Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [ssl]

Secure Sockets Layer (SSL) is a cryptographic protocol designed to provide communications security over a computer network. This tag should be use when dealing with SSL certificate involving macOS or iOS

Filter by
Sorted by
Tagged with
0 votes
2 answers
66 views

Many sites are displaying SSL Certificate invalid but their date is in the future and the computer's clock is fine

I reinstalled an old 2015 Apple computer today, and I ran into a few issues. During system install, it failed because of some SSL issues, and I had to change the system's clock to prior 2017 for the ...
user avatar
1 vote
0 answers
25 views

Export x509 Certificate from iPad

Question: Is there a way to export a public certificate from an iPad running the latest iOS? (PEM formatted Base64 if possible) Scenario: AirWatch manages our iPads. There is a profile configured to ...
user avatar
  • 111
3 votes
0 answers
346 views

Mysql SSL unsupported protocol error

Since a couple days I cannot connect to several mysql instances when using SSL. I am quite sure it's a problem on my machine, since colleagues and production servers don't have this issue. In both my ...
user avatar
  • 131
3 votes
1 answer
238 views

Make Safari on macOS reject insecure connections again

Summary: I had opened an insecure website in Safari on macOS, which is now displayed with the "Not Secure" warning in the address field. I would like to “reset“ Safari so that this (and ...
user avatar
  • 356
1 vote
0 answers
714 views

UNSAFE_LEGACY_RENEGOTIATION_DISABLED on Mac OSX

I am running some python code that uses a library (urlib3) to access an API for some data. However, when the API endpoint is accessed, I get an SSL error of UNSAFE_LEGACY_RENEGOTIATION_DISABLED. The ...
user avatar
0 votes
0 answers
26 views

How to Update OpenSSL on Mac OS 10.15.7

We are running on Mac OS 10.15.7 and we have been told by some APIs that our TLS is not up to date. When I run: openssl version I get: LibreSSL 2.8.3 When I run: which openssl I get: /usr/bin/openssl ...
user avatar
  • 31
2 votes
1 answer
132 views

How can I programmatically test if the ISRG Root X1 certificate is present and trusted in Keychain Access?

On September 30, 2021, the DST Root CA X3 expired, and left macOS 10.11 and older unable to connect to any HTTPS servers which use Let's Encrypt by default. One easy way to fix this is to manually add ...
user avatar
  • 6,198
0 votes
1 answer
235 views

Certain SSL Websites not loading in Chrome, Safari, Curl

I'm trying to open bisonbrew.com but am getting ERR_CONNECTION_RESET with Chrome, and with Safari: 'Safari can't open the page "https://bisonbrew.com" because Safari can't establish a ...
user avatar
  • 123
6 votes
2 answers
2k views

iOS: Safari "could not establish a secure connection to the server"

When I try to access our dev sites, I get this error on my iPhone X running the latest general release of iOS 15. Now 15.1. Safari cannot open the page because it could not establish a secure ...
user avatar
  • 110
1 vote
0 answers
34 views

Google Chrome "Privacy error" for a few select sites

Today I started seeing the "Privacy error" in Chrome for a few select pages, like apple.stackexchange.com and macworld.com. Not all sites, just a few. The error message looks like this: My ...
user avatar
2 votes
1 answer
1k views

Beware: macOS Finder "Connect to Server" accepts FTPS URLs (FTP in a SSL/TLS tunnel) but actually connects via plain FTP!

Reproduction macOS 11 Big Sur Finder > Main Menu > Go > Connect to server… (⌘-K) Field allows ftps:// scheme. That is FTP in a SSL/TLS tunnel: Questions Is Finder actually using FTPS? If ...
user avatar
  • 498
0 votes
0 answers
111 views

Intermittent SSL errors: net::ERR_SSL_PROTOCOL_ERROR 200 (OK)

Every now and then I have an issue where a browser shows errors with resources over https. The errors occur across all browsers: Chrome, FF, Safari. It happens at least once a week. I observed that ...
user avatar
0 votes
1 answer
1k views

Big Sur Add trusted certificate via command line (Safari Can't establish a secure connection)

I am trying to have Safari stop preventing me from visiting one of my dev machines with an invalid cert. I am trying to use the solution in this thread but install it using the CLI: security add-...
user avatar
1 vote
0 answers
244 views

When and how can I use client certificate authentication on iOS?

I have installed a x509/pfx certificate under profiles in my iOS settings and configured my webserver (nginx) to require this certificate. With Safari on iOS, I can browse to my main page using the ...
user avatar
2 votes
2 answers
4k views

iPhone and iPad says IMAP server is not responding after password change, but works on other devices

I’m having a bit of a brain-scratcher with my parents’ phones and iPads. My stepmum received a notification that an attempt by someone to log in to her Google account (with the right password) had ...
user avatar
2 votes
1 answer
445 views

Can a self-signed certificate use an IP address for an entry in Subject Alternative Name?

From https://support.apple.com/en-us/HT210176 TLS server certificates must present the DNS name of the server in the Subject Alternative Name extension of the certificate. DNS names in the CommonName ...
user avatar
14 votes
3 answers
11k views

Homebrew Cask download failure. SSL certificate problem: certificate has expired

I am trying to install NetLogo via Homebrew Cask. I run the following command: brew cask install netlogo Homebrew starts the download but immediately throws the following error: ==> Downloading ...
user avatar
  • 45.1k
3 votes
2 answers
2k views

Bypass for the certificate must be valid for 825 days or fewer

Is there a way to workaround issue with certs valid for long time (10 years)? I work in a corporation where Macs are not common and we have some internal long live certificates. I know I can add ...
user avatar
2 votes
0 answers
438 views

Using LibreSSL 3.1.1 without messing with the system

I did a brew install of OpenSSL/LibreSSL (3.1.1)... it's located in /usr/local/opt/libressl/bin/openssl I also have the usual macOS Catalina OpenSSL/LibreSSL bin at: /usr/bin/openssl I don't ...
user avatar
  • 1,324
0 votes
0 answers
176 views

How can I fix my offlineimap Certificate error on a homebrew install

OfflineIMAP 7.3.3 Licensed under the GNU GPL v2 or any later version (with an OpenSSL exception) imaplib2 v2.101 (bundled), Python v2.7.17, OpenSSL 1.1.1g 21 Apr 2020 *** Processing account charles ...
user avatar
1 vote
1 answer
206 views

How to fix ERR_SSL_PROTOCOL_ERROR for only one specific site

Working on a site for a client, and for some reason I keep getting the "can't provide a secure connection" error in ALL browsers. Everyone outside me seems to see it fine. If I log in to my work ...
user avatar
  • 111
2 votes
0 answers
644 views

"Safari can't establish a secure connection" and OmniFocus sync is broken

Symptoms macOS 10.14.6, Safari 13.1, all updates applied. Safari refuses to connect to some websites. Safari Can't Open the Page [...] because Safari can't establish a secure connection to the ...
user avatar
1 vote
1 answer
88 views

Creating SHA-2 certificate using keychain assistant

I am trying to enable https on my localhost (for testing). Using Keychain Assistant, I have created both a self-signed CA and a certificate issued by that same CA. I have enabled trust on the CA in ...
user avatar
1 vote
4 answers
758 views

Does Homebrew install use SSL/TLS?

I recently installed Homebrew on my Mac using the UNIX command from the Homebrew homepage /usr/bin/ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)" When ...
user avatar
  • 141
1 vote
2 answers
2k views

web request failures in curl

I have a macbook pro running Catalina 10.15.1. However this issue has been present since at least Mojave. After a reboot it runs fine for a while (up to about an hour but I haven't measured) and then ...
user avatar
5 votes
2 answers
3k views

Catalina Trusted Root CA certificates are revoked - Chrome

I have a trusted self-signed root CA named CA and I use that to sign a certificate for my local website, before I install CA's certificate and trust that, chrome shows me an error about the site SSL ...
user avatar
9 votes
3 answers
31k views

Why does iOS 13 not trust my own Root CA?

No matter what I do, I can't get Safari on the iPhone or iPad to trust a certificate from an internal website. I can look at the certificate and it is shown as "not trusted". I have imported the Root ...
user avatar
1 vote
0 answers
479 views

curl-config --ca returns a blank line, and other cert problems

This is a repost/update of this question on stackoverflow, which didn't get any attention so I'm trying a more specific stackexchange. My problem was originally that Cargo (Rust's dependency manager) ...
user avatar
  • 111
1 vote
0 answers
715 views

Disable TLS 1.0 and TLS 1.1 on Safari

Safari would disable TLS 1.0 and 1.1 next year. I would like to disable TLS 1.0 and 1.1 before that, so I got the benefit right now. I did it to my Firefox, but I use Safari more. Is it possible to do ...
user avatar
1 vote
2 answers
2k views

How do you clear SSL leaf certificates mappings to particular domains

I visit my website using Chrome on macOS Mojave, for example, qa.abc.com, and the SSL leaf certificate is from customer-test.ssl.fastly.net. I recently updated the CNAME record in my DNS for qa.abc....
user avatar
1 vote
0 answers
331 views

Homebrew SSL error (1407742E) on Mountain Lion

I get the following error trying to install Homebrew on Mountain Lion, when following Installing brew on Mac 10.6 results in syntax error localhost:~ user$ cd /usr/local localhost:local user$ mkdir ...
user avatar
0 votes
1 answer
203 views

Are whitespaces a good idea for a rootCA or intermediateCA for a self sign/closed on-prem PKI - with iPads?

Good morning, we've got iPads running with a native App and would next use a safari Homescreen Shortcut for a web based catalog. However, connecting to the F5 LTM, which rotates and terminates the (...
user avatar
  • 13
1 vote
0 answers
535 views

Fixing a Mac unable to fetch software updates? Requests to https://swdist.apple.com/* seem to be failing HTTPS cert validation

I've discovered that my Mac can't fetch software updates because the requests to Apple server's are failing. I think it's something related to HTTPS cert validating or cert pinning. I was tipped off ...
user avatar
  • 453
1 vote
1 answer
429 views

Safari complains about SSL certificate on redirect page

I have gotten reports from people navigating to our site without entering the www. part of the URL that our SSL certificate does not match and so generates a warning. This is technically correct I ...
user avatar
  • 111
2 votes
1 answer
107 views

"Client Authentication" certificate for iPhone for school Wi-Fi

My school Wi-Fi, which requires that I log in using my username and password, requires that I accept this certificate (which I think might be a trusted root certificate?) in order to connect: What ...
user avatar
2 votes
2 answers
2k views

Error downloading YouTube video using youtube-dl

When downloading a YouTube video using youtube-dl, I get the following error: MacBook-Pro:ytd user$ youtube-dl "https://youtu.be/dgxpBpa9A48" [youtube] dgxpBpa9A48: Downloading webpage ERROR: ...
user avatar
1 vote
0 answers
73 views

Security Certificates disappearing from trust store

Publicly signed fully valid .CRT file, signed by root CA and not expired, disappears from the System Keychain. Seems to affect all sorts of Mac computers in my environment including new and fully ...
user avatar
  • 11
1 vote
2 answers
5k views

How does Safari (on iOS) decide when to present an SSL client certificate

I've installed a SSL client certificate into the version of Safari that comes with iOS 11.4.1. It apparently allows me to access a protected site as expected. Are there any specific privacy issues ...
user avatar
  • 1,141
9 votes
3 answers
12k views

How "official" is libressl support in High Sierra?

I am trying to port an OpenSSL-based C program from Linux to macOS, and I would like to use a library for TLS which is officially supported by the OS, because then the OS keeps that library up-to-date ...
user avatar
  • 193
7 votes
2 answers
5k views

Updating SSL root certs on old Mac (running Lion)

My father-in-law reported an "Invalid SSL certificate" suddenly started appearing on his online banking website. After verifying it's not a website issue (it loads correctly on other computers), I ...
user avatar
  • 171
3 votes
0 answers
607 views

Reset Safari SSL Exceptions on iOS 11

On iOS if you visit a website with an invalid SSL certificate, you are presented with this prompt (ok, it’s in italian but you get the picture): Tapping “show details” allows the user to proceed to ...
user avatar
  • 328
4 votes
1 answer
10k views

How to view certificates from my keychain on iOS?

On macOS the keychain allows me to view all certificates and if I want manually revoke trust to a certificate. I was wondering how I could do something similar on my iPhone as my school forces me to ...
user avatar
1 vote
2 answers
9k views

How to remove SSL exception Safari

I don't have enough rep to comment on this question which would probably be more appropriate than asking a new question: How do you remove SSL certificate exceptions on OS X? I just tried this on OSX ...
user avatar
0 votes
1 answer
491 views

SSL Client authentication with non-exportable certificates in Mac

We use our organization's provided SSO certificate for SSL client authentication from our Java based desktop clients (Mac and Windows). It seems in Mac, the certificate is marked with non-exportable ...
user avatar
  • 101
0 votes
1 answer
322 views

Does iOS 8 support AES in GCM mode to encrypt data in TLS/SSL?

While sending data over SSL/TLS in iOS 8 iPhone, is it possible to encrypt data using AES in GCM mode?
user avatar
3 votes
2 answers
3k views

How to find out which cipher suites an iOS application uses?

I'm trying to find out which cipher suites and SSL/TLS protocol an app uses. In the privacy policy it is written that it uses SSLv3 but when I tested the server of the app's developer using an SSL ...
user avatar
3 votes
3 answers
12k views

tlsv1 alert protocol version when connecting via SSL to OS X Server

How can I re-enable TLS 1.1 and 1.0 on server 5.3 with macOS 10.12.4 in the short term while I evaluate all the clients that aren't ready for TLS 1.2? If you jump to the bottom, attempts to change ...
user avatar
  • 1,534
0 votes
1 answer
2k views

Safari incorrectly demands to select an SSL client certificate

Several websites suddenly recently have popped up the dialog sheet in Safari requesting me to select an SSL client certificate. None of these sites (one example is forums.macrumors.com) actually use ...
user avatar
  • 25
0 votes
2 answers
3k views

Chrome on macOS suddenly rejects self signed certificates

I have been happily using self signed certificates for locally hosted sites running on apache2 for a couple of years. Today one of those certificates expired - no biggie, I recreated it and replaced ...
user avatar
2 votes
2 answers
6k views

Can't load a specific webpage using Chrome or Safari while logged in, but they work on other account and Firefox also works

I'm trying to access The Guardian's website, and I get errors with both Safari and Chrome. In Safari: Safari Can't Open the Page Safari can't open the page "https://www.theguardian.com" ...
user avatar