Apple Intelligence now features Image Playground, Genmoji, Writing Tools enhancements, seamless support for ChatGPT, and visual intelligence.

Apple Intelligence has also begun language expansion with localized English support for Australia, Canada, Ireland, New Zealand, South Africa, and the U.K. Learn more >

You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

How to manage (remove) Safari SSL warning exceptions?

I always thought bypassing SSL certificate warnings was a one-time exception that won't persist:



But after visiting the site via this warning page link for testing purposes I'm allowed to open it again next time without any warning, which is honestly something I wouldn't expect (there's no warning I'm adding some kind of permanent exception to the system)!


Where can I manage those exceptions?


I'd intuitively go looking under the "padlock" icon with SSL details in the address bar (where you normally see certificate details et al.), nonetheless these exceptions don't show the padlock as they're not secure so there's nowhere to click for certificate/trust details. These certs are also not anywhere in the keychain so no way to remove them or reset trust settings.


I see the sites stored in BypassedInvalidCertificateWarning.plist in Safari 16's Container folder as per https://apple.stackexchange.com/a/441530 — but is there any UI for managing this that I'm missing?


Thanks for any help.

iMac 27″, macOS 12.1

Posted on Dec 19, 2023 9:57 AM

Reply

Similar questions

1 reply

Apr 1, 2024 4:00 PM in response to jbrasna

It appears there's no way to do it through the UI based on the several hours I've poured into this trying to find an answer. Even worse, the only reliable way I've found to remove the exception is to delete the entire file `~/Library/Containers/com.apple.Safari/Data/Library/Safari/BypassedInvalidCertificateWarning.plist`. If I want to delete just a single entry from the bypass list I have to modify a plist file that isn't plaintext.


For example if I have expired.badssl.com added to the bypass list, the plist looks something like this:


bplist00?_expired.badssl.com443_BypassedInvalidCertificateDate_BypassedInvalidCertificateHost_'BypassedInvalidCertificateExceptionData3A?ݹ?Q S_expired.badssl.comOkbplist00??_TemporalValidityZSHA1DigesO@K?/L????:??R>?q?

"-.E

   #*Kl??? "%  


How the heck am I supposed to modify that easily without breaking something in the way the file needs to be formatted? This is so un-userfriendly.


The stack exchange post you linked seems to be the only other mention of this file or the entire problem related to this file, so it seems that few people have run into this problem but for web developers this is a perplexing waste of time when trying to use Safari to do development. I almost decided to ditch Safari and use Chrome because solving the warning suppression problem for certs was straightforward with that browser. I prefer to use Safari for development so I had to find a solution.


This is unacceptable functionality from Apple. I wasted several hours today trying to figure out how to reinstate the bad cert warning. I was resetting Safari, deleting all extensions, clearing cache, trying desperately to find an entry in Keychain Access, all to no avail. Luckily I had the idea to search the files in `~/Library` for anything with `Safari` in it and I stumbled upon the magic plist.


I hope I am wrong and there is some way to do this through the UI, but currently it seems the only way to do what you're asking is to delete the entire Bypassed Invalid Certificate Warning plist. If someone that actually works on developing Safari could explain to us how to single out and delete only a single exception that would be excellent, but seeing as this thread got no responses in over 3 months I am not going to hold my breath. I hope I'm wrong.

How to manage (remove) Safari SSL warning exceptions?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.