Hot answers tagged

43 votes
Accepted

How to view certificate info without installing

I'm not sure if this was available in the OS you had at the time you wrote your question, but at least with OS X 10.11.6, if you select the .crt file in the Finder and press the spacebar, a Quick Look ...
user avatar
21 votes
Accepted

Homebrew Cask download failure. SSL certificate problem: certificate has expired

This is documented here, see also https://curl.haxx.se/mail/lib-2020-06/0010.html and https://security.stackexchange.com/questions/232445/https-connection-to-specific-sites-fail-with-curl-on-macos. ...
user avatar
  • 85.3k
19 votes

How to view certificate info without installing

via Terminal.app and type something like: openssl x509 -noout -text -in ~/Desktop/yourcertificate.crt Where last parameter is a path your certificate file(you can drag and drop that if you like) ...
user avatar
  • 341
14 votes
Accepted

Why does iOS 13 not trust my own Root CA?

iOS 13 have increased the security regarding these root certificates. It is thus not a bug, but rather that you have to meet higher requirements in order to get this working. First of all the process ...
user avatar
  • 65.8k
10 votes

Chrome AutoSelectCertificateForUrls OSX

On Yosemite, that Workgroup Manager app doesn't work, neither did modifying the plist. This worked for me, in a terminal: defaults write com.google.Chrome AutoSelectCertificateForUrls -array ...
user avatar
10 votes
Accepted

How do you remove SSL certificate exceptions on OS X?

The exceptions are stored in Keychain Access. The certificate will be copied there, together with the trust settings. Double-click a certificate and you will be able to change it's settings. Note: you ...
user avatar
  • 2,570
8 votes

How do you remove SSL certificate exceptions on iOS?

You can delete the SSL certificate. Go to Settings → General → Reset → Network Settings. This resolves the problem. [EDIT] As of iOS 10.3.2 this does NOT work. Instead it wipes out your network ...
user avatar
  • 81
8 votes

Chrome showing the site's security certificate is not trusted for GitHub

An old certificate expired on July 26h, 2014. Many users had it stored in their keychains, causing the errors you saw. Here is a detailed solution: Based on https://www.yesthatallen.com/fixing-an-old-...
user avatar
8 votes

How to view certificate info without installing

in addition to Krishen approved answer above about selecting the certificate (.cer, .pem, others) in finder and hitting 'space', you can also right click and select Quick Look . I just tested it on 10....
user avatar
  • 181
8 votes

How "official" is libressl support in High Sierra?

MacOS provided openssl-0.9.8 (when the world was using 1.0.2, and contemplating 1.1 and 1.1.1) until High Sierra release. Now in MacOS 10.13.5 it's libressl-2.2.7, while the current libressl is 2.7.4. ...
user avatar
  • 189
7 votes
Accepted

View TLS Certificate in Safari 8 / Yosemite

The padlock should still be there and by clicking on it, you get the certificate information as before: Clicking on «Show Certificate» gives the details:
user avatar
  • 8,212
7 votes

How do you remove SSL certificate exceptions on iOS?

I found a nice blog post that gives some good information and tips regarding ssl certificates. Once the SSL exception is added there doesn’t seem to be a way to remove it in iOS 7. In previous ...
user avatar
  • 2,767
7 votes

Homebrew Cask download failure. SSL certificate problem: certificate has expired

For people that don't have a brewed installed curl, the accepted answer is not sufficient because it's impossible to install the homebrew curl with invalid certificates (since brew install uses the ...
user avatar
  • 171
5 votes

How to fix curl: (60) SSL certificate: Invalid certificate chain when using sudo

This is really in the output hint: echo insecure >> ~/.curlrc Advantage of using above solution is that it works for all curl commands, but it is not recommended since it may introduce MITM ...
user avatar
  • 159
5 votes
Accepted

How "official" is libressl support in High Sierra?

To answer the question asked: How “official” is libreSSL support in High Sierra? There is no official support. Apple makes available all Open Source code that it uses in macOS/OS X. From the ...
user avatar
  • 81.6k
4 votes
Accepted

Chrome showing the site's security certificate is not trusted for GitHub

I had this same problem. Open Keychain Access in Applications>Utilities. Make sure the selected keychain (top left) is login and the category (middle to bottom left) is certificates. Right click on ...
user avatar
  • 628
4 votes
Accepted

How can I tell which SSL ciphersuite Safari is using?

The information you are looking for is easily available in Chrome (v35). Just click on the lock icon in the browser location bar and the cipher suite details are there. But you asked about Safari. ...
user avatar
  • 1,553
4 votes

What password does OSX Server use when importing SSL certificates?

It looks like OP's problem has been solved, but for the record it's actually fairly easy to get the keys from OS X Server, as long as you have admin access to the server. I'll give you two ways to do ...
user avatar
4 votes

How to view certificate info without installing

You can also use KeyStore Explorer, an application to view/create/edit certificate and trust stores, and conversion between them. It's really powerful but might be too much for you.
user avatar
4 votes

SSL error with mbsync

This is a certificate issue. In my .mbsyncrc, I included as CertificateFile the entire certificate chain (Gmail -> Google, Google -> GeoTrust, GeoTrust -> Equifax). This started intermittently ...
user avatar
4 votes
Accepted

How to view certificates from my keychain on iOS?

You can find certificates installed on your device in Settings → General → About → Certificate Trust Settings. Here you can switch root certificates on and off as you please.                          ...
user avatar
  • 185k
4 votes

Updating SSL root certs on old Mac (running Lion)

Yes, if the certificate is being accepted by other, newer machines, the issue it does seem likely that your father's machine isn't receiving updates to its root certificate trust store. I wasn't able ...
user avatar
  • 6,327
4 votes
Accepted

Error downloading YouTube video using youtube-dl

For some reason youtube-dl has cert issues. I have always found a solution by using --no-check-certificate argument. From the man page: --no-check-certificate Suppress HTTPS ...
user avatar
  • 9,354
4 votes

Why does iOS 13 not trust my own Root CA?

I myself am working on this for days now. 2 whole weekends without any luck. So right now I try to get faith again. (to get iOS 13 and iPadOS to accept a certificates descendent from a self-signed ...
user avatar
4 votes

Beware: macOS Finder "Connect to Server" accepts FTPS URLs (FTP in a SSL/TLS tunnel) but actually connects via plain FTP!

No! Beware: Even though you explicitly requested FTPS, Finder actually uses FTP ! That is quite a horrible user experience in regards to https://apple.com/privacy/ Without telling the user, Finder ...
user avatar
  • 508
3 votes
Accepted

How do I fix the SSL warning I get when visiting github.com?

Should I worry about this? You should always distrust SSL connections that are using expired certificates. This could indicate a simple oversight on the part of the website operator or it could ...
user avatar
  • 44.2k
3 votes
Accepted

Postfix SSL/TLS certificates issue

The option specifies where the root certificates of the trusted issuers are located. On OS X they are stored in the Keychain. You can extract them with $ sudo security find-certificate -a -p /...
user avatar
  • 8,212
3 votes
Accepted

How can I identify the cause of this SSL error in Safari 6?

Safari 6.1.6 supports only TLS 1.0 (which is increasingly being turned off by servers concerned about the BEAST attack), and there's no error message apart from that generic "SSL error has occurred" ...
user avatar
3 votes
Accepted

Why does find-certificates have some missing?

This is due to a combination of two factors: Specifying the SystemRootCertificates.keychain is necessary, otherwise a personal keychain is used. openssl will not parse a stream of multiple keys into ...
user avatar
3 votes

tlsv1 alert protocol version when connecting via SSL to OS X Server

curl 7.19.0 ... OpenSSL/0.9.8h This is a very old (and unsupported) version of OpenSSL you are using here which has no support for modern protocols like TLS 1.2 and modern ECDHE ciphers. Chances are ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible