Questions tagged [ssl]

Secure Sockets Layer (SSL) is a cryptographic protocol designed to provide communications security over a computer network. This tag should be use when dealing with SSL certificate involving macOS or iOS

Filter by
Sorted by
Tagged with
0
votes
0answers
21 views

Intermittent SSL errors: net::ERR_SSL_PROTOCOL_ERROR 200 (OK)

Every now and then I have an issue where a browser shows errors with resources over https. The errors occur across all browsers: Chrome, FF, Safari. It happens at least once a week. I observed that ...
0
votes
1answer
192 views

Big Sur Add trusted certificate via command line (Safari Can't establish a secure connection)

I am trying to have Safari stop preventing me from visiting one of my dev machines with an invalid cert. I am trying to use the solution in this thread but install it using the CLI: security add-...
0
votes
0answers
12 views

Web is not accessible in Safari

I did set up a Let's encrypt SSL certificate on the domain ginnapedros.es more than 3 days ago, via cPanel. But in the Safari browser on iPhone the domain is not accessible. I am using .htaccess to ...
1
vote
0answers
104 views

When and how can I use client certificate authentication on iOS?

I have installed a x509/pfx certificate under profiles in my iOS settings and configured my webserver (nginx) to require this certificate. With Safari on iOS, I can browse to my main page using the ...
0
votes
0answers
70 views

How to configure SSL with Apache in macOS Catalina [duplicate]

I'm trying to complete my local installation and add SSL by following the example at: https://www.codexpedia.com/apache-server/configure-apache-ssl-for-https-on-mac-os/ but when I try to create ...
0
votes
0answers
67 views

Untrusted certificate warning with Safari on IOS 14.2

I am using an internal personal root ca to secure connections on several internal web resources (Synology NAS, UniFi Controller, VCSA, Dell iDRAC Console). I have installed the Root CA Cert as a ...
2
votes
2answers
3k views

iPhone and iPad says IMAP server is not responding after password change, but works on other devices

I’m having a bit of a brain-scratcher with my parents’ phones and iPads. My stepmum received a notification that an attempt by someone to log in to her Google account (with the right password) had ...
2
votes
1answer
363 views

Can a self-signed certificate use an IP address for an entry in Subject Alternative Name?

From https://support.apple.com/en-us/HT210176 TLS server certificates must present the DNS name of the server in the Subject Alternative Name extension of the certificate. DNS names in the CommonName ...
4
votes
2answers
2k views

Homebrew Cask download failure. SSL certificate problem: certificate has expired

I am trying to install NetLogo via Homebrew Cask. I run the following command: brew cask install netlogo Homebrew starts the download but immediately throws the following error: ==> Downloading ...
3
votes
2answers
768 views

Bypass for the certificate must be valid for 825 days or fewer

Is there a way to workaround issue with certs valid for long time (10 years)? I work in a corporation where Macs are not common and we have some internal long live certificates. I know I can add ...
1
vote
0answers
258 views

Using LibreSSL 3.1.1 without messing with the system

I did a brew install of OpenSSL/LibreSSL (3.1.1)... it's located in /usr/local/opt/libressl/bin/openssl I also have the usual macOS Catalina OpenSSL/LibreSSL bin at: /usr/bin/openssl I don't ...
0
votes
0answers
79 views

How can I fix my offlineimap Certificate error on a homebrew install

OfflineIMAP 7.3.3 Licensed under the GNU GPL v2 or any later version (with an OpenSSL exception) imaplib2 v2.101 (bundled), Python v2.7.17, OpenSSL 1.1.1g 21 Apr 2020 *** Processing account charles ...
1
vote
0answers
72 views

How to fix ERR_SSL_PROTOCOL_ERROR for only one specific site

Working on a site for a client, and for some reason I keep getting the "can't provide a secure connection" error in ALL browsers. Everyone outside me seems to see it fine. If I log in to my work ...
2
votes
0answers
496 views

“Safari can't establish a secure connection” and OmniFocus sync is broken

Symptoms macOS 10.14.6, Safari 13.1, all updates applied. Safari refuses to connect to some websites. Safari Can't Open the Page [...] because Safari can't establish a secure connection to the ...
1
vote
1answer
49 views

Creating SHA-2 certificate using keychain assistant

I am trying to enable https on my localhost (for testing). Using Keychain Assistant, I have created both a self-signed CA and a certificate issued by that same CA. I have enabled trust on the CA in ...
1
vote
4answers
331 views

Does Homebrew install use SSL/TLS?

I recently installed Homebrew on my Mac using the UNIX command from the Homebrew homepage /usr/bin/ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)" When ...
1
vote
2answers
1k views

web request failures in curl

I have a macbook pro running Catalina 10.15.1. However this issue has been present since at least Mojave. After a reboot it runs fine for a while (up to about an hour but I haven't measured) and then ...
4
votes
2answers
2k views

Catalina Trusted Root CA certificates are revoked - Chrome

I have a trusted self-signed root CA named CA and I use that to sign a certificate for my local website, before I install CA's certificate and trust that, chrome shows me an error about the site SSL ...
7
votes
3answers
25k views

Why does iOS 13 not trust my own Root CA?

No matter what I do, I can't get Safari on the iPhone or iPad to trust a certificate from an internal website. I can look at the certificate and it is shown as "not trusted". I have imported the Root ...
1
vote
0answers
323 views

curl-config --ca returns a blank line, and other cert problems

This is a repost/update of this question on stackoverflow, which didn't get any attention so I'm trying a more specific stackexchange. My problem was originally that Cargo (Rust's dependency manager) ...
1
vote
0answers
625 views

Disable TLS 1.0 and TLS 1.1 on Safari

Safari would disable TLS 1.0 and 1.1 next year. I would like to disable TLS 1.0 and 1.1 before that, so I got the benefit right now. I did it to my Firefox, but I use Safari more. Is it possible to do ...
1
vote
2answers
760 views

How do you clear SSL leaf certificates mappings to particular domains

I visit my website using Chrome on macOS Mojave, for example, qa.abc.com, and the SSL leaf certificate is from customer-test.ssl.fastly.net. I recently updated the CNAME record in my DNS for qa.abc....
1
vote
0answers
212 views

Homebrew SSL error (1407742E) on Mountain Lion

I get the following error trying to install Homebrew on Mountain Lion, when following Installing brew on Mac 10.6 results in syntax error localhost:~ user$ cd /usr/local localhost:local user$ mkdir ...
0
votes
1answer
120 views

Are whitespaces a good idea for a rootCA or intermediateCA for a self sign/closed on-prem PKI - with iPads?

Good morning, we've got iPads running with a native App and would next use a safari Homescreen Shortcut for a web based catalog. However, connecting to the F5 LTM, which rotates and terminates the (...
1
vote
0answers
445 views

Fixing a Mac unable to fetch software updates? Requests to https://swdist.apple.com/* seem to be failing HTTPS cert validation

I've discovered that my Mac can't fetch software updates because the requests to Apple server's are failing. I think it's something related to HTTPS cert validating or cert pinning. I was tipped off ...
0
votes
1answer
289 views

Safari complains about SSL certificate on redirect page

I have gotten reports from people navigating to our site without entering the www. part of the URL that our SSL certificate does not match and so generates a warning. This is technically correct I ...
2
votes
1answer
86 views

“Client Authentication” certificate for iPhone for school Wi-Fi

My school Wi-Fi, which requires that I log in using my username and password, requires that I accept this certificate (which I think might be a trusted root certificate?) in order to connect: What ...
2
votes
2answers
2k views

Error downloading YouTube video using youtube-dl

When downloading a YouTube video using youtube-dl, I get the following error: MacBook-Pro:ytd user$ youtube-dl "https://youtu.be/dgxpBpa9A48" [youtube] dgxpBpa9A48: Downloading webpage ERROR: ...
1
vote
0answers
51 views

Security Certificates disappearing from trust store

Publicly signed fully valid .CRT file, signed by root CA and not expired, disappears from the System Keychain. Seems to affect all sorts of Mac computers in my environment including new and fully ...
0
votes
2answers
4k views

How does Safari (on iOS) decide when to present an SSL client certificate

I've installed a SSL client certificate into the version of Safari that comes with iOS 11.4.1. It apparently allows me to access a protected site as expected. Are there any specific privacy issues ...
7
votes
3answers
11k views

How “official” is libressl support in High Sierra?

I am trying to port an OpenSSL-based C program from Linux to macOS, and I would like to use a library for TLS which is officially supported by the OS, because then the OS keeps that library up-to-date ...
6
votes
2answers
4k views

Updating SSL root certs on old Mac (running Lion)

My father-in-law reported an "Invalid SSL certificate" suddenly started appearing on his online banking website. After verifying it's not a website issue (it loads correctly on other computers), I ...
3
votes
0answers
591 views

Reset Safari SSL Exceptions on iOS 11

On iOS if you visit a website with an invalid SSL certificate, you are presented with this prompt (ok, it’s in italian but you get the picture): Tapping “show details” allows the user to proceed to ...
4
votes
1answer
8k views

How to view certificates from my keychain on iOS?

On macOS the keychain allows me to view all certificates and if I want manually revoke trust to a certificate. I was wondering how I could do something similar on my iPhone as my school forces me to ...
1
vote
1answer
8k views

How to remove SSL exception Safari

I don't have enough rep to comment on this question which would probably be more appropriate than asking a new question: How do you remove SSL certificate exceptions on OS X? I just tried this on OSX ...
0
votes
1answer
437 views

SSL Client authentication with non-exportable certificates in Mac

We use our organization's provided SSO certificate for SSL client authentication from our Java based desktop clients (Mac and Windows). It seems in Mac, the certificate is marked with non-exportable ...
0
votes
1answer
316 views

Does iOS 8 support AES in GCM mode to encrypt data in TLS/SSL?

While sending data over SSL/TLS in iOS 8 iPhone, is it possible to encrypt data using AES in GCM mode?
3
votes
2answers
2k views

How to find out which cipher suites an iOS application uses?

I'm trying to find out which cipher suites and SSL/TLS protocol an app uses. In the privacy policy it is written that it uses SSLv3 but when I tested the server of the app's developer using an SSL ...
3
votes
3answers
11k views

tlsv1 alert protocol version when connecting via SSL to OS X Server

How can I re-enable TLS 1.1 and 1.0 on server 5.3 with macOS 10.12.4 in the short term while I evaluate all the clients that aren't ready for TLS 1.2? If you jump to the bottom, attempts to change ...
0
votes
1answer
2k views

Safari incorrectly demands to select an SSL client certificate

Several websites suddenly recently have popped up the dialog sheet in Safari requesting me to select an SSL client certificate. None of these sites (one example is forums.macrumors.com) actually use ...
0
votes
2answers
3k views

Chrome on macOS suddenly rejects self signed certificates

I have been happily using self signed certificates for locally hosted sites running on apache2 for a couple of years. Today one of those certificates expired - no biggie, I recreated it and replaced ...
2
votes
2answers
6k views

Can't load a specific webpage using Chrome or Safari while logged in, but they work on other account and Firefox also works

I'm trying to access The Guardian's website, and I get errors with both Safari and Chrome. In Safari: Safari Can't Open the Page Safari can't open the page "https://www.theguardian.com" ...
0
votes
1answer
98 views

“err_certificate_invalid” for only one host, on only one device, but in all browsers

Currently, when I try to access www.comic-rocket.com on my iPad (iOS 10.2), the site will not load. Safari simply won't load the page, as if I hadn't even tried to do so. Chrome and Dolphin will ...
1
vote
2answers
4k views

iOS - how to get mail app to recognize and trust custom or self-signed SSL certificates from a profile?

Running iOS 10.2 I added the root certificates of CAcert to my iPhone profile using various ways: directly from their website in mobile Safari sent by email to mail app by adding a profile with the ...
0
votes
1answer
169 views

Profile Manager not sending email invitations

After installing a new copy of OSX Server I started the Profile Manager and wanted to add some users and enroll them for the VPP Managed Distribution (I am already registered for VPP). In the VPP ...
1
vote
0answers
847 views

How to verify in bash if a certificate is already imported in the KeyChain?

I want to check, from the command line, if a certificate is already imported in the KeyChain in order to avoid doing a sudo security add-trusted-cert ... if that's not necessarily. I already have ...
1
vote
1answer
2k views

Why does find-certificates have some missing?

I seem to have a certificate in the keychain that is only sometimes output correctly from security find-certificate on the command line: security find-certificate -a -p | openssl x509 -text | grep -i ...
1
vote
1answer
1k views

SSL error with mbsync

I installed isync[1] on my personal Macbook, which runs OSX 10.11. I used the exact same .mbsyncrc file I wrote for my Macbook at work. The setup works fine on my work machine. However when using the ...
1
vote
1answer
120 views

CalDAV only works for first synchronisation, and then stops updateing the calender forever

From the same server I can successfully sync cardDAVs contacts, and IMAPs-mail, so I've ruled out network issues. Furthermore, that same installation also syncs many other users (non-i) -Devices ...
2
votes
2answers
1k views

Start stunnel service on bootup

I have a service ran under homebrew. This service is simply started by running the command sudo stunnel I need this command to run on bootup, so I created a LaunchDaemon but it is not working. Here ...