transtech4u

Q: user profile ssl certificate error

I've done my best to review everything I can on the web prior to posting this.

 

I have a macbook air that recently started having issues with accessing google and yahoo because of ssl certificate errors.

 

I've tried the resolution as outlined on many high level search results by adjusting the keychain certificate checks as described here: http://securityskeptic.typepad.com/the-security-skeptic/2011/04/mac-users-listen -up-enable-certificate-checking.html

 

My troubleshooting lead me to making a new user profile on my laptop and testing to see if the problem continued to the new user profile.  IT DOES NOT.  The new user can access google and yahoo and verifies ssl certs just fine.

 

So this problem is specific to the user profile.

 

I'm close to backing up my data and just stitching in my data into a new user profile.  My attempts at resetting my keychain have been fruitless. That did not solve my problem.

 

How are certificates stored in the keychain?  Is there a way to trick a user profile to reloading all the trusted certificates as I see them in my new user profile?

 

Please help.  I don't want to transfer my info to a new profile...looking like I may have to.

 

Thanks in advance,

Jason

Posted on Jul 18, 2015 10:35 AM

Close

Q: user profile ssl certificate error

  • All replies
  • Helpful answers

  • by Eric Root,

    Eric Root Eric Root Jul 19, 2015 9:26 AM in response to transtech4u
    Level 9 (71,593 points)
    iTunes
    Jul 19, 2015 9:26 AM in response to transtech4u

    Keychain Issues - Resolve  see post by Kappy


    From Safari Help

    Change the trust settings of a certificate

    You can view or change a certificate’strust policies in Keychain Access.

    Open Keychain Access for me

    1. In the Category list, select a category.
    2. Select a certificate, then choose File > Get Info.
    3. Click the Trust disclosure triangle to display the trust policies for the certificate.
    4. To override the trust policies, choose new trust settings from the pop-up menus.

     

    Safari Certificate not recognized


    You can also try deleting the certificate and see if a new one downloads.

  • by transtech4u,

    transtech4u transtech4u Jul 19, 2015 10:22 AM in response to Eric Root
    Level 1 (0 points)
    Jul 19, 2015 10:22 AM in response to Eric Root

    thanks for the reply, but it doesn't seem to be my solution.  I've followed the steps to create a new keychain, but the problem is that when I do that,  the new keychain doesn't have a single certificate in it.  There is something very much missing for this whole certificate expiration issue.  so many people have it and the threads don't really explain whats going on. 

    safari, chrome, Firefox are all referencing the stored certs in the keychain.  if the keychain has expired certs, all browsers get screwed.

     

    What is the process for re-downloading the certs into the keychain or renewing their expiration?

     

    this is user profile specific. when a new user is created, fresh new certs are found in the keychain. 

     

    can we get an apple developer to please chime in here and walk us through the flow here?

     

    thanks guys!