Safari can’t establish a secure connection to the server

5

1

I realize there is another question with the same title, but my situation is very different.

Any ideas?

gdelfino

Posted 2009-11-27T13:19:40.893

Reputation: 147

Using Firefox, I have just discovered that both problematic sites use certificates issued by Comodo – gdelfino – 2010-01-25T14:22:50.277

Answers

1

I have just solved this problem by following this procedure published by phurd99 in the Apple Support Forums:

  1. Open applications
  2. Utiliities
  3. Open Keychain
  4. Click Keychain Access and select Preferences.
  5. Click the "Reset My Default Keychain"

(...)

http://discussions.apple.com/thread.jspa?threadID=2138178&start=15&tstart=0

This solves the problem but you are left without you precious keychain (a backup is saved).

Then, using the backup and trial and error I discovered that by deleting one specific certificate, the problem is solved:

UNT-USERFirst-Hardware
Intermediate certificate authority
Note: This certificate is signed by an untrusted issuer

gdelfino

Posted 2009-11-27T13:19:40.893

Reputation: 147

1[+1] Searching for UNT-USERFirst-Hardware revealed 2 such certificates on my machine. One indeed was noted as signed by an untrusted issuer. So I just deleted this certificate and my HTTPS problems with Safari were gone! I couldn't use MobileMe on my MBA because of this. Thank you very much! – Marc – 2010-12-12T21:12:20.850

3

I had this problem as well. Adding new root authority certificates from Thawte fixed the problem. Apple has documentation on how to do this here http://docs.info.apple.com/article.h...en/mh2046.html

I added the root and server certificates that I downloaded from here http://www.thawte.com/roots

admintech

Posted 2009-11-27T13:19:40.893

Reputation: 6 970

1There are dozens of certificates in that download. Which one do I need? – gdelfino – 2010-01-25T14:02:52.787

Thanks. Did you have to go through all the 8 directories and 14 subrectories double clicking on every .cer and .pem file? Did you add them to your login keychain or to the system keychain? – gdelfino – 2009-11-27T18:27:01.637