic.

Filter by
Sorted by
Tagged with
3
votes
2answers
60 views

Should I Trust a Certificate

Basically, my school is apparently having a network 'update' and are telling us to go to keychain access and trust a certificate. This is what they sent us. Exactly what will happen if I do this any? ...
3
votes
1answer
622 views

How to create a new identity in macOS?

I've done likely stupid things in Keychain Access and now I don't have access to identities: user@host:~$ security find-identity Policy: X.509 Basic Matching identities 0 identities found ...
3
votes
1answer
3k views

How to add an CA to the default TrustStore in OSX and iOS

Recently, I want to capture the ingress package in iOS, after I installed p12 using Safari. It shows can't establish secure link. However after I add NSAppTransportSecurity/NSAllowsArbitraryLoads = ...
3
votes
1answer
1k views

When replacing an expired Enterprise Distribution certificate, do I have to resign the whole App?

Our Customer has an Enterprise Distribution certificate. We are signing their Apps and distribute them to their devices via Airwatch MDM. Their Enterprise Distribution certificate is about to expire ...
3
votes
1answer
17k views

Removing trusted certificate from Mail in iOS 8

My IMAP (and SMTP) server used a self signed certificate. Once I marked the certificate as "trusted" in the Mail app, is there a way to remove that trust again? I tried deleting and re-creating the ...
3
votes
1answer
456 views

How do I fix the SSL warning I get when visiting github.com?

I see the following warning when visiting http://www.github.com/ after July 26, 2014. I get this warning in both Chrome and Safari on my OS X Mavericks-equipped iMac. Should I worry about this? How ...
3
votes
2answers
3k views

How to delete a trusted s/mime certificate for a contact in iOS7

How do I remove a s/mime certificate for a contact in iOS7 mail.app? I'm using s/mime for two-way encrypted emails with several colleagues. A new colleague tried to install s/mime in Outlook for ...
3
votes
2answers
7k views

Unable to import S/MIME certificate and key into my iPhone (iOS7)

I tried to generate a S/MIME certificate from comodo.com. On my Mac it perfectly works. But I am unable to use it on iOS 7. This is what I did: generate certificate on Mac export certificate and ...
3
votes
0answers
540 views

Reset Safari SSL Exceptions on iOS 11

On iOS if you visit a website with an invalid SSL certificate, you are presented with this prompt (ok, it’s in italian but you get the picture): Tapping “show details” allows the user to proceed to ...
3
votes
0answers
2k views

Remove accepted self-signed certificate from iOS Safari

I was experimenting with self-signed certificates and while viewing my website from Safari on an iPhone I first got the warning that it is an untrusted site and I could review the details of the ...
3
votes
2answers
4k views

'No machine certificates found' when adding machine certificate into VPN

I've 2 certificates, one for user authentication and another for machine authentication. My user authentication includes certificate and private key based on which I've generated pkcs12 file using ...
3
votes
0answers
2k views

iOS Enterprise developer Account: apns certificate for push notification [closed]

I have used the iOS development account for creating apns ssl certificate for sending push notification to iOS device for development purpose.I can get the device token using objective c sample code ...
3
votes
4answers
2k views

CA storage for cURL on Mavericks

I was troubleshooting a problem with Arcanist and Phabricator on MacOSX, a cURL/60 error, but it wasn't clear how to check where the php curl libraries were getting their Certificate Authority trust ...
2
votes
2answers
1k views

What password does OSX Server use when importing SSL certificates?

I am migrating my website away from my home OSX server to a virtual Linux server, hosted within a proper data centre, and I have a problem with the SSL certificates I imported into OSX Server. It ...
2
votes
1answer
541 views

My signed .pkg file is not accepted

I'm struggling with signing my installer to keep Gatekeeper happy. When building i sign the .pkg: productsign --sign "3rd Party Mac Developer Installer: GNXXXXXXXXXX (XXXXXXXXXXX)" ...
2
votes
2answers
527 views

Getting “Certificate signed by untrusted issuer” on Mac

When I try to launch an application that is developed by my company, I get the "Certificate signed by untrusted issuer" error. I checked both these posts. I don't have any certificates in my ...
2
votes
2answers
6k views

Identity not found when trying to code-sign an application with a certificate

After properly creating a valid certificate for code signing, when running the command: $ codesign -s CertificateName AppPathName I always get a: CertificateName: no identity found Anyways, When I ...
2
votes
3answers
9k views

How can I Change the Apple Configuration Signing Certificate?

I use the Apple Configurator to craft a Mobile Configuration Profile able to configure some settings such as the LDAP Directory as an example. When exporting the profile, I check the "Sign" checkbox ...
2
votes
3answers
588 views

Are these root certificates suspicious?

On a fresh install of Leopard when I look at the root certificates this is what I see when I order them by expiration date. I find the names, dates, and number of certificates suspicious. Is this all ...
2
votes
1answer
57 views

Work computer shows “This connection is not private” warning on almost all sites

My workplace allows me to use a Mac, but doesn't have much experience with them; their support is minimal if well intentioned, and generally as much harm as help. This includes installing antivirus ...
2
votes
1answer
497 views

Extract Installer Package Signing Certificates from xip archive

It's possible to extract Code Signing Certificates (CSCs) from an .app or signed .dmg as ASN.1 (DER) with codesign -d --extract-certificates prefix /path/to/file.dmg After that you can do stuff with ...
2
votes
1answer
306 views

Python-based app requires bypassing 'unknown developer' warning

Using a Python utility called py2app, I've built a distributable .app. from a Python-based project. It launches fine (when double-clicked) on my own machine, yet when tried elsewhere (other users on ...
2
votes
1answer
3k views

Invalid Root Certificate (Comodo RSA)

Regularly, a duplicate certificate of COMODO RSA appears on my keychain (Google Chrome?) and when I browse on a website which use a COMODO certificate. Google Chrome blocks the website. (Normal). I ...
2
votes
1answer
5k views

Server certificates are not properly validated by subversion/openssl

I noticed that the svn cli fails to validate https certificates and always ask for manual validation using the certificate fingerprint: mbp:~ user$ svn co https://svn.mysite.com/svn/testrepo Error ...
2
votes
3answers
2k views

Getting errors when trying to send something using Gmail and Mail 5

I've had a problem for awhile with a Gmail account linked to Mail, which arose last summer after I upgraded to Lion. When I try to send a signed message (signed, in terms of security, not a signature ...
2
votes
2answers
224 views

How to import X.509 certificates into MacOS?

I have the file with X.509 certificates and the following preamble: # This is a bundle of X.509 certificates of public Certificate # Authorities. It was generated from the Mozilla root CA list. # ...
2
votes
1answer
6k views

I have several hundred expired certificates starting with com.apple.idms.appleid.prd. What are they and are they safe to delete?

I recently looked at Keychain Access and found that I have 394 certificates prefixed with com.apple.idms.appleid.prd, all of which are expired. When I get more info on one of them, I see that it is ...
2
votes
1answer
268 views

Is there a truly user friendly guide on how to handle iOS Certificates and Provisioning Profiles? – Xcode 7.3 / iOS 9.3

I'm getting a warning that The provisioning profile "iOSTeam Provisioning Profile: *" is expiring soon. I'm not sure what to do and the Apple documentation, even the Quick Start Guide, is overwhelming ...
2
votes
1answer
8k views

“This certificate was signed by an untrusted issuer”: what's causing such an error?

I am having trouble with a specific financial services provider; every time I try to visit myvisaaccount.com to check my card balance etc, I get the dreaded Chrome red strikethrough https and x-ed ...
2
votes
1answer
745 views

Generate Safari Developer Certificate for building extensions

I have gone through this link.But everything seems to be changed. Everything redirects to Apple Development Program.So is it mandatory to enroll in that development program to create a safari ...
2
votes
1answer
532 views

OS X - Signing installer/application

I would like to sign my OS X installer using company certificate. I have .cer and .p12 files. I wonder if there is some way to do that without creating keychain. E.g. in 'productsign' tool flag --cert ...
2
votes
2answers
5k views

“This certificate was signed by an untrusted issuer” problem after updating to El Capitan

Most of the https connections returns that. Most of them is signed by Symantec. But not all. I tried to google the problem, but with no luck, seems like I only the one who experiencing this problem. ...
2
votes
1answer
793 views

Unable to create iOS App Development certificate

I am trying to create a iOS development certificate in the dev center on apple. When I go to create a certificate the "OS App Development" option is greyed out and I am unable to select it. This has ...
2
votes
1answer
603 views

How to purchase a gift certificate in iTunes store?

My iTunes version is 11.1.3.8 (downloaded and installed today) and this is on Windows 7 x64. Locale is Iceland, recipient locale is Germany. The gift certificate is intended to be used for in-app ...
2
votes
1answer
167 views

Client certificate required after installing certificate

Using safari on OS X 10.8.2 to connect to an internal server via https:, safari indicates a client certificate is required. Tried dragging the certificate from the url field to the desktop and adding ...
2
votes
2answers
164 views

Where do certificates come from?

On my system when I check Keychain Access I often find new certificates. They get put there behind the scenes. Is that normal? When does this happen? Is there a way I can get alerted when a ...
2
votes
0answers
118 views

Trust SSL certificate via terminal in MacOS

I'm trying to setup WPA2 with EAP-TLS authentication using certificates in pfx format. As adding the certificate to the keychain and changing the Trust settings can be difficult for some users, I ...
2
votes
0answers
4k views

Can't use self signed certificates any more, because “Enable full trust for root certificates” is gone from settings

As you can see, "Enable full trust for root certificates" is completely missing. What do I do? This is on iPhone X 11.4 btw.
2
votes
0answers
77 views

Wrong Account Name with Certificate Authentication for VPN

I installed a user certificate and the enterprise CA onto an iOS device (iOS11). The user certificate contains UPN (User Principal Name) in its alternative subject name. I then tried to set up an ...
2
votes
0answers
78 views

Recreating distribution certs in enterprise apps

I have an enterprise account and the distribution certificate for the account is going to expire. I read through the documentation here and understand that I need to generate a new certificate and ...
2
votes
3answers
1k views

Re-added certificate leads to unknown authority

Messing around with Keychain Access on macOS Sierra, it seems like I have accidentally deleted trusted root certificates in Keychain Access. What I did was opening a *.p7s file to add a S/MIME ...
2
votes
2answers
3k views

Does iOS 10 Allow Self-Signed Certificates for PEAP?

The campus I work for (I'm a student, not faculty or staff) is having issues with iOS 10 (for sure, haven't been able to get a single device running iOS 10 to work, even though 9.x.x worked just fine. ...
2
votes
1answer
78 views

Certificate Assistant swaps extension settings for CA / Users

I am trying to set up a Root Certificate Authority using Keychain Access/Certificate Assistant but I am running into some trouble. When creating the authority the assistant asks you to enter Key ...
2
votes
0answers
397 views

SCEP Request on Mac

I am looking for a way to issue a SCEP request to my organizations CAIssuing server. I manage a number of Macs and we currently import the certificates by hand using a profile on a web server. I know ...
2
votes
0answers
505 views

Bash script to import RootCA and set it to Always Trust from Server

I am working on a way to import a RootCA into the login keychain of OS X and set it to always trust, the cert is located on a file share server. I am relatively new to the whole Bash scripting scene ...
2
votes
0answers
1k views

How to avoid display HTTPS certificate warning in Chrome

When I browse with Chrome on a web site that has an invalid certificate for some reason (eg my NAS Synology using HTTPS protocol) a warning message like the following Chrome appears to me: If I ...
2
votes
0answers
123 views

How can I disable a root certificate in iOS?

I want to disable all root certificates in iOS since I'll be using a proxy to access all HTTPS sites. How do I disable all root certs in iOS?
2
votes
0answers
383 views

Dealing with bad Gmail certificate in Adium

My wife and I are both running current versions of OS X (10.7.2) and Adium (1.4.3). We both use gmail accounts in it for instant messaging. She launched Adium yesterday, and it complained that Gmail'...
2
votes
2answers
8k views

New iTunes gives error: iTunes cannot verify the identity of the server “safebrowsing.clients.google.com”

I can browse to https://safebrowsing.clients.google.com/ but it just redirects me to Google's home page. iTunes 12.5.5.5, Windows 8.1
1
vote
2answers
4k views

How to delete or untrust all root certificates in OSX?

In Keychain Access it looks like you can only untrust/delete certificates one at a time. But there are a lot of certificates I want to get rid of. How can I take care of them all at the same time? ...