Questions tagged [ssl]
Secure Sockets Layer (SSL) is a cryptographic protocol designed to provide communications security over a computer network. This tag should be use when dealing with SSL certificate involving macOS or iOS
138
questions
1
vote
1
answer
35
views
High Sierra (10.13.6) npm OSSL PEM routine error
Recently acquired an old MacBook Pro, new to MacOS.
I have downloaded & installed node 16.20.1
https://nodejs.org/en/download/releases
npm install fails.
npm doctor returns:
Check ...
- 11
1
vote
1
answer
172
views
How can I update SSL certificates on macOS Tiger?
I Want to update ssl certificates on my iMac G4, macOS Tiger (10.4.11).
I already tried to copy from a newer mac the certificate "Actalis Authentication Root CA", trust in in Keychain Access ...
- 97
5
votes
1
answer
911
views
Connecting legacy Mac OS (10.3.9) to modern HTTPS via TLS
I'm using an old iMac G3, running Mac OS 10.3.9 Panther, for research purposes. My concern is not security - I don't put sensitive information on this machine, nor do I mind if the integrity of the ...
- 153
7
votes
0
answers
5k
views
MacOS Ventura 13.1: FortiClient SSL-VPN can't connect
Recently I updated my Macbook to the latest macOS (Ventura 13.1). Before the update, I was able to use FortiClient to connect to a VPN. I am trying the same configuration with previous versions of ...
- 171
1
vote
1
answer
74
views
macOS Server: How to remove self-signed root from website SSL cert chain?
macOS 10.13.6, Server.app 5.6.3
I'm using LetsEncrypt SSL certs. After updating a cert with certbot, I use openssl to export a PKCS12 file, then import that to the system keychain using "security&...
- 140
0
votes
0
answers
59
views
Removing CA cert
Some time ago I installed Anaconda, which appears to have installed a CA cert in my system. I found out it had done so because today some websites started to fail loading. At first I thought it might ...
- 101
2
votes
1
answer
859
views
SSL errors everytime I fetch or push from/to Github
I've been having this issue the past few days and I don't know where the issue is coming from.
When I try to brew update, or pull anything from git, I get this error:
➜ brew update
fatal: unable to ...
- 131
1
vote
0
answers
324
views
Mac OS configure syslog send logs to remote rsyslog server encrypted (TLS/SSL)
Can MacOS syslog, send logs to remote rsyslog server using TLS/SSL ?
- 11
1
vote
0
answers
240
views
macOS Server: How to make mail server use TLS/SSL
I've set up the Mail component in the Server.app to provide an internal mail server. We used to use this mail server to send mail (via SMTP) without TLS on port 25 which worked well enough.
Now I ...
- 1,891
0
votes
1
answer
2k
views
MacOS not trusting the Cisco Umbrella Root CA
I've started seeing failing "Cisco Umbrella Secondary SubCA syd-SG" certs in all sorts of places suddenly when browsing. Safari, Firefox, Chrome on my 2 macs are both having this problem for ...
- 143
1
vote
3
answers
277
views
iCloud not synching, cloudd reporting "TIC SSL Trust Error"
I am running three Macs with macOS 10.13.6. All are in the same LAN, all are set up to connect to iCloud with the same account.
On one Mac, iCloud works fully (with all services).
On the other two, I ...
- 1,792
0
votes
2
answers
2k
views
Many sites are displaying SSL Certificate invalid but their date is in the future and the computer's clock is fine
I reinstalled an old 2015 Apple computer today, and I ran into a few issues.
During system install, it failed because of some SSL issues, and I had to change the system's clock to prior 2017 for the ...
- 139
1
vote
0
answers
182
views
Export x509 Certificate from iPad
Question: Is there a way to export a public certificate from an iPad running the latest iOS? (PEM formatted Base64 if possible)
Scenario:
AirWatch manages our iPads.
There is a profile configured to ...
- 111
4
votes
0
answers
3k
views
Mysql SSL unsupported protocol error
Since a couple days I cannot connect to several mysql instances when using SSL. I am quite sure it's a problem on my machine, since colleagues and production servers don't have this issue. In both my ...
- 141
3
votes
1
answer
727
views
Make Safari on macOS reject insecure connections again
Summary:
I had opened an insecure website in Safari on macOS, which is now displayed with the "Not Secure" warning in the address field. I would like to “reset“ Safari so that this (and ...
- 943
1
vote
0
answers
4k
views
UNSAFE_LEGACY_RENEGOTIATION_DISABLED on Mac OSX
I am running some python code that uses a library (urlib3) to access an API for some data. However, when the API endpoint is accessed, I get an SSL error of UNSAFE_LEGACY_RENEGOTIATION_DISABLED. The ...
- 123
0
votes
0
answers
355
views
How to Update OpenSSL on Mac OS 10.15.7
We are running on Mac OS 10.15.7 and we have been told by some APIs that our TLS is not up to date.
When I run: openssl version
I get: LibreSSL 2.8.3
When I run: which openssl
I get: /usr/bin/openssl
...
- 31
2
votes
1
answer
411
views
How can I programmatically test if the ISRG Root X1 certificate is present and trusted in Keychain Access?
On September 30, 2021, the DST Root CA X3 expired, and left macOS 10.11 and older unable to connect to any HTTPS servers which use Let's Encrypt by default. One easy way to fix this is to manually add ...
- 7,243
0
votes
1
answer
527
views
Certain SSL Websites not loading in Chrome, Safari, Curl
I'm trying to open bisonbrew.com but am getting ERR_CONNECTION_RESET with Chrome, and with Safari:
'Safari can't open the page "https://bisonbrew.com" because Safari can't establish a ...
- 123
7
votes
3
answers
4k
views
iOS: Safari "could not establish a secure connection to the server"
When I try to access our dev sites, I get this error on my iPhone X running the latest general release of iOS 15. Now 15.1.
Safari cannot open the page because it could not establish a secure ...
- 120
1
vote
0
answers
147
views
Google Chrome "Privacy error" for a few select sites
Today I started seeing the "Privacy error" in Chrome for a few select pages, like apple.stackexchange.com and macworld.com. Not all sites, just a few. The error message looks like this:
My ...
- 1,516
3
votes
1
answer
4k
views
Beware: macOS Finder "Connect to Server" accepts FTPS URLs (FTP in a SSL/TLS tunnel) but actually connects via plain FTP!
Reproduction
macOS 11 Big Sur
Finder > Main Menu > Go > Connect to server… (⌘-K)
Field allows ftps:// scheme. That is FTP in a SSL/TLS tunnel:
Questions
Is Finder actually using FTPS?
If ...
- 798
2
votes
1
answer
2k
views
Big Sur Add trusted certificate via command line (Safari Can't establish a secure connection)
I am trying to have Safari stop preventing me from visiting one of my dev machines with an invalid cert.
I am trying to use the solution in this thread but install it using the CLI:
security add-...
2
votes
0
answers
504
views
When and how can I use client certificate authentication on iOS?
I have installed a x509/pfx certificate under profiles in my iOS settings and configured my webserver (nginx) to require this certificate. With Safari on iOS, I can browse to my main page using the ...
- 121
2
votes
2
answers
5k
views
iPhone and iPad says IMAP server is not responding after password change, but works on other devices
I’m having a bit of a brain-scratcher with my parents’ phones and iPads. My stepmum received a notification that an attempt by someone to log in to her Google account (with the right password) had ...
2
votes
1
answer
803
views
Can a self-signed certificate use an IP address for an entry in Subject Alternative Name?
From https://support.apple.com/en-us/HT210176
TLS server certificates must present the DNS name of the server in the Subject Alternative Name extension of the certificate. DNS names in the CommonName ...
- 123
17
votes
3
answers
21k
views
Homebrew Cask download failure. SSL certificate problem: certificate has expired
I am trying to install NetLogo via Homebrew Cask. I run the following command:
brew cask install netlogo
Homebrew starts the download but immediately throws the following error:
==> Downloading ...
- 50.7k
4
votes
2
answers
4k
views
Bypass for the certificate must be valid for 825 days or fewer
Is there a way to workaround issue with certs valid for long time (10 years)?
I work in a corporation where Macs are not common and we have some internal long live certificates.
I know I can add ...
2
votes
0
answers
654
views
Using LibreSSL 3.1.1 without messing with the system
I did a brew install of OpenSSL/LibreSSL (3.1.1)...
it's located in
/usr/local/opt/libressl/bin/openssl
I also have the usual macOS Catalina OpenSSL/LibreSSL bin at:
/usr/bin/openssl
I don't ...
- 1,316
0
votes
0
answers
291
views
How can I fix my offlineimap Certificate error on a homebrew install
OfflineIMAP 7.3.3
Licensed under the GNU GPL v2 or any later version (with an OpenSSL exception)
imaplib2 v2.101 (bundled), Python v2.7.17, OpenSSL 1.1.1g 21 Apr 2020
*** Processing account charles
...
- 100
1
vote
1
answer
1k
views
How to fix ERR_SSL_PROTOCOL_ERROR for only one specific site
Working on a site for a client, and for some reason I keep getting the "can't provide a secure connection" error in ALL browsers. Everyone outside me seems to see it fine. If I log in to my work ...
- 111
3
votes
0
answers
811
views
"Safari can't establish a secure connection" and OmniFocus sync is broken
Symptoms
macOS 10.14.6, Safari 13.1, all updates applied.
Safari refuses to connect to some websites.
Safari Can't Open the Page [...] because Safari can't establish a secure connection to the ...
- 378
1
vote
1
answer
173
views
Creating SHA-2 certificate using keychain assistant
I am trying to enable https on my localhost (for testing). Using Keychain Assistant, I have created both a self-signed CA and a certificate issued by that same CA. I have enabled trust on the CA in ...
- 121
1
vote
4
answers
1k
views
Does Homebrew install use SSL/TLS?
I recently installed Homebrew on my Mac using the UNIX command from the Homebrew homepage
/usr/bin/ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"
When ...
- 191
2
votes
2
answers
3k
views
web request failures in curl
I have a macbook pro running Catalina 10.15.1. However this issue has been present since at least Mojave.
After a reboot it runs fine for a while (up to about an hour but I haven't measured) and then ...
- 165
5
votes
2
answers
3k
views
Catalina Trusted Root CA certificates are revoked - Chrome
I have a trusted self-signed root CA named CA and I use that to sign a certificate for my local website, before I install CA's certificate and trust that, chrome shows me an error about the site SSL ...
15
votes
3
answers
37k
views
Why does iOS 13 not trust my own Root CA?
No matter what I do, I can't get Safari on the iPhone or iPad to trust a certificate from an internal website. I can look at the certificate and it is shown as "not trusted".
I have imported the Root ...
user89124
1
vote
0
answers
665
views
curl-config --ca returns a blank line, and other cert problems
This is a repost/update of this question on stackoverflow, which didn't get any attention so I'm trying a more specific stackexchange. My problem was originally that Cargo (Rust's dependency manager) ...
- 111
1
vote
0
answers
849
views
Disable TLS 1.0 and TLS 1.1 on Safari
Safari would disable TLS 1.0 and 1.1 next year. I would like to disable TLS 1.0 and 1.1 before that, so I got the benefit right now. I did it to my Firefox, but I use Safari more. Is it possible to do ...
- 573
1
vote
2
answers
4k
views
How do you clear SSL leaf certificates mappings to particular domains
I visit my website using Chrome on macOS Mojave, for example, qa.abc.com, and the SSL leaf certificate is from customer-test.ssl.fastly.net. I recently updated the CNAME record in my DNS for qa.abc....
- 121
0
votes
1
answer
260
views
Are whitespaces a good idea for a rootCA or intermediateCA for a self sign/closed on-prem PKI - with iPads?
Good morning,
we've got iPads running with a native App and would next use a safari Homescreen Shortcut for a web based catalog. However, connecting to the F5 LTM, which rotates and terminates the (...
- 13
1
vote
0
answers
578
views
Fixing a Mac unable to fetch software updates? Requests to https://swdist.apple.com/* seem to be failing HTTPS cert validation
I've discovered that my Mac can't fetch software updates because the requests to Apple server's are failing. I think it's something related to HTTPS cert validating or cert pinning. I was tipped off ...
- 599
1
vote
1
answer
744
views
Safari complains about SSL certificate on redirect page
I have gotten reports from people navigating to our site without entering the www. part of the URL that our SSL certificate does not match and so generates a warning. This is technically correct I ...
- 111
2
votes
1
answer
293
views
"Client Authentication" certificate for iPhone for school Wi-Fi
My school Wi-Fi, which requires that I log in using my username and password, requires that I accept this certificate (which I think might be a trusted root certificate?) in order to connect:
What ...
- 21
2
votes
2
answers
3k
views
Error downloading YouTube video using youtube-dl
When downloading a YouTube video using youtube-dl, I get the following error:
MacBook-Pro:ytd user$ youtube-dl "https://youtu.be/dgxpBpa9A48"
[youtube] dgxpBpa9A48: Downloading webpage
ERROR: ...
- 23
1
vote
0
answers
151
views
Security Certificates disappearing from trust store
Publicly signed fully valid .CRT file, signed by root CA and not expired, disappears from the System Keychain. Seems to affect all sorts of Mac computers in my environment including new and fully ...
- 11
1
vote
2
answers
6k
views
How does Safari (on iOS) decide when to present an SSL client certificate
I've installed a SSL client certificate into the version of Safari that comes with iOS 11.4.1. It apparently allows me to access a protected site as expected.
Are there any specific privacy issues ...
- 1,291
10
votes
3
answers
13k
views
How "official" is libressl support in High Sierra?
I am trying to port an OpenSSL-based C program from Linux to macOS, and I would like to use a library for TLS which is officially supported by the OS, because then the OS keeps that library up-to-date ...
- 203
8
votes
2
answers
7k
views
Updating SSL root certs on old Mac (running Lion)
My father-in-law reported an "Invalid SSL certificate" suddenly started appearing on his online banking website.
After verifying it's not a website issue (it loads correctly on other computers), I ...
- 181
3
votes
0
answers
626
views
Reset Safari SSL Exceptions on iOS 11
On iOS if you visit a website with an invalid SSL certificate, you are presented with this prompt (ok, it’s in italian but you get the picture):
Tapping “show details” allows the user to proceed to ...
- 328