Questions tagged [ssl]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
26
votes
7answers
80k views

Safari can't connect to https

Safari suddenly can't connect to any HTTPS site because it "can't establish a secure connection". This is on an administrator account, not a managed account. A different administrator account is ...
22
votes
4answers
33k views

How to view certificate info without installing

I have a certificate and/or private key file (pfx) on my OS X desktop. I'd like to look at its information (CN, SAN, OU, thumbprint, etc) but when I double click on it, it attempts to install into my ...
22
votes
5answers
159k views

How do you remove SSL certificate exceptions on iOS?

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), iOS shows a dialog asking whether the certificate should be accepted. If you accept the ...
16
votes
1answer
7k views

How do I un-trust or remove blacklisted root CAs from mobile Safari on my iPhone or iPad?

The DigiNotar root CA has been compromised and has been blacklisted by Mozilla and Chrome. I've already un-trusted their root CA in Keychain on my OS X devices, but how can I do something similar on ...
15
votes
6answers
53k views

Is it possible to update any iOS 6 device to iOS 6.1.6?

Apple have just released software updates to fix a rather serious security problem where a valid SSL response wasn't checked properly to ensure it matches the site actually being browsed. I have an ...
13
votes
1answer
2k views

Default email signing with OS X Mail

I have both a GPG key and an SSL certificate. I am able to sign emails by choosing OpenPGP or S/MIME in the upper right corner of the window: I can then activate the signing by clicking the ...
11
votes
4answers
4k views

Does iOS 5 have a SSL security bug that got patched on iOS 6/7?

Apple released iOS 7.0.6 and 6.1.6 to patch a specific SSL/TLS security bug. I can't find anything official about iOS 5. Does iOS 5 have the same bug? Please cite your answer.
11
votes
3answers
19k views

View SSL/TLS certificate in Safari 5+ when no padlock icon shown

According to Apple, With Safari 5 through 5.1.7, a lock icon appears near the top right corner [only] if all of the webpage's content uses a secure connection. That's all very well, but normally ...
11
votes
2answers
9k views

How do you remove SSL certificate exceptions on OS X?

When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), Safari shows a dialog asking whether the certificate should be accepted. If you accept the ...
11
votes
2answers
3k views

iPad Mail client - IMAP with X.509 client certificates?

Short version: Does anyone know if X.509 client certificates are supposed to work on the iPad for IMAP mail? Am I wasting my time trying to get a feature that doesn't work to work? If the built-in ...
10
votes
6answers
54k views

How to fix curl: (60) SSL certificate: Invalid certificate chain when using sudo

So since the Mavericks upgrade curl has more issues with certificates. When trying to curl a file from my web server with it's self-signed certificate it was getting the error "SSL Certificate: ...
10
votes
2answers
21k views

Certificate error when using Chrome for iOS with company CA

I am using an iPad with Google Chrome installed to access the internet. I have downloaded and installed the Netbox Blue certificate authority from their website. I can currently access https:// ...
8
votes
2answers
7k views

Chrome AutoSelectCertificateForUrls OSX

I have a client SSL certificate for authentication. I'm trying to map it to a URL in Chrome on OSX, however the Chromium documentation is of no use. I have no idea what file to put the ...
8
votes
1answer
2k views

Can't create a Fluid App due to “Invalid Certificate”

I am trying to create a Fluid App for a work intranet. It says the certificate is invalid, is there a way to get around that?
8
votes
5answers
2k views

Why are Safari and Chrome not throwing warnings after removing the root certificates

Certificates issued by DigiNotar have been blacklisted today by Mozilla. Viewing websites with certificates issued by DigiNotar with a nightly build of Firefox will render warnings. Instead of ...
8
votes
1answer
8k views

Setting Safari SSL/TLS Cipher Suites

Does anyone know how to set the priority order of SSL/TLS cipher suites on Safari for Mac OSX (10.7 ideally, but any version would be helpful). Can't seem to find any documentation on that point.
7
votes
4answers
7k views

How do I get com.apple.servermgrd to use a non-self-signed SSL certificate?

I have received a valid SSL certificate for my Mountain Lion Server (10.8.2 Build 12C3104) and have installed that cert for use by all services (and SSL and other services do not pop up the "Verify ...
7
votes
1answer
6k views

What SSL VPN client do you recommend for the mac? [closed]

I am currently using FortiClient. It would be nice to use the native MacOS VPN client (in the Settings) but I don't think it supports SSL VPN. I googled but did not find anything. Does anyone have a ...
6
votes
2answers
6k views

Configuring SSL with Apache under Lion

Following on from my previous question (which I answered myself), Configuring OS X 10.7 Lion Server to serve Rails Apps via Apache ...I'm now looking to set up SSL. Again, I have the config working ...
6
votes
1answer
1k views

Built-in WebDAV client able to connect via HTTPS with client certificate?

Using Mac OS 10.6.8, I'm trying to connect via HTTPS to a WebDAV server that requires client certificates. Without luck so far. The certificate is stored in the keychain. Is this possible with the ...
5
votes
1answer
1k views

how do you load the US Department of Defense Certificate into an iPhone?

How do you load the US Department of Defense SSL certificate (or any SSL certificate) into iOS?
5
votes
1answer
6k views

SMTP Issues with Mountain Lion 10.8

BACKGROUND I upgraded from 10.7 to 10.8 on 7/28/12 I upgraded Xcode from 4.4 to 4.4.1 on 8/8/12 PROBLEM On 8/9/12, on my MacBook Air, Mail.app refuses to connect to the SMTP service on a server ...
4
votes
3answers
7k views

How “official” is libressl support in High Sierra?

I am trying to port an OpenSSL-based C program from Linux to macOS, and I would like to use a library for TLS which is officially supported by the OS, because then the OS keeps that library up-to-date ...
4
votes
3answers
22k views

Chrome showing the site's security certificate is not trusted for GitHub

Today, out of no-where Chrome just started showing invalid SSL certificate errors for popular sites like Github, Stripe, etc. The site's security certificate is not trusted! I know the SSL ...
4
votes
1answer
6k views

How do I view or verify signed .mobileconfig files using Terminal?

I need to troubleshoot problems with signed .mobileconfig profiles. How can I show the signature of a these files using Terminal? Is it also possible to verify the certificates that were used to sign ...
4
votes
1answer
36k views

View TLS Certificate in Safari 8 / Yosemite

i've installed the new OS X Yosemite recently. Now i'm trying to view the TLS Certificate and the Certificate Chain in the new Safari. In the older versions of Safari one just had to click onto the ...
4
votes
2answers
2k views

Updating SSL root certs on old Mac (running Lion)

My father-in-law reported an "Invalid SSL certificate" suddenly started appearing on his online banking website. After verifying it's not a website issue (it loads correctly on other computers), I ...
4
votes
1answer
1k views

Mavericks Server: Unable to use 3rd party SSL Certificates with Open Directory

We have a Mac OS X Server (Mavericks) - Mac OS X: 10.9.2, Server: 3.1 Our Open Directory Master is set up and running but we cannot for the life of us get it to accept our 3rd Party (DigiCert) SSL ...
4
votes
0answers
361 views

Is it possible to update an iPhone 4 to iOS 6.1.6? [duplicate]

I need the latest SSL security fix, as I'm running iOS 6.1.3. But, I don't have enough space to go to iOS 7 which is the only option iTunes and my phone are giving me to upgrade. I have an 8 GB ...
3
votes
3answers
13k views

how to install stunnel on mountain lion?

I currently bought an Mac, so I'm a noob :). I used to connect to my server using stunnel on windows & ubuntu. I'm also a noob in networking. I check website download section, and there's no mac ...
3
votes
2answers
261 views

Make Macports use HTTPS (SSL/TLS) to fetch packages

By default, Macports uses HTTP to fetch packages. For example: ---> Attempting to fetch port_cutleaves-0.1.4_0.darwin_10.noarch.tbz2 from http://lil.fr.packages.macports.org/port_cutleaves How ...
3
votes
1answer
3k views

How can I identify the cause of this SSL error in Safari 6?

I was seeing an SSL error in Safari 6.1.6 (8537.78.2) on OSX 10.8.5 when visiting a website, and the debug information provided from the developer tools didn't indicate the source of the issue. The ...
3
votes
1answer
327 views

MacBook cannot connect to non-SSL websites

I have the late 2013 MBP 15″ with Retina and recently I've been unable to connect to websites not using SSL with either Firefox or Safari. This includes other applications that use HTTP such as the ...
3
votes
2answers
2k views

How to find out which cipher suites an iOS application uses?

I'm trying to find out which cipher suites and SSL/TLS protocol an app uses. In the privacy policy it is written that it uses SSLv3 but when I tested the server of the app's developer using an SSL ...
3
votes
3answers
9k views

tlsv1 alert protocol version when connecting via SSL to OS X Server

How can I re-enable TLS 1.1 and 1.0 on server 5.3 with macOS 10.12.4 in the short term while I evaluate all the clients that aren't ready for TLS 1.2? If you jump to the bottom, attempts to change ...
3
votes
1answer
463 views

How do I fix the SSL warning I get when visiting github.com?

I see the following warning when visiting http://www.github.com/ after July 26, 2014. I get this warning in both Chrome and Safari on my OS X Mavericks-equipped iMac. Should I worry about this? How ...
3
votes
0answers
543 views

Reset Safari SSL Exceptions on iOS 11

On iOS if you visit a website with an invalid SSL certificate, you are presented with this prompt (ok, it’s in italian but you get the picture): Tapping “show details” allows the user to proceed to ...
2
votes
2answers
1k views

What password does OSX Server use when importing SSL certificates?

I am migrating my website away from my home OSX server to a virtual Linux server, hosted within a proper data centre, and I have a problem with the SSL certificates I imported into OSX Server. It ...
2
votes
2answers
893 views

Start stunnel service on bootup

I have a service ran under homebrew. This service is simply started by running the command sudo stunnel I need this command to run on bootup, so I created a LaunchDaemon but it is not working. Here ...
2
votes
2answers
3k views

How to get wiki and profile manager to run on different port

Currently the wiki and the profile manager runs on port 443 (ssl). We have other services using port 443 on our network, and therefore I cannot port forward that port to my Lion Server. How can I ...
2
votes
2answers
460 views

Error downloading YouTube video using youtube-dl

When downloading a YouTube video using youtube-dl, I get the following error: MacBook-Pro:ytd user$ youtube-dl "https://youtu.be/dgxpBpa9A48" [youtube] dgxpBpa9A48: Downloading webpage ERROR: ...
2
votes
1answer
4k views

How to view certificates from my keychain on iOS?

On macOS the keychain allows me to view all certificates and if I want manually revoke trust to a certificate. I was wondering how I could do something similar on my iPhone as my school forces me to ...
2
votes
2answers
1k views

Postfix SSL/TLS certificates issue

I'm trying to set up postfix to send mail through Gmail's SMTP server on port 587. Here's what I've put in my /etc/postfix/main.cf: relayhost = [smtp.gmail.com]:587 smtp_sasl_auth_enable = yes ...
2
votes
1answer
58 views

“Client Authentication” certificate for iPhone for school Wi-Fi

My school Wi-Fi, which requires that I log in using my username and password, requires that I accept this certificate (which I think might be a trusted root certificate?) in order to connect: What ...
2
votes
1answer
5k views

Can't load a specific webpage using Chrome or Safari while logged in, but they work on other account and Firefox also works

I'm trying to access The Guardian's website, and I get errors with both Safari and Chrome. In Safari: Safari Can't Open the Page Safari can't open the page "https://www.theguardian.com" ...
2
votes
1answer
8k views

“This certificate was signed by an untrusted issuer”: what's causing such an error?

I am having trouble with a specific financial services provider; every time I try to visit myvisaaccount.com to check my card balance etc, I get the dreaded Chrome red strikethrough https and x-ed ...
2
votes
1answer
175 views

Broken SSL certificates

When trying to access a couple of high-profile websites (*.apple.com, twitter.com) via HTTPS, they've since recently been getting their certificates rejected by some client apps (Chrome, App Store, ...
2
votes
1answer
60 views

Is there anything we can do on iOS to stay safe while waiting for Apple to issue an update for the latest FREAK SSL vulnerability?

I guess the vulnerability has been around for a decade [ars technica], but should we just stay away from using any personal information until there is a security patch?
2
votes
1answer
2k views

iOS 8 Safari verify server identity error

We have a site running on https in production. In QA we run it on https but we don't have a valid SSL cert for it. So on iOS Safari 8, we get a error message saying that "Server identity cannot be ...
2
votes
1answer
2k views

Maverics VPN to Windows 2008 SSTP with Certificate (PPTP)

I'm unable to connect to a Windows VPN using my macbook air 2013. The VPN Settings given to me are, Server URL Username & Password SSL Ceritificate VPN Type - SSTP I have added image on how to ...