Questions tagged [certificate]

Questions about importing/creating and using x509 certificates for SSL, iOS & macOS development. Questions about accessing and using certificates programmatically are off topic.

Filter by
Sorted by
Tagged with
1
vote
1answer
66 views

Is it possible to detect any certificates not packaged by Apple?

I recently received a Mac and connected to my employer's network. When I connected, my Mac (not browser, it was in the connection dialog) asked me to do something with a new certificate. I ...
1
vote
1answer
182 views

Apple iPhone won't connect to insecure website

A certificate is expired of an application of ours and a client still wants to access it. He is using an Apple iPhone and gets the message Safari cannot open the page because it could not establish ...
1
vote
1answer
87 views

HTTP URLs aren't working on OS X Yosemite

My OS X Yosemite 10.10.5 Mac seems to only be able to hit HTTPS URLs, but not HTTP URLs. I tested another computer on my network, and that machine seems to work fine. I tested using this URL: http://...
1
vote
1answer
5k views

Where are the root CAs stored on OS X?

I need one of the root CA certificates, as a filename, to pass to a command-line program. I could download it from DigiCert (and convert it to the required format, .crt) manually, but I figure it's ...
1
vote
1answer
524 views

Internet Access after renew the expired com.apple.servermgrd certificate

I inherited some months ago a Mac mini server running OS X 10.8.5 Initially, I configured it with the new network settings, DNS name, etc and all was working fine in regard to file sharing, accessing ...
1
vote
1answer
320 views

Safari, iTunes, Chrome etc. won't recognize root certificates after recent update to Safari 7.1.5 (Mavericks)

After installing the most recent security and Safari updates (7.1.5) on Mavericks, Safari and other applications (those using NSURLConnection/CFURLConnection) no longer recognize any root certificates ...
1
vote
1answer
1k views

Java Certificate Issues

Overview We are building a JAVA Application that communicates data over secure HTTPS lines. Problem When we run our application from Eclipse/Terminal, via the command "java -jar <application>....
1
vote
1answer
3k views

Sharing a provisioning profile among team members under a non-company subscription

Let's say there are two iOS developers using 4 computers in total, working on the same project. Because code signing information in the Xcode project file gets checked in to the source repo, and ...
1
vote
1answer
4k views

OS X Maverick 10.9 Import SSL Cert from Windows Server 2008

I created Open Directory and ProfileManager with self-signed certificate. Now I try to replace the self-signed certificate with the already Signed Certificated currently use on our Active Directory ...
1
vote
1answer
3k views

Many Applications accessing obsolete x509anchors

When I look into console.app I see that every 2 minutes one of the mac os programs (Safari, Mail, Keychain, Addressbook, WebProcess etc.) is giving an "Warning: accessing obsolete X509Anchors." error. ...
1
vote
1answer
31 views

How to get Apple certificate to sign files?

I was tasked by my boss to handle new project at work - JAMF to manage our MacOS devices (we are mostly Windows corporation, so it isn't easy). We bought it, had some training. I want now to use ...
1
vote
2answers
57 views

How do you clear SSL leaf certificates mappings to particular domains

I visit my website using Chrome on macOS Mojave, for example, qa.abc.com, and the SSL leaf certificate is from customer-test.ssl.fastly.net. I recently updated the CNAME record in my DNS for qa.abc....
1
vote
2answers
109 views

How to create an identity who can be used for signing code from custom certificate?

I want to codesign one of my applications by using my own certificate (not created with Keychain Access). First, I create a v3.ext file: keyUsage = digitalSignature Then, I created my certificate ...
1
vote
1answer
276 views

How to disable certificate transparency check in macOS Mojave(10.14)

In macOS Mojave, certificate transparency check is enabled. Because the OS terminates all TLS connections that doesn’t use transparent certificates, macOS Mojave cannot connect to WPA2 Enterprise ...
1
vote
1answer
386 views

How can I see what permissions an enterprise app certificate has?

I live in Iran, and here most Iranian apps are banned from the App Store, and are distributed using enterprise certificates. There are even Iranian app stores that use a single such certificate to ...
1
vote
1answer
118 views

Do I need to renew the Institutional Recovery Key certificate with FileVault

We plan to roll out FileVault via Apple's own MDM (Server.app). I already have some test-computers enrolled. When I look at the certificate used for the Institutional Recovery Key, it expires in ...
1
vote
1answer
325 views

Problem loading images from googleusercontent

Recently switched from Chrome to Firefox Quantum and noticed that images from *.googleusercontent.com aren't loading because "The connection used to fetch the resource was not secure" If I attempt to ...
1
vote
1answer
279 views

How to store and retrieve S/MIME certificates in Open Directory (LDAP) of macOS Server?

Is it possible to use the Open Directory of the macOS Server app to store and retrieve S/MIME (X.509) certificates with the user data? Background: I would like to share our public S/MIME ...
1
vote
1answer
612 views

Advanced configuration for email notifications about Apple Developer Certificates expiration

Mainly, I just wanted to ask the same question here, because the community here is active (comparing to what is seen on Apple Developer Forums, unfortunately): https://forums.developer.apple.com/...
1
vote
1answer
3k views

iPhone untrusted certificate warning

My iPhone 7 iOS 10.3.1 randomly started receiving untrusted certificate pop-ups from onboard.info (but I’ve seen it on devices going back to iPhone 5): This was at home last night and I had just ...
1
vote
1answer
60 views

Signed application cannot be opened once downloaded - (“unidentified developer”) error

I have developed an application for OS X. As changes to this application are pushed to my code repository, a build server (Jenkins) automatically detects those changes and kicks off a build process. ...
1
vote
1answer
1k views

Cannot find expired certificate in Keychain Access

Trying to pull from a git repository I got an "SSL certificate problem: Invalid certificate chain", and was unable to access. The answer here: git SSL certificate- Invalid certificate chain while ...
1
vote
2answers
2k views

Forgot the password of a keychain (non the login one)

I have installed a bunch of certificates on my mac, due to italian legal system, in order to login to a certain website with a smartcard. It all worked well for a few months and then yesterday it ...
1
vote
1answer
269 views

Is there a truly user friendly guide on how to handle iOS Certificates and Provisioning Profiles? – Xcode 7.3 / iOS 9.3

I'm getting a warning that The provisioning profile "iOSTeam Provisioning Profile: *" is expiring soon. I'm not sure what to do and the Apple documentation, even the Quick Start Guide, is overwhelming ...
1
vote
1answer
621 views

Does My Company Need To Code Sign with Two Digital Certificates? Apple Developer and EV Certificate?

My employer plans to distribute Mac OSX software outside the App Store through their website. Do I need to get an organizational developer ID from Apple ($99 USD/yr) plus purchase an EV code-signing ...
1
vote
1answer
2k views

OS X Safari Comodo SSL issue

Strange issue on OS X Safari - visit Skiplex UK and you will receive an alert 'Safari can't verify the identity of the website "www.skiplex.co.uk".'. I have been advised by Comodo and our hosting ...
1
vote
1answer
810 views

identity.apple.com/pushcert not loading

I'm trying to renew my Apple Push Notification Service certificate per the 30 day notification email I received. The email instructed me to visit http://identity.apple.com/pushcert to renew the ...
1
vote
1answer
1k views

difference between “Development certificate” and “Developer ID certificate”

I am reading the pdf (from Apple) named App Distribution Guide. In page 155 it is written that every team member can create a "Developement certificate", that the team admins can create a "...
1
vote
1answer
877 views

How to install subordinate CA certificate into keychain from Terminal?

I'm a Windows engineer, setting up a Active Directory PKI, but know very little about Macs. I'm aware of how to install root certificates into the system keychain using: sudo security add-trusted-...
1
vote
1answer
8k views

Revoking and requesting a new distribution certificate in apple dev center

I'm trying update our iOS app through itunes connect. However, I'm having an issue with the iOS distribution certificate when I try to submit to the appstore. This is the error that appears to me: ...
1
vote
4answers
12k views

Safari not loading Gmail; Google/YouTube invalid certificate

I've tried changing DNS servers to OpenDNS's, I've cleared my history and website data from Safari, and I've uninstalled all extensions… but the browser just won't load Gmail! Whether I click on Sign ...
1
vote
2answers
670 views

Are UDID registrations real

There are services like https://udidregistrations.com where you can register you UDID and get Certificates and Provision profiles. Are they worth? What danger is there? Signing applications is real? ...
1
vote
1answer
740 views

Private Key and Certificate protection on IOS

I have a question about private key protection on iOS. I simply would like to know if there is a way of protecting client's certificates when importing them to an iPad. For example, when installing ...
1
vote
2answers
2k views

Safari not warning on SSL certificate hostname mismatch

For some reason (e.g., bad preferences setting, maybe?) Safari 6.0.5, on OS X 10.8.4, is failing to give me an SSL Certificate Warning when I visit a site whose hostname doesn't match the hostname ...
1
vote
1answer
2k views

'Always Trust' wifi network not working

This is more of an annoyance than anything...I have a MacBook Pro (latest Retina 15") and a Mac mini (latest model) both running Mac OS 10.8.4 and whenever I connect to my company's wifi network, I ...
1
vote
0answers
50 views

Which keychain holds user trusted certificates?

I tried to do a clean install of my El Capitan MacBook but realised that much of my keychain migrated over. When I went into keychain access it showed a number of different keychains. I reset the "...
1
vote
0answers
244 views

Cannot export System.keychain Certificate from with private key as p12 via Terminal security export command

I have a machine certificate installed in system.keychain and want to export certificate with privet key via security export command. But getting error :security: SecKeychainItemExport: User ...
1
vote
0answers
67 views

Can I use a letsencrypt certificate to secure macOS High Sierra Server Open Directory?

I have services (mail, web) on macOS High Sierra Server protected with a letsencrypt certificate and that works fine. I'd like to extend that use of letsencrypt to Open Directory, to fully get rid of ...
1
vote
0answers
67 views

Safari and Chrome loading the wrong website

My client is having an issue that is exclusive to her computer. When viewing her website on any other computer the website that shows is the current one being hosted by Squarespace. When viewing on ...
1
vote
0answers
858 views

How do I configure an iPad to use EAP-TLS?

I try to connect an iPad (iOS 11.3.1) to a WiFi network which uses EAP-TLS. There is no way to specify EAP-TLS mode because of the lack of the certificate, so I need to import the certificate first. ...
1
vote
0answers
48 views

Why do browsers still not trust my internal sites even after installing the CA chain?

I host several web services on my internal network and have created TLS certificates for each of them, all signed by my home-baked OpenSSL certificate authority. I've imported the CA certificates into ...
1
vote
1answer
1k views

Sign flat package with non-Apple certificate

I have a program that I ported from the Windows environment to macOS. I would like to sign the flat installer .pkg with the same certificate I used on Windows, which is valid and granted by DigiCert. ...
1
vote
0answers
75 views

Cisco AnyConnect: Certificate Failure while ssh'd in

/opt/cisco/anyconnect/bin vpn connect HOST works from the command line, but not after ssh localhost. How can I make these certificates available to myself after ssh'ing in?
1
vote
0answers
2k views

Can't view SSL certificate with chrome?

When I try to view a certificate, a dialog popup and I'm unable to see the contents. What could the problems be?
1
vote
0answers
2k views

Enable/Disable the list of trusted credentials & certificates on iPhone with iOS 9

On Android, you can see and uncheck a certificate via Security/Trusted credentials. How do you do the same on iOS devices?
1
vote
0answers
3k views

safari website requires a client certificate

I went to a site I regularly use and got this when logging in with Safari I seem to have 2 certificated of the same name both issued by Apple and both are not expired (found by searching in KeyChain ...
1
vote
2answers
906 views

The deleted certificate will be restored after rebooting. But why?

I installed a file *.developerprofile. Then I went to the keychain and deleted 3 certificates (they were expired). Everything is OK. But deleted certificates appeared when I rebooted my Mac. But why?
0
votes
1answer
6k views

How to forcefully open a blocked Java Applet?

I downloaded from Internet (topcoder.com) a Java applet. When I try to open it, it says "Application blocked for security reasons" because "The certificate has expired". I really want to launch it... ...
0
votes
2answers
493 views

Is S/MIME in iOS 7 buggy?

I recently imported my S/MIME certificate into iOS 7. I am able to read signed/encrypted message sent from my mac to the iPhone. BUT I am UNABLE to send signed / encrypted mails from the iPhone. ...
0
votes
1answer
63 views

“err_certificate_invalid” for only one host, on only one device, but in all browsers

Currently, when I try to access www.comic-rocket.com on my iPad (iOS 10.2), the site will not load. Safari simply won't load the page, as if I hadn't even tried to do so. Chrome and Dolphin will ...