Apple Intelligence now features Image Playground, Genmoji, Writing Tools enhancements, seamless support for ChatGPT, and visual intelligence.

Apple Intelligence has also begun language expansion with localized English support for Australia, Canada, Ireland, New Zealand, South Africa, and the U.K. Learn more >

You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Cannot import .pfx certificate

Hey, I would like to add . pfx certificate to Keychain but it still throws a warning about the wrong password. The password is correct, I use the same certificate on a Windows PC. After I guess the third incorrect password it throws a different error MAC VERIFICATION FAILED DURING PKCS12 IMPORT.


Do you know what to do with it?

MacBook Air, macOS 13.2

Posted on Mar 21, 2023 3:31 PM

Reply
Question marked as Top-ranking reply

Posted on Mar 21, 2023 4:47 PM

Best answer By:

James Brickley 

James Brickley

User level:

 Level 4

3,958 points

OpenSSL 3.x changed the default algorithm and it's not compatible with macOS SSL libraries which are no longer staying current with OpenSSL due to breaking changes such as this. 


Fortunately, OpenSSL added a -legacy flag to revert to the previous algorithm. Add the -legacy flag after your -export flag parameter in your openssl command string. 


The alternative is to downgrade openssl to 1.x 

Posted on Jan 3, 2023 7:02 AM

1 reply
Question marked as Top-ranking reply

Mar 21, 2023 4:47 PM in response to vp116

Best answer By:

James Brickley 

James Brickley

User level:

 Level 4

3,958 points

OpenSSL 3.x changed the default algorithm and it's not compatible with macOS SSL libraries which are no longer staying current with OpenSSL due to breaking changes such as this. 


Fortunately, OpenSSL added a -legacy flag to revert to the previous algorithm. Add the -legacy flag after your -export flag parameter in your openssl command string. 


The alternative is to downgrade openssl to 1.x 

Posted on Jan 3, 2023 7:02 AM

Cannot import .pfx certificate

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.