Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Safari can't verify the identity of the website

This message comes up every time I try to log in to my bank, ebay, paypal, vodafone, hotmail, etc. Basically everything I try to log into. It tells me the certificate is invalid, or the issuer is invalid. This just started one day a little while ago. I have all these pages bookmarked and safari used to be fine with them. I downloaded firefox to see if it was just a safari thing, and it did not have this problem. Can someone please tell me how to fix this with safari? Version 5.0.1

MacBook Pro, Mac OS X (10.6.4)

Posted on Aug 8, 2010 8:48 PM

Reply
Question marked as Best reply

Posted on Aug 9, 2010 12:15 AM

HI and welcome to Apple Discussions....

From the Safari Menu Bar click Safari/Reset Safari. Select all the boxes. Then from the Menu Bar click Safari/Quit Safari.

Now relaunch Safari. Try logging into one of those sites.

If that didn't help, try troubleshooting the Safari .plist file.

Open a Finder window. Select your Home Folder in the Sidebar on the left. It has a small house icon. Then open the Library folder then the Preferences folder. Move the com.apple.Safari.plist file from the Preferences folder to the Desktop. Now launch Safari. Navigate to a site that normally has a signed certificate like your bank. If you can do this without the invalid certificate dialog, move that .plist file to the Trash.









Carolyn 🙂
93 replies

Aug 29, 2013 3:17 PM in response to RussyPlum

I have been busing Comcast for about 12 years now, never had a issue with them. Since, the error only appears when I am on my private network, then it must be some malicious script somewhere. I have a external hard drive hooked to my router, where I keep movies, music, pictures and backups. If I turn the WiFi off on my iPad or iPhone, then I never get the error, its only while I use my network.

Sep 6, 2013 5:41 AM in response to Cesar Perez

Hi, I had the same problem and didn't want to continue putting information at risk. I had the right time and date also, but i knoticed a box that said Set date and time automatically so I clicked/checked on it. I think that worked because i didn't get that alarming message going into my tmobile site or my bank account. Hope this helps. 🙂

Dec 29, 2013 11:35 AM in response to RussyPlum

SOLUTION:


Open terminal:

sudo bash

<put in your login password> (this will give your root access)

cd /Library/

mv Keychains Keychains.bad

REBOOT THE MACHINE. The system will then rebuild the required keychains and certs. From there on, you will manually have to provide passwords to each site you log into. (BTW, if the system tells you that rename is not allowed, quit all programs that may be using the Keychains. Being root, shouldn't stop you from completing the rename though.)


It's probably malware. Happened to my Air after a few months of use, tweaking the system, and allowing non-signed apps to run. I also ran in developer mode (less secure). Something got a hold of the Keychains and conveniently broke them (to the attacker's advantage). When I got my Mavericks, I did a backup and a clean install. All was fine. I then had to restore some files off the backup (Time Machine, which is limited in use in the first place). Since I used the same login, it asked me to rename the user. Which I did. But, I did not expect it to overwrite my sytem files, nothing to say about Keychains and iCloud. After the restore, I logged into my Mavericks account, and of course, ANY Internet access was met by a certificate error. Even Kaspersky couldn't connect and download the latest virus definitions. The AppStore couldn't connect either. Chrome, Safari, FireFox - all the same cert issues.


I followed the above procedure and it resolved the problem. I am now rebuilding the Keychains site by site. I changed my iCloud password just in case.


Hope this solves your issue. Remember, you will lose ALL saved Internet passwords. But you'll have a piece of mind that it's now clean and working. Watch out for any programs you are launching that don't have a CODE signed cert (Mavericks usually will tell you that and prevent launching the program. There are several ways to bypass this, the easiest being right-clicking on the program and selecting OPEN. But you are dealing with programs that are usually either open source (and are too cheap to buy a code-signing cert) or they're malware.


You may also want to rename the klif.kext - I have not searched what uses that, but Mavericks told me that it's from an unidentified developer. I went to /System/Library/Extensions/ and renamed klif.kext to klif.kext.bad_do_not_use and rebooted.


Good luck.

Dec 30, 2013 1:56 PM in response to KALAFUT

Hey,


I am still getting the same errors. I just wanted to add that it happens with ALL devices connected to my home network, ex. iPhones, iPads, MacBooks, iMacs. So I am assuming that it is something on the network, router. Since it happens with everyone that connects to it. I also have an external hard drive attached to the router via ethernet. I am not 100% sure that it is related but seems to me like there is a connection.


btw ... still getting all those crazy messages ...

Dec 31, 2013 6:02 AM in response to Cesar Perez

Coud be Cesar. A malware program spread through all of your Apple devices and perhaps, using your saved passwords to your WiFi or router in a shared keychain, did some bad joojoo there. But I don't think it is hardware related. Do you own any smart devices other than Apple to prove the hardware theory? A Win PC or a smart TV? If those don't show any signs of this problem, it is not tied to your network hardware.


I was a bit preoccupied and did not get the chance to figure out the AppStore issue, but I noticed that after the restore of the second account, a lot of the applications are owned by root:wheel as well as <login>:admin or <old login>:admin. There are some that are owned by user 503:admin. That's very odd. I'll continue my investigating. But given that in some countries it's New Year's Eve, or already passed, today doesn't look promising.


Also, at my login screen, a third user appeared (as an option): Guest. That warrants another investigation. And I do need to re-register my Kaspersky, as it keeps crying about not all options not being enabled. Ugh.


Happy 2014.

Jan 11, 2014 12:25 PM in response to jrs1957

The problem is that all devices connected to the router have the same issue, I have been testing an Android based tablet and it has not shown the same error as ALL types of Apple products. I have read elsewhere that some people have changed their routers, and that seems to fix the problem. So it looks like a router issue. I am not making a statement, but so far is what makes more sense to me.

Safari can't verify the identity of the website

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.