keychain

Keychain Services Secure Notes

浪子不回头ぞ 提交于 2019-12-03 08:50:27
The documentation for the Keychain Services API leaves a bit to be desired. One thing that I can't seem to locate are details on accessing the Secure Notes that the Keychain Access app lets you add and edit. Any insight would be much appreciated. Thanks. I figured out that you can pull the data using the security command line tool. Secure notes are stored as generic passwords with the following characteristics: class: "genp" - this is the same as a generic password type<uint32>="note" - you can use this to identify secure notes specifically when searching (using the -C flag). desc<blob>=

How to implement client certificates and server authentication for iOS

我怕爱的太早我们不能终老 提交于 2019-12-03 07:54:27
I have recently gone through an extremely arduous process to build something that should be very simple yet appears to be essentially un-findable in any one place. I’d like to try to put everything here to ask if I’m doing anything wrong and, if not, to help anyone who needs this information. Background: The product/service for which I was trying to provide security is built around WCF services on a Windows server that are accessible only though custom client apps on a PC or an iPad. One server per customer, no browser access. Everything was already TLS secured with authentication and

Remove private key from Mac OS X keychain using Terminal

流过昼夜 提交于 2019-12-03 07:34:58
问题 I've imported a developer identity (certificate + private key) for iOS development to a keychain using the "security" Terminal application with the command security import identity.p12 -k <keychain> -P <passphrase> This imports both items included in the p12 file, certificate and private key, into the given keychain. I forgot to specify -T /usr/bin/codesign , however, which adds the codesign application to the access list of the private key. I've tried to add the codesign app to the access

What encryption algorithm does the iOS keychain use to protect data?

半城伤御伤魂 提交于 2019-12-03 07:20:42
问题 After extensive googling I haven't managed to find an answer to this question 1 , which is surprising, since `security through obscurity' isn't really security at all... Is there a reliable source of an answer to this question (such as a certification application for iOS, source code, or similar)? 1 The only mention I could find was that it might use 3DES. 回答1: According to this official Apple document : The encryption is AES-256 in GCM (Galois/Counter Mode); UPDATE: Update from May 2019.

How can I get jenkins-cli.jar to use my ssh agent/keychain?

孤人 提交于 2019-12-03 07:17:12
I'm using the jenkins-cli.jar file from my jenkins server, and on every run it prompts me for my ssh key passphrase. I'd like it to use my ssh keychain so I don't have to enter it on every invocation. If it matters, I'm on OSX using the default keychain setup, I don't have a manual ssh-agent configured right now. Jenkins CLI client does not support SSH agents for now. As a workaround, you can generate dedicated key without passphrase, associate it with your Jenkins account and instruct client to use that key on every invocation. 来源: https://stackoverflow.com/questions/30806578/how-can-i-get

Why does Xcode auto-install a (duplicate and expired) certificate in the keychain? [duplicate]

纵饮孤独 提交于 2019-12-03 05:38:14
问题 This question already has answers here : Closed 7 years ago . Possible Duplicate: xCode 4 -reinstalls keychain certs that I delete The question says it all in a nutshell. When building a project in Xcode, I receive the error message from the Check dependencies step: CodeSign error: Certificate identity 'iPhone Developer: xxxxx' appears more than once in the keychain. The codesign tool requires there only be one. Problem is, this certificate identity is reinstalled whenever Xcode is launched.

An error has occurred. Unable to import an item. The contents of this item cannot be retrieved. Missing .pem file

匆匆过客 提交于 2019-12-03 05:35:50
问题 I am struck with a problem. I installed the p12 certificates once into a MacBookPro and then deleted it, now when I am again trying to install it. Keychain is simply not accepting the certificate for strange reason. After some googling, I hit upon this link: http://www.openradar.me/7092640 Which clearly says that there is a bug with Keychain and states a workaround too. But unfortunately I do not have the .pem file, since I have not made a backup of it thinking that p12 file is sufficient

Storing keys in KeyChain with KeyChainItemWrapper

只愿长相守 提交于 2019-12-03 05:16:59
I'm using KeyChainItemWrapper class, provided by Apple's Sample Code to save the authentication token to the keychain. KeychainItemWrapper *keychain = [[KeychainItemWrapper alloc] initWithIdentifier"JetTaxiApp_AuthToken" accessGroup:nil]; But when I'm trying to set the value to keychain, an odd exception is raised [_authenticationTokenKeychain setObject:authenticationToken forKey: @"auth_token"]; Terminating app due to uncaught exception 'NSInternalInconsistencyException', reason: 'Couldn't add the Keychain Item.' The keychain doesn't exist yet (at the moment of this call) What can cause this

How do I add authorizations to code sign an app from new keychain without any human interaction

老子叫甜甜 提交于 2019-12-03 05:11:37
问题 I'm trying to automate the process of building iphone apps with a particular certificate. So imagine if different users uploaded their cert into the system and it was immediately available to code sign against. I want to do this without any interaction. I also don't want to clutter up the system or logon keychain with different user certificates. To this end I have: turned off the requirement in XCODE to require code signing for a a build. developed a ruby script to build an application via

“No unexpired provisioning profiles found that contain any of the keychain's signing certificates” Horror

此生再无相见时 提交于 2019-12-03 02:36:33
问题 I have seen a few other questions that addressed this topic but none like mine. Yesterday I innocently added a device to the list of devices. Question: I am under the impression that once you add a device, it will now be linked to the provisioning profile. However, I believe it was not linked to one of my distribution profiles. So I went into edit the profile, clicked the checkmark next to the device, and hit submit. This is where the problems began. I notice two things: I recently renewed my