I keep getting "The certificate for this server is invalid" for all SSL web sites.

Question

Level 1

9 points

I keep getting "The certificate for this server is invalid" for all SSL web sites.

Ever since upgrading to MacOS Sierra I get certificate errors on my late 2013 Mac Pro. It will work fine right after a reboot, but then it will start refusing to open any web sites that use SSL. This happens until I reboot, then it's fine for a bit.

I thought this was some sort of problem caused by applying update after update to the MP, so I completely erased the hard drive and reinstalled Sierra fresh. And now the certificate problem is back.

Anyone else having issues like this? Anyone know of a fix?

Mac Pro, macOS Sierra (10.12)

Posted on Oct 1, 2016 5:37 PM

Reply

Answer 1

Brian Pepin Author

Level 1

9 points

Oct 1, 2016 10:01 PM in response to trevoz

Thanks, all. I went to dinner while the system was backing up to time machine and came home to some new interesting experiences. iCloud Photo Library disabled itself saying that it needs to be installed on a Mac OS Extended formatted volume. Yet, this is the same volume it was running happily on for the last day. Disk Utility reports it is correctly formatted. Time Machine backup also failed saying there was a problem with the network user name and password. Something here is seriously out of sorts.

Verified time, date, time zone OK, there are no extensions listed in the browser.

Rebooted the machine and everything's back to normal. But it won't last. Feels like some kind of problem with the keychain but I thought the full disk erase would take care of it.

FishingAddict -- good advice on the man in the middle. Still somewhat concerning, but no other systems on the same network are hitting this. Unless the malware is on the Mac Pro itself (possible but less likely as I erased the disk).

Reply

Answer 2

Oct 1, 2016 5:46 PM in response to Brian Pepin

Do you have any third party anti virus or other apps that claim to protect, manage, clean, etc your computer? If so, uninstall these. Do you get the same message when using a different browser?

Reply

Answer 3

Brian Pepin Author

Level 1

9 points

Oct 1, 2016 5:55 PM in response to BobTheFisherman

No. I erased the disk and have been careful with what I install. I've installed Creative Cloud, Logic, Final Cut, Office 365 and Xcode. No anti virus, no VMWare or Parallels.

Reply

Answer 4

Oct 1, 2016 6:04 PM in response to Brian Pepin

Try disabling or deleting all browser extensions. If this clears the problem then install the browser extensions one at a time and trying the sites again until you get the ssl message. Go back and uninstall the browser extension that caused the error.

Reply

Answer 5

Oct 1, 2016 6:25 PM in response to Brian Pepin

First, check the date/time and timezone on your Mac.

Also, just be cautious that you are not being man-in-the-middled by an infected router, neighbor, or an untrustworthy ISP. That would explain it.

Reply

Answer 6

trevoz

Level 4

1,990 points

Oct 1, 2016 6:59 PM in response to BobTheFisherman

Incorrect date/time settings can cause this, so check the date and time on your Mac and also on your router.

Reply

Answer 7

Oct 2, 2016 12:28 AM in response to Brian Pepin

Check carefully the NTP time server "set date and time automatically" listed in the Date & Time preference pane. It's possible that an attacker or even an IPS is sending incorrect and date/time or timezone. Actually, you may want to disable this option for now, and then manually set the date/time and timezone. Then, check that the correct setting is persisting after powering off and back on your Mac. If the correct date/time does not persist then you may have a failing CMOS battery.

Have you tried resetting the NVRAM?:

How to Reset NVRAM on your Mac - Apple Support

Reply

Answer 8

trevoz

Level 4

1,990 points

Oct 1, 2016 10:22 PM in response to FishingAddict

If all else fails you could run Keychain Access, select "System Roots", "Certificates" and highlight all the certificates, then File > Export Items (to be safe if you want them back). Now delete them all. That should wipe the slate clean 👿

Reply

Answer 9

Brian Pepin Author

Level 1

9 points

Oct 4, 2016 6:50 AM in response to FishingAddict

FishingAddict -- I cleared the NVRam two days ago and everything seems fine. In the past it took a while to have issues after a reboot, but usually surfaced in a day. Fingers crossed, hopefully it stays working.

Reply

Answer 10

Oct 15, 2016 8:21 AM in response to Brian Pepin

Hi. I had the same problem with several pages on Safari including discussions.apple.com and google.es

I've solved this issue just rebooting my Mac.

Hope this help you too.

Reply