Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Question:

Question: How to clear Safari SSL client certificate cache?

I have two SSL client certificates which I can use to access an Apache web server via Safari. Let's call them Cert-A and Cert-B. I can use either certificate to authenticate. When I first accessed the web server, a selection dialog popped up and I chose Cert-A for authentication. Now whenever I access the web server, Safari no longer displays a selection dialog, but automatically uses Cert-A. Thus, I cannot switch to Cert-B.


I have deleted all web objects and cookies via Safari preferences, I have cleared my ~/Library/Caches directory, I have rebooted the machine -- it does not make a difference. How can I force Safari to display the certificate selection dialog again? Is there a special certificate cache I can clear?


Thanks for your suggestions.


-Ralph

MacBook Pro with Retina display, OS X Mountain Lion (10.8.2)

Posted on Sep 30, 2012 6:57 AM

Reply
Question marked as Helpful

May 1, 2014 3:57 PM in response to RS-ASC In response to RS-ASC

I just had this happen, and noticed when you select a certificate it creates an Identity Preference in the Keychain.


I found it by typing part of the domain name into the search box of Keychain, and it shows up a Kind called "Identity Preference". Just delete this and it will prompt the certificate selection again.


Alternatively, if you double click it you can select the perferred certificate in the dialog.

May 1, 2014 3:57 PM

There’s more to the conversation

Read all replies

Sep 30, 2012 9:53 AM in response to Linc Davis In response to Linc Davis

Thanks, Linc. I should have stated that I was aware of this feature. What I want to be able to do is choose the proper certificate from a popup whenever I access the web page. One of the certificates is used for everyday work, while the other is used for administrative tasks. Modifying an identity preference each time I need to switch my role is too cumbersome.


-Ralph

Sep 30, 2012 9:53 AM

Reply Helpful

Sep 30, 2012 10:01 AM in response to RS-ASC In response to RS-ASC

Your requirements are unusual. The only way I can think of to get what you want is to have a different URL that resolves to the same page. I would try another browser, such as Firefox or Chromium, that might have more flexible certificate management than Safari.

Sep 30, 2012 10:01 AM

Reply Helpful

Sep 30, 2012 10:15 AM in response to Linc Davis In response to Linc Davis

I don't think it is unusual to use different identities for different tasks. One would not work as 'root' for mundane operations. Anyway, Firefox offers a certificate selection dialog, but I'd be rather disappointed if Safari can't provide such a simple thing.


-Ralph

Sep 30, 2012 10:15 AM

Reply Helpful

Mar 18, 2014 8:00 AM in response to Linc Davis In response to Linc Davis

This is not in any way an 'unusual' requirement. Selecting between multiple certificates with varying levels of access is essential when testing - who wants to have to manually assign a certificate every single time they want to switch? This is not an issue in any other major browser.

Mar 18, 2014 8:00 AM

Reply Helpful
Question marked as Helpful

May 1, 2014 3:57 PM in response to RS-ASC In response to RS-ASC

I just had this happen, and noticed when you select a certificate it creates an Identity Preference in the Keychain.


I found it by typing part of the domain name into the search box of Keychain, and it shows up a Kind called "Identity Preference". Just delete this and it will prompt the certificate selection again.


Alternatively, if you double click it you can select the perferred certificate in the dialog.

May 1, 2014 3:57 PM

Reply Helpful (9)

Jun 4, 2017 4:04 AM in response to RS-ASC In response to RS-ASC

"I found it by typing part of the domain name into the search box of Keychain, and it shows up a Kind called "Identity Preference". Just delete this", then I had to clear the Safari cache. upon relying into the site I was ale to choose the correct certificate to authenticate.

Jun 4, 2017 4:04 AM

Reply Helpful
User profile for user: RS-ASC

Question: How to clear Safari SSL client certificate cache?