Keychain Access error when creating new system certificate

certificateerrorhigh sierrakeychain

I am following the instructions to codesign gdb on my MBP however when I get to the end of the System certificate creation process, keychain says "Unknown Error = -2,147,414,007" and the certificate has not been created.

It creates a certificate fine for login location, but system fails.

What is the problem and how can I fix this?

Best Answer

I got the same error, so I went through the process but created the certificate in the login keychain. Once this is done you can drag the certificate into the System keychain through the UI.

You will need to unlock your System keychain first if it is showing as a locked padlock: just right-click and select 'Unlock keychain "System"'.

You have to enter your password several times but eventually it works, and the corresponding codesign command works:

codesign -fs your-cert-name $(which gdb)

Related Solutions

‘No machine certificates found’ when adding machine certificate into VPN

Not sure if it's possible using standard network settings, but you can configure VPN this way on OSX by using 3rd party software (e.g. Viscosity).

MacOS – How to fix curl: (60) SSL certificate: Invalid certificate chain when using sudo

f you store your CA certificates on the filesystem (in PEM format) you can tell curl to use them with

sudo curl --cacert /path/to/cacert.pem ...

You can also turn off the certificate verification with

sudo curl --insecure ...

Edit: Updated with regard to feedback

If you want to set this permanently, you should create a .curlrc files and place in your home directory. sudo commands may need this file in /var/root The file takes the same options as the command line but without the dashes. One option per line:

cacert=/path/to/my/certs.pem

Best Answer

Related Solutions

‘No machine certificates found’ when adding machine certificate into VPN

MacOS – How to fix curl: (60) SSL certificate: Invalid certificate chain when using sudo

Related Question