OSX Yosemite certificates "invalid" on secure sites

Hey,


So i upgraded to OSX Yosemite (version 10.10.1) on my Macbook Pro (15-inch, mid 2012) and since then I can't access secured sites that require payment! Whenever I go onto these sites it brings up a drop down box asking for a "certificate" , which is then rejected by the site and I receive a 403 - Forbidden: Access is denied. error page. This only happens on my macbook pro. My iPhone and windows desktop can still access these sites using the internet connection.


Please help as this is incredibly frustrating as I buy a lot of products online!

MacBook Pro (15-inch Mid 2012), OS X Yosemite (10.10.1)

Posted on Dec 13, 2014 7:47 PM

Reply
2 replies

Dec 13, 2014 9:34 PM in response to Sami7197

Some websites require a special client certficate for access. If you don't have that certficate, you'll have to contact the site operator to find out how to get one.

Sometimes the problem is caused by a web server that is configured to request an optional client certificate. Safari treats the request as mandatory. In that case, other browsers such as Firefox and Chrome may be able to connect to the site, because they ignore the request.

The first time you were prompted for a certificate, you may have clicked through a dialog that requested access to the Apple certificate in your keychain that is used to secure the iMessage service. In that case, you may be able to regain access to the site in Safari by doing as follows.

Back up all data.

Double-click anywhere in the line below on this page to select it:

com.apple.idms.appleid.prd

Copy the selected text to the Clipboard by pressing the key combination command-C.

Launch the Keychain Access application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

Paste into the search field in the Keychain Access window by clicking in it and pressing the key combination command-V. An item may appear in the list of keychain items. The Name will begin with string you searched for, and the Kind will be "certificate."

Delete the item by selecting it and pressing the delete key. It will be recreated automatically the next time you launch the Messages or FaceTime application.

The next time you visit a site that prompts for an optional client certificate, cancel out of the prompt. You may have to do this several times before the server stops asking.

Credit for this idea to Christian Braukmueller of SAP.

Dec 13, 2014 10:14 PM in response to Linc Davis

the only thing I clicked on was "checkout". I could access both the sites that have asked for the certificate without any problems BEFORE I upgraded to OSX Yosemite. I can't cancel out of the request I tried numeous times but it just kept bringing up the drop down box with the certificates. I will try what you suggested but I doubt it will wirk as I tried a similar thing and all it did was make the issue worse

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

OSX Yosemite certificates "invalid" on secure sites

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.