Questions tagged [ssl]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
17 views

Custom Root CA installed by MDM is not trusted

I'm trying to deploy a Custom Root CA to some iPads using SimpleMDM. This is quite easy to do, any when I go into the profile on the iPad, I can see the Certificate in the profile. However, when I ...
1
vote
0answers
34 views

curl-config --ca returns a blank line, and other cert problems

This is a repost/update of this question on stackoverflow, which didn't get any attention so I'm trying a more specific stackexchange. My problem was originally that Cargo (Rust's dependency manager) ...
1
vote
0answers
75 views

Disable TLS 1.0 and TLS 1.1 on Safari

Safari would disable TLS 1.0 and 1.1 next year. I would like to disable TLS 1.0 and 1.1 before that, so I got the benefit right now. I did it to my Firefox, but I use Safari more. Is it possible to do ...
1
vote
2answers
59 views

How do you clear SSL leaf certificates mappings to particular domains

I visit my website using Chrome on macOS Mojave, for example, qa.abc.com, and the SSL leaf certificate is from customer-test.ssl.fastly.net. I recently updated the CNAME record in my DNS for qa.abc....
0
votes
0answers
22 views

Homebrew SSL error (1407742E) on Mountain Lion

I get the following error trying to install Homebrew on Mountain Lion, when following Installing brew on Mac 10.6 results in syntax error localhost:~ user$ cd /usr/local localhost:local user$ mkdir ...
4
votes
3answers
7k views

How “official” is libressl support in High Sierra?

I am trying to port an OpenSSL-based C program from Linux to macOS, and I would like to use a library for TLS which is officially supported by the OS, because then the OS keeps that library up-to-date ...
0
votes
2answers
2k views

How does Safari (on iOS) decide when to present an SSL client certificate

I've installed a SSL client certificate into the version of Safari that comes with iOS 11.4.1. It apparently allows me to access a protected site as expected. Are there any specific privacy issues ...
0
votes
0answers
15 views

How to withdraw ssl from exceptions

Recently I've tried to open a website. I used TorBrowser. When I opened it I saw a message that is was something wrong with the website's certificate. I clicked "Advanced", and then I clicked ...
0
votes
1answer
33 views

Are whitespaces a good idea for a rootCA or intermediateCA for a self sign/closed on-prem PKI - with iPads?

Good morning, we've got iPads running with a native App and would next use a safari Homescreen Shortcut for a web based catalog. However, connecting to the F5 LTM, which rotates and terminates the (...
11
votes
2answers
9k views

How do you remove SSL certificate exceptions on OS X?

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), Safari shows a dialog asking whether the certificate should be accepted. If you accept the ...
0
votes
0answers
120 views

Fixing a Mac unable to fetch software updates? Requests to https://swdist.apple.com/* seem to be failing HTTPS cert validation

I've discovered that my Mac can't fetch software updates because the requests to Apple server's are failing. I think it's something related to HTTPS cert validating or cert pinning. I was tipped off ...
0
votes
1answer
93 views

Safari complains about SSL certificate on redirect page

I have gotten reports from people navigating to our site without entering the www. part of the URL that our SSL certificate does not match and so generates a warning. This is technically correct I ...
1
vote
0answers
124 views

Skip invalid SSL warning and show detailed errors in Safari

I have Safari 12.0.3 and couldn't find two settings: 1. Sometimes I need skip invalid SSL warning for self-signed SSL or expired SSL. I would like to skip the warning without adding the certificate to ...
1
vote
1answer
526 views

Internet Access after renew the expired com.apple.servermgrd certificate

I inherited some months ago a Mac mini server running OS X 10.8.5 Initially, I configured it with the new network settings, DNS name, etc and all was working fine in regard to file sharing, accessing ...
22
votes
5answers
159k views

How do you remove SSL certificate exceptions on iOS?

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), iOS shows a dialog asking whether the certificate should be accepted. If you accept the ...
3
votes
2answers
2k views

How to find out which cipher suites an iOS application uses?

I'm trying to find out which cipher suites and SSL/TLS protocol an app uses. In the privacy policy it is written that it uses SSLv3 but when I tested the server of the app's developer using an SSL ...
22
votes
4answers
33k views

How to view certificate info without installing

I have a certificate and/or private key file (pfx) on my OS X desktop. I'd like to look at its information (CN, SAN, OU, thumbprint, etc) but when I double click on it, it attempts to install into my ...
2
votes
1answer
58 views

“Client Authentication” certificate for iPhone for school Wi-Fi

My school Wi-Fi, which requires that I log in using my username and password, requires that I accept this certificate (which I think might be a trusted root certificate?) in order to connect: What ...
2
votes
2answers
459 views

Error downloading YouTube video using youtube-dl

When downloading a YouTube video using youtube-dl, I get the following error: MacBook-Pro:ytd user$ youtube-dl "https://youtu.be/dgxpBpa9A48" [youtube] dgxpBpa9A48: Downloading webpage ERROR: ...
1
vote
0answers
37 views

Security Certificates disappearing from trust store

Publicly signed fully valid .CRT file, signed by root CA and not expired, disappears from the System Keychain. Seems to affect all sorts of Mac computers in my environment including new and fully ...
0
votes
1answer
1k views

Safari incorrectly demands to select an SSL client certificate

Several websites suddenly recently have popped up the dialog sheet in Safari requesting me to select an SSL client certificate. None of these sites (one example is forums.macrumors.com) actually use ...
1
vote
1answer
910 views

How do I determine what TLS ciphers are being used in OSX, Outlook 2011?

I just limited all my SSL ciphers to TLS 1.X and TLS1_RSA_AES and my up-to-date OSX machine is no longer able to connect to the server via Outlook 2011. I can use Safari to connect to the same host,...
4
votes
1answer
1k views

Mavericks Server: Unable to use 3rd party SSL Certificates with Open Directory

We have a Mac OS X Server (Mavericks) - Mac OS X: 10.9.2, Server: 3.1 Our Open Directory Master is set up and running but we cannot for the life of us get it to accept our 3rd Party (DigiCert) SSL ...
2
votes
1answer
2k views

Maverics VPN to Windows 2008 SSTP with Certificate (PPTP)

I'm unable to connect to a Windows VPN using my macbook air 2013. The VPN Settings given to me are, Server URL Username & Password SSL Ceritificate VPN Type - SSTP I have added image on how to ...
5
votes
1answer
6k views

SMTP Issues with Mountain Lion 10.8

BACKGROUND I upgraded from 10.7 to 10.8 on 7/28/12 I upgraded Xcode from 4.4 to 4.4.1 on 8/8/12 PROBLEM On 8/9/12, on my MacBook Air, Mail.app refuses to connect to the SMTP service on a server ...
4
votes
2answers
2k views

Updating SSL root certs on old Mac (running Lion)

My father-in-law reported an "Invalid SSL certificate" suddenly started appearing on his online banking website. After verifying it's not a website issue (it loads correctly on other computers), I ...
3
votes
1answer
3k views

How can I identify the cause of this SSL error in Safari 6?

I was seeing an SSL error in Safari 6.1.6 (8537.78.2) on OSX 10.8.5 when visiting a website, and the debug information provided from the developer tools didn't indicate the source of the issue. The ...
3
votes
0answers
543 views

Reset Safari SSL Exceptions on iOS 11

On iOS if you visit a website with an invalid SSL certificate, you are presented with this prompt (ok, it’s in italian but you get the picture): Tapping “show details” allows the user to proceed to ...
1
vote
2answers
4k views

iOS - how to get mail app to recognize and trust custom or self-signed SSL certificates from a profile?

Running iOS 10.2 I added the root certificates of CAcert to my iPhone profile using various ways: directly from their website in mobile Safari sent by email to mail app by adding a profile with the ...
1
vote
1answer
4k views

How to remove SSL exception Safari

I don't have enough rep to comment on this question which would probably be more appropriate than asking a new question: How do you remove SSL certificate exceptions on OS X? I just tried this on OSX ...
1
vote
5answers
13k views

https (ssl secured) local websites are not working in Safari and Chrome in Mac Yosemite. How can I fix this?

As a developer, I will be running and testing the web apps that I am developing locally. But Chrome and Safari are not allowing me to hit my local server with SSL enabled. https://localhost:8443/ ...
2
votes
1answer
4k views

How to view certificates from my keychain on iOS?

On macOS the keychain allows me to view all certificates and if I want manually revoke trust to a certificate. I was wondering how I could do something similar on my iPhone as my school forces me to ...
4
votes
1answer
36k views

View TLS Certificate in Safari 8 / Yosemite

i've installed the new OS X Yosemite recently. Now i'm trying to view the TLS Certificate and the Certificate Chain in the new Safari. In the older versions of Safari one just had to click onto the ...
26
votes
7answers
80k views

Safari can't connect to https

Safari suddenly can't connect to any HTTPS site because it "can't establish a secure connection". This is on an administrator account, not a managed account. A different administrator account is ...
1
vote
1answer
4k views

Profile Manager: Enroll gives a error 500

I'm new to iOS and I'm trying to configure a server to use it as a MDM solution via Profile Manager. So far I have: Configured my OS X Server. Added a signed SSL certificate. Sent some invitations ...
7
votes
4answers
7k views

How do I get com.apple.servermgrd to use a non-self-signed SSL certificate?

I have received a valid SSL certificate for my Mountain Lion Server (10.8.2 Build 12C3104) and have installed that cert for use by all services (and SSL and other services do not pop up the "Verify ...
3
votes
3answers
9k views

tlsv1 alert protocol version when connecting via SSL to OS X Server

How can I re-enable TLS 1.1 and 1.0 on server 5.3 with macOS 10.12.4 in the short term while I evaluate all the clients that aren't ready for TLS 1.2? If you jump to the bottom, attempts to change ...
0
votes
1answer
347 views

SSL Client authentication with non-exportable certificates in Mac

We use our organization's provided SSO certificate for SSL client authentication from our Java based desktop clients (Mac and Windows). It seems in Mac, the certificate is marked with non-exportable ...
0
votes
1answer
532 views

How to get private key on IOS used for SSL traffic?

I need to debug/view an IOS app's encrypted traffic, so i had captured SSL encrypted TCP packets via pirni. and trying to decrypt them via Wireshark. but i need session key for that. is there any way ...
0
votes
1answer
283 views

Does iOS 8 support AES in GCM mode to encrypt data in TLS/SSL?

While sending data over SSL/TLS in iOS 8 iPhone, is it possible to encrypt data using AES in GCM mode?
0
votes
2answers
2k views

Chrome on macOS suddenly rejects self signed certificates

I have been happily using self signed certificates for locally hosted sites running on apache2 for a couple of years. Today one of those certificates expired - no biggie, I recreated it and replaced ...
10
votes
6answers
54k views

How to fix curl: (60) SSL certificate: Invalid certificate chain when using sudo

So since the Mavericks upgrade curl has more issues with certificates. When trying to curl a file from my web server with it's self-signed certificate it was getting the error "SSL Certificate: ...
2
votes
1answer
5k views

Can't load a specific webpage using Chrome or Safari while logged in, but they work on other account and Firefox also works

I'm trying to access The Guardian's website, and I get errors with both Safari and Chrome. In Safari: Safari Can't Open the Page Safari can't open the page "https://www.theguardian.com" ...
0
votes
1answer
137 views

Profile Manager not sending email invitations

After installing a new copy of OSX Server I started the Profile Manager and wanted to add some users and enroll them for the VPP Managed Distribution (I am already registered for VPP). In the VPP ...
0
votes
1answer
65 views

“err_certificate_invalid” for only one host, on only one device, but in all browsers

Currently, when I try to access www.comic-rocket.com on my iPad (iOS 10.2), the site will not load. Safari simply won't load the page, as if I hadn't even tried to do so. Chrome and Dolphin will ...
1
vote
0answers
433 views

How to verify in bash if a certificate is already imported in the KeyChain?

I want to check, from the command line, if a certificate is already imported in the KeyChain in order to avoid doing a sudo security add-trusted-cert ... if that's not necessarily. I already have ...
1
vote
1answer
699 views

SSL error with mbsync

I installed isync[1] on my personal Macbook, which runs OSX 10.11. I used the exact same .mbsyncrc file I wrote for my Macbook at work. The setup works fine on my work machine. However when using the ...
0
votes
1answer
1k views

Why does find-certificates have some missing?

I seem to have a certificate in the keychain that is only sometimes output correctly from security find-certificate on the command line: security find-certificate -a -p | openssl x509 -text | grep -i ...
3
votes
1answer
463 views

How do I fix the SSL warning I get when visiting github.com?

I see the following warning when visiting http://www.github.com/ after July 26, 2014. I get this warning in both Chrome and Safari on my OS X Mavericks-equipped iMac. Should I worry about this? How ...
1
vote
2answers
5k views

Client SSL certificate failing in Safari (and what is SOSCCThisDeviceIsInCircle?)

I'm having difficulty using an X.509 certificate to do client authentication from Safari (9.0.1, as on OS X 10.10.5). The symptom is that I go to a https://... site which does client certificate ...