Q: app store unavailable following security update 2015-004 (Mavericks)

I don't remember what it did exactly, but Apple Support had me shut down and hold Command–Option–Control–Power button for 5 seconds and then power it back on. It took forever to restart but it finally let me do the update.

If that didn't work, our next step was to Scan the Disk Utility and repair files if necessary.

In response to Pioneer_11: I downloaded and installed the 2015-004 Security update from the location you suggested. The installation was performed by my mid 2012 MBA, but unfortunately nothing changed. App Store and Itunes Store still unavailable...

I wonder, should I (if possible) have uninstalled the update first?

I had this same problem. On my system, it turned out the application Cyberduck is responsible for placing problematic Verisign certificates on the login keychain. As described in this thread, deleting those entries fixes the Mac. The latest version of Cyberduck (4.7) no longer writes the entries, but old ones may still be lying around.

I reported this particular solution earlier in the thread. I am also running Cyberduck (an old version too) so this explains how those rogue certs got into the login keychain. Good find.

@ohmiap

@Nelson Minar

How did you find out that Cyberduck was the problem? What diagnostic procedure did you follow?

I haven't got Cyberduck installed, but it might be some other app is causing the problematic Verisign certificates on the login keychain on my mac.

*** Found a FIX ***

I tried all of Linc's steps but nothing worked (even deleting the Verisign certificates)

I ended up :

- Re-installing cyberduck (latest version 4.7)

- Re-download and installing "security update 2015-004"

http://supportdownload.apple.com/download.info.apple.com/Apple_Support_Area/Appl e_Software_Updates/Mac_OS_X/downloads/031-20355.20150408.EB749/SecUpd2015-004Mav ericks.dmg

- Once it installed and I restarted, everything was fixed (App Store, iTunes, Chrome, etc.)

Hope this helps someone

Josh

Solved!  At last!

I cannot say exactly which step was the key, so here are most of the steps I took.  Hopefully this helps someone.

1. Took the steps in Invalid or incorrect Certificates including reboot.
2. Took the steps in Edit your Keychain including reboot.
3. Downloaded and manually reinstalled Security Update 2015-004.

4. Repaired permissions and directories with Recovery reboot.

5. Took the steps in Invalid or incorrect Certificates including reboot.

6. Took the steps in Edit your Keychain including reboot.

I've gone through some of these steps multiple times, just hoping it would work that time...

Today -- when I went into Mail.app, it whined about the certs for me.com servers -- so I made *that* always trusted.  And this time, iTunes.app didn't complain about any certs!  And this time, Software Update.app didn't complain about any certs!  And it successfully applied the three-week delayed updates!

So I'm hoping it's all done and done.  OMG, frustrating along the way!

Thanks for this tip (of deleting all the VeriSign certs from the login keychain)! I had to restart my Chrome to get it to work again, but man, was it good to finally see often-used sites again.

thanks for great HINT with Verisign Certificates - all works now - this is weired anyway ...

michal

If none of the above works, try this if you have installed Mac's latest updates. (Security Update 2015-004 broke VeriSign SSL certificates system wide)

Symptoms should also include a break of iTunes Store and the App Store on MBPs.

Here's the solution that worked for me: http://stiobhart.net/2015-05-03-apple-broke-ssl/

One more thing: I also had to delete the following and download --> replace the DigiCert certificates too.  They were:

1. DigiCert High Assurance CA-3,
2. DigiCert High Assurance EV Root CA, and
3. DigiCert SHA2 Extended Validation Server CA.

So far so good with the additional certs. You can get the DigiCert certificates here: https://www.digicert.com/digicert-root-certificates.htm#roots

Hope this helps!

Here's what worked on my 10.9.5 Mini:

The AppStore and iTunes problem was only with one user. So I thought the cause must be in this user's personal Keychain. After browsing the web for what others did I deleted the one Verisign certificate (VeriSign Class 3 Public Primary Certification Authority - G5) in this user's login keychain and all is well since. Not even a restart was required.

Thanks for all the good work in this community!

This helped me.  Thank you. 

Same problem here after the 10.11.1 update.

Is there an easy solution known or do I have to go through all these steps...?

Many thanks!

coxorange wrote:

Same problem here after the 10.11.1 update.

Is there an easy solution known or do I have to go through all these steps...?

After restarting in Safe Mode once, the problem was resolved.

Thank you! I am not any sort of programming literate, but your instructions helped me fix iTunes security certificate issues.

Very grateful for the clear, step-by-step instructions.