Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Level 1

5 points

safari and amazon - toxic - needs a fix

My Safari browser seems to have become entwined with Amazon.com in a way that is destroying functionality on the Amazon website. I've confirmed that the problem is not on Amazon's end, and Apple Support has been unable to resolve the problem. I believe the problem is that something has attached itself to Safari that is linking it in a toxic way to Amazon. Anyone ever hear of this? Check it out: After browsing Amazon briefly the links stop working and I'm given a generic "sorry we're having a problem but we're working on it" screen, after which I can no longer access Amazon unless I restart the computer.

And most strangely, even if I start with the secure (https) address, I end up with Safari telling me the website certificate is not valid. The certificate turns out to be www.amazon.com.br. This is Amazon in Portuguese, for the Brazilian market! Today I was completely unable to log in, although there was nothing wrong with my account. The Amazon rep got me running again, but suggested I switch to Firefox for Amazon, which he claims is more compatible.

So far I've emptied the cache and deleted Amazon cookies many times. I've also reset the system management controller. Any other suggestions? Should I bite the bullet and reset Safari?

Is there a way to look into the background of Safari and see if amazon.com.br is hiding there somewhere? Is there a scan I could run to see if there's malware that's causing the problem?

And lastly, should I simply download Firefox in order to browse Amazon only? I'd really like to solve the problem, not put a bandaid on it.

Thanks for any wisdom. I browse Amazon a lot so this is really a pain.

iMac, Mac OS X (10.6.8)

Posted on Feb 1, 2013 11:04 AM

62 replies

MilosA Author

Level 1

5 points

Feb 2, 2013 3:00 PM in response to Linc Davis

I copied your sudo link and launched the Terminal application, put in my password (I'm an admin) and this is the line that appeared below:

test-test-imac:~Cara$

I rebooted, and launched Keychain Access. The System keychain had no invalid certificates, but it hasn't since I deleted them. I also looked over all the files in Keychain and found one for www.amazon.com among the many. Should I delete that?

Unfortunately, now when I open Amazon, it has again lost most of its functionality and I get error messages immediately.

Linc Davis

Level 10

209,559 points

Feb 2, 2013 3:13 PM in response to MilosA

Are there any certificates in the System keychain now?

TildeBee

Level 7

31,917 points

Feb 2, 2013 3:59 PM in response to MilosA

Milos --

I couldn't get in to my Amazon account eitther . . . for several days. Wrong password, it said. I reported it to Amazon, and it turned out that someone had hacked my account,and locked me out of logging in. I was lucky, however, the only thing fraudulently ordered was a 52" TV, scheduled for delivery to an address in Florida,, where I don't live.

While they were about figuring out what to charge on my bank account on file with Amazon, I was unable to log in.

That's what I meant. Not what you ordered, but what someone else could have.

MilosA Author

Level 1

5 points

Feb 2, 2013 4:00 PM in response to Linc Davis

Yes, these two:

Apple Code Signing Certification Authority

Software Signing

MilosA Author

Level 1

5 points

Feb 2, 2013 4:02 PM in response to TildeBee

Bee,

Just checked my orders. Nothing funny going on there.

Linc Davis

Level 10

209,559 points

Feb 2, 2013 5:04 PM in response to MilosA

Clearly, nothing is wrong with your Amazon account, because you can log into it from another device. It's also clear that the problem doesn't reside in your user account on the Mac, or in the network. We've ruled all that out.

Let's now try restoring the System keychain from a known-good backup. This is a last attempt at a precise fix. If it doesn't work, you're going to have to reinstall OS X.

Triple-click the line below to select it:

/Library/Keychains/System.keychain

Right-click or control-click the highlighted line and select

Services ▹ Reveal

from the contextual menu. A Finder window should open with a file selected.

Enter Time Machine and scroll back to the last snapshot taken on a date when you know the problem hadn't yet started. Restore the selected file. Again, refer to the video for details on how to do this. You'll be prompted for your password.

After restoring the keychain file, reboot again, and check the System keychain. You should now have the certificates that were deleted, and they should be valid. If either one is not valid, double-click it and post the reason shown in the small window that opens.

MilosA Author

Level 1

5 points

Feb 2, 2013 6:28 PM in response to Linc Davis

Linc,

I followed your instructions and restored from the beginning of November 2012. I made sure to REPLACE the current file with the earlier one from Time Machine.

When I checked the System keychain, the two certificates that I had deleted were not there.

I decided to try again, using your /Library/ link above.

This time the Finder window showed me two System keychain files, one called System.keychain / today, 9:16 PM (this one was highlighted), and the other called System.keychain.2013-02-02.21/16/15 / June 7, 2011.

I decided not to run Time Machine again, but rather just give you the above information.

Linc Davis

Level 10

209,559 points

Feb 2, 2013 9:47 PM in response to MilosA

Delete the extra System keychain from the list (File > Delete Keychain...).

MilosA Author

Level 1

5 points

Feb 2, 2013 9:54 PM in response to Linc Davis

By "extra" I assume you mean the second one, dated June 7, 2011?

Should I then attempt to run Time Machine again in order to repopulate the System keychain with the two missing certificates, or are we forgetting about them?

I'm signing off for the night, and will check back tomorrow for your reply.

Again, THANK YOU for your incredible support and persistence.

Linc Davis

Level 10

209,559 points

Feb 3, 2013 8:16 AM in response to MilosA

Keep the item named exactly "System.keychain" and delete the one with the longer name.

MilosA Author

Level 1

5 points

Feb 3, 2013 5:12 PM in response to Linc Davis

Hi Linc,

I did as you asked (removed the extra System keychain). Now there are just the two valid certificates I mentioned before: Apple Code Signing Certification Authority and Software Signing.

You didn't mention if you want me to try again to reintroduce the two corrupt ones that I deleted, using Time Machine.

Unfortunately, I just went to Amazon and had functionality problems again. This time listening to tracks cut off in the middle and I got the error message. When I tried to return to the site, I got the same Safari warning about an invalid certificate as before: www.amazon.com.br.

I checked the System keychain again but there are no invalid certs.

Other than my being able to log in (and that could break down any minute), I'm back to square one.

Anything else we can try before I reinstall OS X?

If not, are you sure that will solve the problem? And would you be kind enough to point me towards some good documentation for the task so I'll have some guidelines when I do it?

Thanks again for your efforts, I really appreciate it. If nothing else, I've learned a lot about my Mac in this process.

Milos

Linc Davis

Level 10

209,559 points

Feb 4, 2013 8:57 AM in response to MilosA

You were given a suggestion to use Firefox to access your Amazon. Did you try that? If not, please do.

MilosA Author

Level 1

5 points

Feb 4, 2013 12:20 PM in response to Linc Davis

I downloaded Firefox, and here's what happened:

I went to Amazon and logged in normally. Things started off fine, but after a number of random clicks, up came this message from Firefox:

"This Connection is Untrusted. You have asked Firefox to connect securely to www.amazon.com, but we can't confirm that your connection is secure. Normally, when you try to connect securely, sites will present trusted identification to prove that you are to the right place. However, this site's identity can't be verified."

I asked for the underlying Technical Information, and it said this:

"www.amazon.com uses an invalid security certificate. The certificate is only valid for www.amazon.com.br

(Error code: ssl_error_bad_cert_domain)"

Same issue as before!

What do you make of this?

Linc Davis

Level 10

209,559 points

Feb 4, 2013 2:01 PM in response to MilosA

I think this has gone on long enough. Back up all data, then boot from your installation disc by holding down the C key at startup. Reinstall OS X. After rebooting, run Software Update. You may have to run it more than once to get all available updates.

Test. If you still have the problem, boot from the installation disc again, but this time erase the boot volume in Disk Utility. Then install again. When you reboot, you'll be given the option to restore your data from a backup. Choose to restore user data, settings, and applications -- not "other files."

MilosA Author

Level 1

5 points

Feb 4, 2013 4:21 PM in response to Linc Davis

Thanks, Linc. I agree -- it's gone on long enough and we're both busy, especially you.

Just one last question and then hopefully you will hear from me no more.

To "back up all data" do I have to do something other than what Time Machine would do, or simply tell Time Machine to do a back-up right then and there?

safari and amazon - toxic - needs a fix