MacOS – I updated to 10.9.2 and now SSL is broken. How to fix this

macosssl

As per the title, I upgraded my Mac to Mavericks 10.9.2, and now a bunch of websites which use SSL (aka https) don't work!

enter image description here

What do I do?

Best Answer

Open Keychain Access and delete the DigiCert certificates, but only the ones in the login keychain - not the ones in System or System Roots.

Afterward, you may need to restart your browser and/or network service (switch Airport off and on again, or disable and re-enable Ethernet. If you want to be sure, just restart your computer.

If you're a dummy (like I was) and deleted all the DigiCert entries, you can restore them by manually downloading and installing the 10.9.2 update from Apple.

Related Solutions

Mail won’t let me turn off SSL for SMTP

I figured out a workaround. I took the clue from my account that uses a custom port. For the accounts in which SSL doesn't work, I checked "Use custom port" and tried each of the standard port numbers until I found one that worked. With the custom port selected I can successfully disable SSL.

MacOS – How to fix curl: (60) SSL certificate: Invalid certificate chain when using sudo

f you store your CA certificates on the filesystem (in PEM format) you can tell curl to use them with

sudo curl --cacert /path/to/cacert.pem ...

You can also turn off the certificate verification with

sudo curl --insecure ...

Edit: Updated with regard to feedback

If you want to set this permanently, you should create a .curlrc files and place in your home directory. sudo commands may need this file in /var/root The file takes the same options as the command line but without the dashes. One option per line:

cacert=/path/to/my/certs.pem

Best Answer

Related Solutions

Mail won’t let me turn off SSL for SMTP

MacOS – How to fix curl: (60) SSL certificate: Invalid certificate chain when using sudo

Related Question