keychain

This certificate has an invalid issuer keychain

╄→гoц情女王★ 提交于 2019-11-30 09:52:25
I do have private key(my_ca.key) and public key(my_cert.crt) which is signed by DigiCert. Now I want to generate the SSL certificate (version 3) and sign it by my private key . Here is the way I tried to do that. But when I export into keychain (Mac OS X). I have been getting error like this " This certificate has an invalid issuer keychain ". No idea how to solve this. Here my_cert.crt is extended from DigiCert High Assurance CA-3 and that one extended from DigiCert High Assurance EV Root CA. Also added DigiCert High Assurance CA-3, DigiCert High Assurance EV Root CA into keychain. It shows

Subversion on Mac - refuses to get password from keychain

徘徊边缘 提交于 2019-11-30 09:36:53
On Mac OS X Leopard - when I try and access a remote repository from Terminal it always asks for: 1. Password 2. Username 3. Password (again) with the message: "Authentication realm: http://svn.myserver.com:80 Subversion" I've checked and my credentials are being stored in Keychain and SVN has access to them. Why won't it use them? I got this solved by recursively changing the owner of the subversion authentication directory: sudo chown -R myuser:staff ~/.subversion/auth/ (previous user:group pair was set to root:staff ) You also need to set password-stores = keychain on subversion

Storing username/password on Mac using Java

只愿长相守 提交于 2019-11-30 07:27:20
I'm writing a small program (a twitter client) in Java, aimed at Mac OS X. As part of its functionality, it needs to have a place to store the twitter username/password. The natural place would be the mac keychain, but I can't find any way of accessing it. Is there any way of accessing the mac keychain from Java, or failing that, what is your recommendation for where to store the username/password instead? There is Java keychain API, in that there's an implementation of KeyStore on OS X backed by the keychain . I think the keychain is the best place (if not the place) to store the password. It

Finding a certificate on iOS

放肆的年华 提交于 2019-11-30 07:19:05
问题 Note this question is was asked in 2001. Things have changed. I have an iOS device that needs to access a Junos VPN. The opaque instructions from the Junos admin say that I have to retrieve a certificate that has been provisioned to the device using the Apple IPCU. I know that the cert is on the device (I can see it in Settings) and I can access the VPN though Mail, Safari and the Junos App. The Apple docs state that each app has its own keychain and yet all three of these apps can see the

Generate key pair on iphone and print to log as NSString

妖精的绣舞 提交于 2019-11-30 06:32:44
问题 Following Apple example code in: http://developer.apple.com/library/ios/#documentation/Security/Conceptual/CertKeyTrustProgGuide/iPhone_Tasks/iPhone_Tasks.html I'm able to successfully generate key-pair with the code snippet below, but unable to print the keys... The function SecKeyGeneratePair() - returns the keys as SecKeyRef type. I have no idea how to handle this type, I understand that this is the keychain representation but how can I actually view the key-pair as NSString?? More

SecItemCopyMatching for Touch ID without passcode fallback

廉价感情. 提交于 2019-11-30 05:43:47
I am using SecItemCopyMatching to fetch a keychain item protected by Touch ID. However, if Touch ID unlocking fails (or the user selects "Enter Passcode"), I want to present my own PIN-entry UI. I do not want the user to be presented with the system passcode entry UI at any point. LAContext 's evaluatePolicy method provides this, but does not offer any actual keychain security, merely local authentication. I therefore will not use LAContext to achieve this. Is this possible with SecItemCopyMatching ? On iOS 8.3 and above, the passcode fallback option is hidden initially but still appears if

Store and retrieve private key from Mac keychain programmatically

六月ゝ 毕业季﹏ 提交于 2019-11-30 05:17:18
问题 In a Mac application, I have a requirement to store the private key sent from the server for logged in user in a secure way and retrieve it back whenever needed programmatically. I know that keychain is the best place to store the private key. Is there any sample code available to achieve this? I am able to add the private key to the keychain using "SecKeychainItemImport" method of "Security.framework" but having issues retrieving back the private key from the keychain. I have tried using

Read from keychain results in errSecItemNotFound 25300

那年仲夏 提交于 2019-11-30 03:51:40
问题 I store username & password using keychain, sometimes when I tried to get the password of the username, it told me errSecItemNotFound . I keep that the password is always existed in keychain, so why it is not found? Thanks. 回答1: Tony: that error is simply OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements. This could be happening as a result from using a nonstandard app signing method or some other problem with your entitlements. Make

Adding item to keychain using Swift

心已入冬 提交于 2019-11-30 02:05:42
I'm trying to add an item to the iOS keychain using Swift but can't figure out how to type cast properly. From WWDC 2013 session 709, given the following Objective-C code: NSData *secret = [@"top secret" dataWithEncoding:NSUTF8StringEncoding]; NSDictionary *query = @{ (id)kSecClass: (id)kSecClassGenericPassword, (id)kSecAttrService: @"myservice", (id)kSecAttrAccount: @"account name here", (id)kSecValueData: secret, }; OSStatus = SecItemAdd((CFDictionaryRef)query, NULL); Attempting to do it in Swift as follows: var secret: NSData = "Top Secret".dataUsingEncoding(NSUTF8StringEncoding,

Add codesign to private key ACL without Keychain

六眼飞鱼酱① 提交于 2019-11-30 02:05:13
I'm trying to set up continuous builds/integration for a stable of iPhone apps. I have: A dedicated Mac Mini. A user account named "build" Hudson set up as a LaunchAgent for build, by dropping a plist in /Users/build/Library/LaunchAgents Tried as a system-wide LaunchDaemon running as hudson, but then had no access to the build user's login keychain. Long story, full of heartache. The system set to automatically login "build" on startup, so that Hudson starts running. The big problem is codesigning and the Keychain. We create code on behalf of our clients' developer identities, so we have