Failed Software Update - Refusing invalid certificate from host: swscan.apple.com

Question

kubrick2001 Author

Level 1

4 points

Failed Software Update - Refusing invalid certificate from host: swscan.apple.com

I have a Mac mini 2018 running 10.14.5 (Mojave). I have issues with "software update" and App Store logging in. On my MacBook Air no problems.

In the log of /var/log/install.log I see there is an error :

"Failed Software Update - Refusing invalid certificate from host: swscan.apple.com"

If I do a lookup of swscan.apple.com on my MacBook Air and Mac mini. They resolved to the same ip address. So, no network issue. So there is something wrong on my Mac mini with the apple certificate.

What I already tried:

check disk through disk utility
sign out/sign in icloud
removed in folder ~/Library/Preferences/ the App Store config files
removed in folder ‘/Library/Security/Trust Settings' the files
dis-trust and restrust the "Digicert High Assurance EV root CA” in keychain access
removed the files under /var/db/crls/*

Any idea what I can do more to solve this issue ?

Mac mini, macOS 10.14

Posted on May 27, 2019 12:38 AM

Reply

Answer 1

rcosta887

Level 4

3,598 points

May 27, 2019 1:26 AM in response to kubrick2001

There are two more things you can try:

Sign out of the App Store and try to sign back in.
Install the 10.14.5 Supplement Update: https://support.apple.com/kb/DL2000?locale=en_US

This will update your macOS by re-applying all updates from the original Mojave release at once, and may fix your App Store into again working properly so you can download and update whatever other apps.

Reply

Answer 2

kubrick2001 Author

Level 1

4 points

May 27, 2019 2:11 AM in response to rcosta887

I found the solution ! :) I compared all the keys in the keychain access with my MacBook Air. Under "System", I saw an extra digicert certificate. So I deleted the digicert certificate under system (not system roots), and the problem was solved.

Reply

Answer 3

rcosta887

Level 4

3,598 points

May 27, 2019 12:43 AM in response to kubrick2001

Have you checked to make sure your Mac Mini's system date, and time is correct? That's usually the issue with certificate errors.

If your date/time is set properly try changing your time zone setting (either turning off automatic if it's on automatic time zone, or turning on automatic if it's set manually).

Reply