Skip to main content

Questions tagged [ssl]

Secure Sockets Layer (SSL) is a cryptographic protocol designed to provide communications security over a computer network. This tag should be use when dealing with SSL certificate involving macOS or iOS

Filter by
Sorted by
Tagged with
2 votes
0 answers
36 views

How to install up-to-date SSL certificates on iphone 4/ iOS 7?

My iphone 4 running iOS 7.1.2 and Safari cannot access certain SSL website, e.g. https://letsencrypt.org, presumably because of expired certificates. Installing the profile provided at https://blog....
Axel Boldt's user avatar
1 vote
0 answers
104 views

Is there an SSLKEYLOGFILE equivalent for Safari to capture TLS session keys for debugging?

I'm trying to debug a Safari specific issue, but I can't see the data being passed in the TLS stream from a packet capture because I need the ephemeral keys to decrypt the session. In Chrome or ...
Liczyrzepa's user avatar
1 vote
0 answers
607 views

Adding own certificate authority to macOS

I currently facing the problem that I created a certificate authority certificate and would like to add this custom CA to macOS. The general way would be to add it to the "System" area in my ...
user182351's user avatar
1 vote
1 answer
52 views

High Sierra (10.13.6) npm OSSL PEM routine error

Recently acquired an old MacBook Pro, new to MacOS. I have downloaded & installed node 16.20.1 https://nodejs.org/en/download/releases npm install fails. npm doctor returns: Check ...
Travis's user avatar
  • 11
1 vote
1 answer
426 views

How can I update SSL certificates on macOS Tiger?

I Want to update ssl certificates on my iMac G4, macOS Tiger (10.4.11). I already tried to copy from a newer mac the certificate "Actalis Authentication Root CA", trust in in Keychain Access ...
Paolo's user avatar
  • 97
5 votes
1 answer
1k views

Connecting legacy Mac OS (10.3.9) to modern HTTPS via TLS

I'm using an old iMac G3, running Mac OS 10.3.9 Panther, for research purposes. My concern is not security - I don't put sensitive information on this machine, nor do I mind if the integrity of the ...
Ethan Hill's user avatar
7 votes
0 answers
6k views

MacOS Ventura 13.1: FortiClient SSL-VPN can't connect

Recently I updated my Macbook to the latest macOS (Ventura 13.1). Before the update, I was able to use FortiClient to connect to a VPN. I am trying the same configuration with previous versions of ...
Nicholas's user avatar
  • 171
1 vote
1 answer
100 views

macOS Server: How to remove self-signed root from website SSL cert chain?

macOS 10.13.6, Server.app 5.6.3 I'm using LetsEncrypt SSL certs. After updating a cert with certbot, I use openssl to export a PKCS12 file, then import that to the system keychain using "security&...
JLG's user avatar
  • 140
2 votes
1 answer
1k views

SSL errors everytime I fetch or push from/to Github

I've been having this issue the past few days and I don't know where the issue is coming from. When I try to brew update, or pull anything from git, I get this error: ➜ brew update fatal: unable to ...
Fares's user avatar
  • 131
1 vote
0 answers
441 views

Mac OS configure syslog send logs to remote rsyslog server encrypted (TLS/SSL)

Can MacOS syslog, send logs to remote rsyslog server using TLS/SSL ?
user2410170's user avatar
1 vote
0 answers
381 views

macOS Server: How to make mail server use TLS/SSL

I've set up the Mail component in the Server.app to provide an internal mail server. We used to use this mail server to send mail (via SMTP) without TLS on port 25 which worked well enough. Now I ...
not2savvy's user avatar
  • 1,990
0 votes
1 answer
2k views

MacOS not trusting the Cisco Umbrella Root CA

I've started seeing failing "Cisco Umbrella Secondary SubCA syd-SG" certs in all sorts of places suddenly when browsing. Safari, Firefox, Chrome on my 2 macs are both having this problem for ...
Jty.tan's user avatar
  • 143
1 vote
3 answers
368 views

iCloud not synching, cloudd reporting "TIC SSL Trust Error"

I am running three Macs with macOS 10.13.6. All are in the same LAN, all are set up to connect to iCloud with the same account. On one Mac, iCloud works fully (with all services). On the other two, I ...
Thomas Tempelmann's user avatar
0 votes
2 answers
5k views

Many sites are displaying SSL Certificate invalid but their date is in the future and the computer's clock is fine

I reinstalled an old 2015 Apple computer today, and I ran into a few issues. During system install, it failed because of some SSL issues, and I had to change the system's clock to prior 2017 for the ...
Vadorequest's user avatar
1 vote
0 answers
254 views

Export x509 Certificate from iPad

Question: Is there a way to export a public certificate from an iPad running the latest iOS? (PEM formatted Base64 if possible) Scenario: AirWatch manages our iPads. There is a profile configured to ...
Signal15's user avatar
  • 111
4 votes
0 answers
3k views

Mysql SSL unsupported protocol error

Since a couple days I cannot connect to several mysql instances when using SSL. I am quite sure it's a problem on my machine, since colleagues and production servers don't have this issue. In both my ...
arno_v's user avatar
  • 141
3 votes
1 answer
1k views

Make Safari on macOS reject insecure connections again

Summary: I had opened an insecure website in Safari on macOS, which is now displayed with the "Not Secure" warning in the address field. I would like to “reset“ Safari so that this (and ...
Martin R's user avatar
  • 1,027
1 vote
0 answers
4k views

UNSAFE_LEGACY_RENEGOTIATION_DISABLED on Mac OSX

I am running some python code that uses a library (urlib3) to access an API for some data. However, when the API endpoint is accessed, I get an SSL error of UNSAFE_LEGACY_RENEGOTIATION_DISABLED. The ...
Unknown Coder's user avatar
0 votes
0 answers
748 views

How to Update OpenSSL on Mac OS 10.15.7

We are running on Mac OS 10.15.7 and we have been told by some APIs that our TLS is not up to date. When I run: openssl version I get: LibreSSL 2.8.3 When I run: which openssl I get: /usr/bin/openssl ...
RandySK's user avatar
  • 31
2 votes
1 answer
498 views

How can I programmatically test if the ISRG Root X1 certificate is present and trusted in Keychain Access?

On September 30, 2021, the DST Root CA X3 expired, and left macOS 10.11 and older unable to connect to any HTTPS servers which use Let's Encrypt by default. One easy way to fix this is to manually add ...
Wowfunhappy's user avatar
  • 7,486
0 votes
1 answer
557 views

Certain SSL Websites not loading in Chrome, Safari, Curl

I'm trying to open bisonbrew.com but am getting ERR_CONNECTION_RESET with Chrome, and with Safari: 'Safari can't open the page "https://bisonbrew.com" because Safari can't establish a ...
fthinker's user avatar
  • 123
7 votes
3 answers
5k views

iOS: Safari "could not establish a secure connection to the server"

When I try to access our dev sites, I get this error on my iPhone X running the latest general release of iOS 15. Now 15.1. Safari cannot open the page because it could not establish a secure ...
tvanc's user avatar
  • 120
1 vote
0 answers
154 views

Google Chrome "Privacy error" for a few select sites

Today I started seeing the "Privacy error" in Chrome for a few select pages, like apple.stackexchange.com and macworld.com. Not all sites, just a few. The error message looks like this: My ...
Alex Ixeras's user avatar
  • 1,386
3 votes
1 answer
6k views

Beware: macOS Finder "Connect to Server" accepts FTPS URLs (FTP in a SSL/TLS tunnel) but actually connects via plain FTP!

Reproduction macOS 11 Big Sur Finder > Main Menu > Go > Connect to server… (⌘-K) Field allows ftps:// scheme. That is FTP in a SSL/TLS tunnel: Questions Is Finder actually using FTPS? If ...
porg's user avatar
  • 978
2 votes
1 answer
3k views

Big Sur Add trusted certificate via command line (Safari Can't establish a secure connection)

I am trying to have Safari stop preventing me from visiting one of my dev machines with an invalid cert. I am trying to use the solution in this thread but install it using the CLI: security add-...
AnotherCourier's user avatar
2 votes
0 answers
667 views

When and how can I use client certificate authentication on iOS?

I have installed a x509/pfx certificate under profiles in my iOS settings and configured my webserver (nginx) to require this certificate. With Safari on iOS, I can browse to my main page using the ...
Stonecraft's user avatar
2 votes
2 answers
5k views

iPhone and iPad says IMAP server is not responding after password change, but works on other devices

I’m having a bit of a brain-scratcher with my parents’ phones and iPads. My stepmum received a notification that an attempt by someone to log in to her Google account (with the right password) had ...
Janus Bahs Jacquet's user avatar
2 votes
1 answer
982 views

Can a self-signed certificate use an IP address for an entry in Subject Alternative Name?

From https://support.apple.com/en-us/HT210176 TLS server certificates must present the DNS name of the server in the Subject Alternative Name extension of the certificate. DNS names in the CommonName ...
Jim W's user avatar
  • 123
18 votes
3 answers
24k views

Homebrew Cask download failure. SSL certificate problem: certificate has expired

I am trying to install NetLogo via Homebrew Cask. I run the following command: brew cask install netlogo Homebrew starts the download but immediately throws the following error: ==> Downloading ...
Nimesh Neema's user avatar
  • 52.4k
4 votes
2 answers
4k views

Bypass for the certificate must be valid for 825 days or fewer

Is there a way to workaround issue with certs valid for long time (10 years)? I work in a corporation where Macs are not common and we have some internal long live certificates. I know I can add ...
Michał Gąsior's user avatar
2 votes
0 answers
727 views

Using LibreSSL 3.1.1 without messing with the system

I did a brew install of OpenSSL/LibreSSL (3.1.1)... it's located in /usr/local/opt/libressl/bin/openssl I also have the usual macOS Catalina OpenSSL/LibreSSL bin at: /usr/bin/openssl I don't ...
Woodstock's user avatar
  • 1,326
0 votes
0 answers
315 views

How can I fix my offlineimap Certificate error on a homebrew install

OfflineIMAP 7.3.3 Licensed under the GNU GPL v2 or any later version (with an OpenSSL exception) imaplib2 v2.101 (bundled), Python v2.7.17, OpenSSL 1.1.1g 21 Apr 2020 *** Processing account charles ...
Charles Spencer's user avatar
2 votes
1 answer
2k views

How to fix ERR_SSL_PROTOCOL_ERROR for only one specific site

Working on a site for a client, and for some reason I keep getting the "can't provide a secure connection" error in ALL browsers. Everyone outside me seems to see it fine. If I log in to my work ...
MajorTom's user avatar
  • 121
3 votes
0 answers
864 views

"Safari can't establish a secure connection" and OmniFocus sync is broken

Symptoms macOS 10.14.6, Safari 13.1, all updates applied. Safari refuses to connect to some websites. Safari Can't Open the Page [...] because Safari can't establish a secure connection to the ...
John Noble's user avatar
1 vote
1 answer
187 views

Creating SHA-2 certificate using keychain assistant

I am trying to enable https on my localhost (for testing). Using Keychain Assistant, I have created both a self-signed CA and a certificate issued by that same CA. I have enabled trust on the CA in ...
MikeMayer67's user avatar
1 vote
4 answers
2k views

Does Homebrew install use SSL/TLS?

I recently installed Homebrew on my Mac using the UNIX command from the Homebrew homepage /usr/bin/ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)" When ...
Ben Zelnick's user avatar
2 votes
2 answers
4k views

web request failures in curl

I have a macbook pro running Catalina 10.15.1. However this issue has been present since at least Mojave. After a reboot it runs fine for a while (up to about an hour but I haven't measured) and then ...
Ian Newson's user avatar
5 votes
2 answers
3k views

Catalina Trusted Root CA certificates are revoked - Chrome

I have a trusted self-signed root CA named CA and I use that to sign a certificate for my local website, before I install CA's certificate and trust that, chrome shows me an error about the site SSL ...
M.A. Heshmat Khah's user avatar
15 votes
3 answers
39k views

Why does iOS 13 not trust my own Root CA?

No matter what I do, I can't get Safari on the iPhone or iPad to trust a certificate from an internal website. I can look at the certificate and it is shown as "not trusted". I have imported the Root ...
user avatar
1 vote
0 answers
710 views

curl-config --ca returns a blank line, and other cert problems

This is a repost/update of this question on stackoverflow, which didn't get any attention so I'm trying a more specific stackexchange. My problem was originally that Cargo (Rust's dependency manager) ...
William's user avatar
  • 111
1 vote
0 answers
908 views

Disable TLS 1.0 and TLS 1.1 on Safari

Safari would disable TLS 1.0 and 1.1 next year. I would like to disable TLS 1.0 and 1.1 before that, so I got the benefit right now. I did it to my Firefox, but I use Safari more. Is it possible to do ...
Franklin Yu's user avatar
1 vote
2 answers
4k views

How do you clear SSL leaf certificates mappings to particular domains

I visit my website using Chrome on macOS Mojave, for example, qa.abc.com, and the SSL leaf certificate is from customer-test.ssl.fastly.net. I recently updated the CNAME record in my DNS for qa.abc....
Bao Thien Ngo's user avatar
0 votes
1 answer
275 views

Are whitespaces a good idea for a rootCA or intermediateCA for a self sign/closed on-prem PKI - with iPads?

Good morning, we've got iPads running with a native App and would next use a safari Homescreen Shortcut for a web based catalog. However, connecting to the F5 LTM, which rotates and terminates the (...
fiejen's user avatar
  • 13
1 vote
0 answers
592 views

Fixing a Mac unable to fetch software updates? Requests to https://swdist.apple.com/* seem to be failing HTTPS cert validation

I've discovered that my Mac can't fetch software updates because the requests to Apple server's are failing. I think it's something related to HTTPS cert validating or cert pinning. I was tipped off ...
Chris's user avatar
  • 670
1 vote
1 answer
834 views

Safari complains about SSL certificate on redirect page

I have gotten reports from people navigating to our site without entering the www. part of the URL that our SSL certificate does not match and so generates a warning. This is technically correct I ...
Dennis's user avatar
  • 111
2 votes
1 answer
387 views

"Client Authentication" certificate for iPhone for school Wi-Fi

My school Wi-Fi, which requires that I log in using my username and password, requires that I accept this certificate (which I think might be a trusted root certificate?) in order to connect: What ...
Ikekweku's user avatar
2 votes
2 answers
3k views

Error downloading YouTube video using youtube-dl

When downloading a YouTube video using youtube-dl, I get the following error: MacBook-Pro:ytd user$ youtube-dl "https://youtu.be/dgxpBpa9A48" [youtube] dgxpBpa9A48: Downloading webpage ERROR: ...
askeladd's user avatar
1 vote
0 answers
176 views

Security Certificates disappearing from trust store

Publicly signed fully valid .CRT file, signed by root CA and not expired, disappears from the System Keychain. Seems to affect all sorts of Mac computers in my environment including new and fully ...
Ryan's user avatar
  • 11
1 vote
2 answers
6k views

How does Safari (on iOS) decide when to present an SSL client certificate

I've installed a SSL client certificate into the version of Safari that comes with iOS 11.4.1. It apparently allows me to access a protected site as expected. Are there any specific privacy issues ...
Drux's user avatar
  • 1,371
10 votes
3 answers
13k views

How "official" is libressl support in High Sierra?

I am trying to port an OpenSSL-based C program from Linux to macOS, and I would like to use a library for TLS which is officially supported by the OS, because then the OS keeps that library up-to-date ...
rexroni's user avatar
  • 203