Questions tagged [ssl]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
2answers
93 views

Catalina Trusted Root CA certificates are revoked - Chrome

I have a trusted self-signed root CA named CA and I use that to sign a certificate for my local website, before I install CA's certificate and trust that, chrome shows me an error about the site SSL ...
0
votes
0answers
9 views

SSL Error only on Ethernet

Have you guys ever heard of something like this? I get SSL Errors (200) only when im on ethernet. I'm using a USB-C adatper. I already changed the adapter for another and still getting these errors. ...
4
votes
2answers
2k views

Why does iOS 13 not trust my own Root CA?

No matter what I do, I can't get Safari on the iPhone or iPad to trust a certificate from an internal website. I can look at the certificate and it is shown as "not trusted". I have imported the Root ...
0
votes
0answers
26 views

Custom Root CA installed by MDM is not trusted

I'm trying to deploy a Custom Root CA to some iPads using SimpleMDM. This is quite easy to do, any when I go into the profile on the iPad, I can see the Certificate in the profile. However, when I ...
1
vote
0answers
73 views

curl-config --ca returns a blank line, and other cert problems

This is a repost/update of this question on stackoverflow, which didn't get any attention so I'm trying a more specific stackexchange. My problem was originally that Cargo (Rust's dependency manager) ...
1
vote
0answers
187 views

Disable TLS 1.0 and TLS 1.1 on Safari

Safari would disable TLS 1.0 and 1.1 next year. I would like to disable TLS 1.0 and 1.1 before that, so I got the benefit right now. I did it to my Firefox, but I use Safari more. Is it possible to do ...
1
vote
2answers
114 views

How do you clear SSL leaf certificates mappings to particular domains

I visit my website using Chrome on macOS Mojave, for example, qa.abc.com, and the SSL leaf certificate is from customer-test.ssl.fastly.net. I recently updated the CNAME record in my DNS for qa.abc....
0
votes
0answers
39 views

Homebrew SSL error (1407742E) on Mountain Lion

I get the following error trying to install Homebrew on Mountain Lion, when following Installing brew on Mac 10.6 results in syntax error localhost:~ user$ cd /usr/local localhost:local user$ mkdir ...
0
votes
0answers
18 views

How to withdraw ssl from exceptions

Recently I've tried to open a website. I used TorBrowser. When I opened it I saw a message that is was something wrong with the website's certificate. I clicked "Advanced", and then I clicked ...
0
votes
1answer
45 views

Are whitespaces a good idea for a rootCA or intermediateCA for a self sign/closed on-prem PKI - with iPads?

Good morning, we've got iPads running with a native App and would next use a safari Homescreen Shortcut for a web based catalog. However, connecting to the F5 LTM, which rotates and terminates the (...
0
votes
0answers
165 views

Fixing a Mac unable to fetch software updates? Requests to https://swdist.apple.com/* seem to be failing HTTPS cert validation

I've discovered that my Mac can't fetch software updates because the requests to Apple server's are failing. I think it's something related to HTTPS cert validating or cert pinning. I was tipped off ...
1
vote
0answers
133 views

Skip invalid SSL warning and show detailed errors in Safari

I have Safari 12.0.3 and couldn't find two settings: 1. Sometimes I need skip invalid SSL warning for self-signed SSL or expired SSL. I would like to skip the warning without adding the certificate to ...
0
votes
1answer
127 views

Safari complains about SSL certificate on redirect page

I have gotten reports from people navigating to our site without entering the www. part of the URL that our SSL certificate does not match and so generates a warning. This is technically correct I ...
2
votes
1answer
69 views

“Client Authentication” certificate for iPhone for school Wi-Fi

My school Wi-Fi, which requires that I log in using my username and password, requires that I accept this certificate (which I think might be a trusted root certificate?) in order to connect: What ...
2
votes
2answers
572 views

Error downloading YouTube video using youtube-dl

When downloading a YouTube video using youtube-dl, I get the following error: MacBook-Pro:ytd user$ youtube-dl "https://youtu.be/dgxpBpa9A48" [youtube] dgxpBpa9A48: Downloading webpage ERROR: ...
1
vote
0answers
38 views

Security Certificates disappearing from trust store

Publicly signed fully valid .CRT file, signed by root CA and not expired, disappears from the System Keychain. Seems to affect all sorts of Mac computers in my environment including new and fully ...
0
votes
2answers
2k views

How does Safari (on iOS) decide when to present an SSL client certificate

I've installed a SSL client certificate into the version of Safari that comes with iOS 11.4.1. It apparently allows me to access a protected site as expected. Are there any specific privacy issues ...
5
votes
3answers
7k views

How “official” is libressl support in High Sierra?

I am trying to port an OpenSSL-based C program from Linux to macOS, and I would like to use a library for TLS which is officially supported by the OS, because then the OS keeps that library up-to-date ...
4
votes
2answers
2k views

Updating SSL root certs on old Mac (running Lion)

My father-in-law reported an "Invalid SSL certificate" suddenly started appearing on his online banking website. After verifying it's not a website issue (it loads correctly on other computers), I ...
3
votes
0answers
560 views

Reset Safari SSL Exceptions on iOS 11

On iOS if you visit a website with an invalid SSL certificate, you are presented with this prompt (ok, it’s in italian but you get the picture): Tapping “show details” allows the user to proceed to ...
2
votes
1answer
4k views

How to view certificates from my keychain on iOS?

On macOS the keychain allows me to view all certificates and if I want manually revoke trust to a certificate. I was wondering how I could do something similar on my iPhone as my school forces me to ...
1
vote
1answer
5k views

How to remove SSL exception Safari

I don't have enough rep to comment on this question which would probably be more appropriate than asking a new question: How do you remove SSL certificate exceptions on OS X? I just tried this on OSX ...
0
votes
1answer
359 views

SSL Client authentication with non-exportable certificates in Mac

We use our organization's provided SSO certificate for SSL client authentication from our Java based desktop clients (Mac and Windows). It seems in Mac, the certificate is marked with non-exportable ...
0
votes
1answer
299 views

Does iOS 8 support AES in GCM mode to encrypt data in TLS/SSL?

While sending data over SSL/TLS in iOS 8 iPhone, is it possible to encrypt data using AES in GCM mode?
3
votes
2answers
2k views

How to find out which cipher suites an iOS application uses?

I'm trying to find out which cipher suites and SSL/TLS protocol an app uses. In the privacy policy it is written that it uses SSLv3 but when I tested the server of the app's developer using an SSL ...
3
votes
3answers
9k views

tlsv1 alert protocol version when connecting via SSL to OS X Server

How can I re-enable TLS 1.1 and 1.0 on server 5.3 with macOS 10.12.4 in the short term while I evaluate all the clients that aren't ready for TLS 1.2? If you jump to the bottom, attempts to change ...
0
votes
1answer
1k views

Safari incorrectly demands to select an SSL client certificate

Several websites suddenly recently have popped up the dialog sheet in Safari requesting me to select an SSL client certificate. None of these sites (one example is forums.macrumors.com) actually use ...
0
votes
2answers
2k views

Chrome on macOS suddenly rejects self signed certificates

I have been happily using self signed certificates for locally hosted sites running on apache2 for a couple of years. Today one of those certificates expired - no biggie, I recreated it and replaced ...
2
votes
2answers
5k views

Can't load a specific webpage using Chrome or Safari while logged in, but they work on other account and Firefox also works

I'm trying to access The Guardian's website, and I get errors with both Safari and Chrome. In Safari: Safari Can't Open the Page Safari can't open the page "https://www.theguardian.com" ...
0
votes
1answer
72 views

“err_certificate_invalid” for only one host, on only one device, but in all browsers

Currently, when I try to access www.comic-rocket.com on my iPad (iOS 10.2), the site will not load. Safari simply won't load the page, as if I hadn't even tried to do so. Chrome and Dolphin will ...
1
vote
2answers
4k views

iOS - how to get mail app to recognize and trust custom or self-signed SSL certificates from a profile?

Running iOS 10.2 I added the root certificates of CAcert to my iPhone profile using various ways: directly from their website in mobile Safari sent by email to mail app by adding a profile with the ...
0
votes
1answer
140 views

Profile Manager not sending email invitations

After installing a new copy of OSX Server I started the Profile Manager and wanted to add some users and enroll them for the VPP Managed Distribution (I am already registered for VPP). In the VPP ...
1
vote
0answers
468 views

How to verify in bash if a certificate is already imported in the KeyChain?

I want to check, from the command line, if a certificate is already imported in the KeyChain in order to avoid doing a sudo security add-trusted-cert ... if that's not necessarily. I already have ...
0
votes
1answer
1k views

Why does find-certificates have some missing?

I seem to have a certificate in the keychain that is only sometimes output correctly from security find-certificate on the command line: security find-certificate -a -p | openssl x509 -text | grep -i ...
1
vote
1answer
752 views

SSL error with mbsync

I installed isync[1] on my personal Macbook, which runs OSX 10.11. I used the exact same .mbsyncrc file I wrote for my Macbook at work. The setup works fine on my work machine. However when using the ...
0
votes
1answer
95 views

CalDAV only works for first synchronisation, and then stops updateing the calender forever

From the same server I can successfully sync cardDAVs contacts, and IMAPs-mail, so I've ruled out network issues. Furthermore, that same installation also syncs many other users (non-i) -Devices ...
2
votes
2answers
925 views

Start stunnel service on bootup

I have a service ran under homebrew. This service is simply started by running the command sudo stunnel I need this command to run on bootup, so I created a LaunchDaemon but it is not working. Here ...
0
votes
2answers
1k views

Bind SSL certificate to local port for Mono/OWIN

I have a local http service application running on OSX (hosted through Mono/OWIN) that I want to access on https instead. The service itself is easily configured to require https, but the local bit ...
0
votes
0answers
231 views

Is there a technical reason Mac OS X doesn't support SSL VPN?

I noticed OS X doesn't support SSL VPN by default. Any technical reasons why this might be the case? (i.e. Any security concerns?) What are the VPN protocols available for OS X?
0
votes
0answers
73 views

Three identical SMTP server configurations, one succeeds, two fail in Mail

I have three e-mail accounts each with a different domain name, however all of them send e-mail via the same domain name via SMTP (but each has its own login credentials). To clarify, it looks ...
1
vote
1answer
2k views

OS X Safari Comodo SSL issue

Strange issue on OS X Safari - visit Skiplex UK and you will receive an alert 'Safari can't verify the identity of the website "www.skiplex.co.uk".'. I have been advised by Comodo and our hosting ...
1
vote
1answer
2k views

How to make a clean install of OpenSSL on El Capitan

I'm afraid I have made a mess with the version (0.9.8zg) of OpenSSL which was installed on my Mac. While I was trying to update it, now I have some error and for some reasons applications like Apache ...
2
votes
1answer
8k views

“This certificate was signed by an untrusted issuer”: what's causing such an error?

I am having trouble with a specific financial services provider; every time I try to visit myvisaaccount.com to check my card balance etc, I get the dreaded Chrome red strikethrough https and x-ed ...
11
votes
2answers
10k views

How do you remove SSL certificate exceptions on OS X?

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), Safari shows a dialog asking whether the certificate should be accepted. If you accept the ...
1
vote
2answers
5k views

Client SSL certificate failing in Safari (and what is SOSCCThisDeviceIsInCircle?)

I'm having difficulty using an X.509 certificate to do client authentication from Safari (9.0.1, as on OS X 10.10.5). The symptom is that I go to a https://... site which does client certificate ...
0
votes
1answer
366 views

iOS 8 - Apps other than Safari won't accept Cyberoam certificate

My college network is secured with Cyberoam network. And Cyberoam requires a certificate it provides to be installed to access SSL secured websites. However, even after installing the certificate only ...
1
vote
1answer
545 views

Internet Access after renew the expired com.apple.servermgrd certificate

I inherited some months ago a Mac mini server running OS X 10.8.5 Initially, I configured it with the new network settings, DNS name, etc and all was working fine in regard to file sharing, accessing ...
1
vote
1answer
830 views

How to get Safari to accept Untrusted Certs on iOS8? (like Chrome)

It looks like Chrome on iOS8 has the ability to 'user accept' untrusted SSL Certs but Safari simply blocks them with an error. The scenario here is that the phone (and iPad) are viewing an internal ...
0
votes
1answer
625 views

OS X client gets SSL certificate error when trying to join OD

I switched from self signed to signing my own certificates using a CA I created on the server. OS X Server has a list of the certificates outlined in blue now for its hostname, Code Signing ...
1
vote
1answer
4k views

Profile Manager: Enroll gives a error 500

I'm new to iOS and I'm trying to configure a server to use it as a MDM solution via Profile Manager. So far I have: Configured my OS X Server. Added a signed SSL certificate. Sent some invitations ...