Verisign Certificates?/AppStore,iTunes Connections, and a clueless Hoss.

Trying to get rid of the verisign certs in my keychain... having trouble connecting to the App- Store, iTunes is giving me errors, many responses suggest that getting rid of Verisign certs in my keychain should fix it.

How do I do that?

I seem to need a step-by-step, as my attempts aren't removing them.

After exporting to desktop and dragging them to the trash, they are still in my keychain.


When I try to post this question on the Apple Community forums, I get a pink box telling me that I am not allowed to create or modify content.

WHAT???


HELP!

Replies

😁😁😁 Well, once you've zapped all you can, try the Stores again. If no joy then remove those two files I mentioned above once again and restart.

If you still can't log in to the Store after deleting and restarting, then it would be interesting to see if the Console log is showing a different error now. But in terms of practical measures, it may be time to bust out the big gun and take those Hezbollah in hand 🙂

Keychain Access > Preferences > General > Reset my Default Keychain.

And then restart you Mac again.

Deleted all of everything as per instructions.

When iTunes started up, immediately got the raft of 6 or 7

"iTunes can’t verify the identity of the server “p3-buy.itunes.apple.com”

"The certificate for this server is invalid. You might be connecting to a server that is pretending to be “p3-buy.itunes.apple.com”, which could put your confidential information at risk. Would you like to connect to the server anyway?""

(That's just the first one, followed by a bunch more with similar titles and it's attendant warning)

and, of course,

Cannot Connect to the App Store.

YAAAY!!!

(somewhat sarcastically)


lets start up Console here....

hang on......

here we go......


8/26/15 5:00:41.249 PM com.apple.WebKit.WebContent[474]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843) 8/26/15 5:00:41.318 PM storeassetd[294]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843) 8/26/15 5:00:41.357 PM sandboxd[143]: ([325]) storeaccountd(325) deny mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:41.702 PM sandboxd[143]: ([474]) com.apple.WebKit(474) deny file-read-data /Library/Preferences/com.apple.security-common.plist 8/26/15 5:00:41.726 PM sandboxd[143]: ([325]) storeaccountd(325) deny mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:41.747 PM sandboxd[143]: ([325]) storeaccountd(325) deny mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:41.767 PM sandboxd[143]: ([325]) storeaccountd(325) deny mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:41.961 PM sandboxd[143]: ([475]) storeuid(475) deny file-read-data /Users/hosshead/Library/Keyboard Layouts 8/26/15 5:00:41.962 PM storeaccountd[325]: -[PushServiceStoreDispatch getEnabledMediaTypesWithReply:] 8/26/15 5:00:41.971 PM storeaccountd[325]: XPC error for connection com.apple.backupd.sandbox.xpc: Connection invalid 8/26/15 5:00:41.000 PM kernel[0]: Sandbox: storeaccountd(325) deny(1) mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:41.974 PM storeaccountd[325]: XPC error for connection com.apple.backupd.sandbox.xpc: Connection invalid 8/26/15 5:00:41.000 PM kernel[0]: Sandbox: storeaccountd(325) deny(1) mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:41.977 PM storeaccountd[325]: XPC error for connection com.apple.backupd.sandbox.xpc: Connection invalid 8/26/15 5:00:41.000 PM kernel[0]: Sandbox: storeaccountd(325) deny(1) mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:41.979 PM storeaccountd[325]: XPC error for connection com.apple.backupd.sandbox.xpc: Connection invalid 8/26/15 5:00:41.982 PM sandboxd[143]: ([475]) storeuid(475) deny file-read-data /Users/hosshead/Library/Input Methods 8/26/15 5:00:42.070 PM sandboxd[143]: ([325]) storeaccountd(325) deny mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:42.083 PM storeaccountd[325]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843) 8/26/15 5:00:42.090 PM storeaccountd[325]: -[PushServiceStoreDispatch registerDeviceTokenForEnvironmentNamed:withReply:] 8/26/15 5:00:42.091 PM maspushagent[302]: -[PushServiceDispatch listener:shouldAcceptNewConnection:] ((null)) 8/26/15 5:00:42.092 PM storeaccountd[325]: -[PushServiceStoreDispatch registerDeviceTokenForEnvironmentNamed:withReply:] 8/26/15 5:00:42.000 PM kernel[0]: Sandbox: storeaccountd(325) deny(1) mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:42.098 PM storeaccountd[325]: XPC error for connection com.apple.backupd.sandbox.xpc: Connection invalid 8/26/15 5:00:42.000 PM kernel[0]: Sandbox: storeaccountd(325) deny(1) mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:42.101 PM storeaccountd[325]: XPC error for connection com.apple.backupd.sandbox.xpc: Connection invalid 8/26/15 5:00:42.000 PM kernel[0]: Sandbox: storeaccountd(325) deny(1) mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:42.104 PM storeaccountd[325]: XPC error for connection com.apple.backupd.sandbox.xpc: Connection invalid 8/26/15 5:00:42.000 PM kernel[0]: Sandbox: storeaccountd(325) deny(1) mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:42.107 PM storeaccountd[325]: XPC error for connection com.apple.backupd.sandbox.xpc: Connection invalid 8/26/15 5:00:42.000 PM kernel[0]: Sandbox: storeaccountd(325) deny(1) mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:42.110 PM storeaccountd[325]: XPC error for connection com.apple.backupd.sandbox.xpc: Connection invalid 8/26/15 5:00:42.000 PM kernel[0]: Sandbox: storeaccountd(325) deny(1) mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:42.112 PM storeaccountd[325]: XPC error for connection com.apple.backupd.sandbox.xpc: Connection invalid 8/26/15 5:00:42.000 PM kernel[0]: Sandbox: storeaccountd(325) deny(1) mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:42.115 PM storeaccountd[325]: XPC error for connection com.apple.backupd.sandbox.xpc: Connection invalid 8/26/15 5:00:42.000 PM kernel[0]: Sandbox: storeaccountd(325) deny(1) mach-lookup com.apple.backupd.sandbox.xpc 8/26/15 5:00:42.118 PM storeaccountd[325]: XPC error for connection com.apple.backupd.sandbox.xpc: Connection invalid 8/26/15 5:00:42.191 PM storeaccountd[325]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843) 8/26/15 5:00:42.273 PM storeaccountd[325]: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9843) 8/26/15 5:00:44.659 PM WindowServer[189]: _CGXRemoveWindowFromWindowMovementGroup: window 0x32 is not attached to window 0x58 8/26/15 5:00:53.193 PM iTunes[254]: CFNetwork SSLHandshake failed (-9807) 8/26/15 5:00:53.442 PM iTunes[254]: CFNetwork SSLHandshake failed (-9847) 8/26/15 5:02:49.632 PM Console[480]: Failed to connect (_consoleX) outlet from (NSApplication) to (ConsoleX): missing setter or instance variable


what is this telling you, Mon Capítan?

Why do I have Turkish certificates in my Mac?

I ABSOLUTELY SWEAR

that I did not log onto any **** sites featuring women with all their burkas and hijabs pulled down suggestively below their chins.....

Nor did I buy ciggies online.


It's time to **** Hezbollah, isn't it?


*sigh*


hang on.

I have to go purchase a dog-friendly seat cover for my Subaru over at Amazon, before I do this...

JUST IN CASE.


😐

seriously?

it ****s out the word

p-o-*r n????

omg.

I think the forum has bigger fish to fry than that.....

😁 I didn't know it did that - makes me smile - and want to test which words it censors... **** **** ****** *** ****


The console log you posted doesn't fill me with hope that even resetting your default keychain is going to work - but it's reversible (in therory - I haven't had to reverse it before). There are still a few more things to try after that, but it's getting dire isn't it 😀

Hizmet is the Gulen movement.

So it's THEM what has taken over my mac.


just so's ya know, if I disappear from the map, all of a sudden....


this way, you'll know which certificates to never **** in future, if you know what's good for you.


oh crap.

what if You are implicated and you go down with me?

The forum will crumble to the ground and they'll NEVER get El Capitan to work.






hmmmm.

will I be able to use my regular admin to log onto my mac?

I have that keychain access pulled up and ready.....


and,

will the complete Full Version of El Capitan install fix this stuff?


your remarks about "Not Filled With Hope" are not exactly confidence boosting.....


snort.

Okay, before you "Reset my Default Keychain", try this:

  1. In Keychain Access:
    • Click on login under "Keychains" and Certificates under "Category"
    • Select all Verisign certs (click the top one and press shift+down)
    • Press shift+cmd+E and select the Desktop to export to.
    • Right click the selection and click on "Delete Item(s)"
  2. Run the following command in Terminal (copy paste it in):

    sudo rm -Rf /var/db/crls/*

  3. Reboot your Mac.
  4. Empty the trash.
  5. Try the Stores again.
  6. Repeat steps 1 thru 5, but this time with the "Apple Application Integration Certification Authority" Certificate.
  7. Repeat steps 1 thru 5, but this time with the "com.apple.idms.appleid.prd......." Certificate.

😁 Well, even if you were to install the full version of El Cap over what you have now, it's more likely than not that it would leave your certificates alone.


It's actually easier than ever to reinstall OS X now though. Make sure you have the RecoveryHD update and boot into Recovery Mode (cmd+R) and you can reinstall El Capitan, but at the Beta 5 stage, which means you don't have to update again (used to be you could only install Beta 1 and had to update, a beta at a time, from there). So it's not a huge pain to give it a try...

You've delved deep enough into this conspiracy to discover the architect at the bottom of it, eh?! Well done - but you've got to be careful now... (and I completely believe you about not ever having visited any of *those* sites 😝)

okay.

That sounds pretty big.

so.

I will do THAT stuff tomorrow.

I need to de-stress for a little while.

Get some sleep, rest up before I set fire to my computer.

somebody call Turkey and tell them it's NOT MY FAULT.


*rummages around on counter top for a Vicodin, a beer, and two hand grenades for self protection*

😁 I think it's not as big as it looks.

My guess is that it will take less than 10 mins to see if it fixes the issue (and I'm hopeful that it will).

I'm having the same problems as listed here. I've been following this thread, to see if it can resolve my issue as well. I followed the directions above, I do not have 2SV on. I can't use app store, Webcam, and my security settings for EVERY SINGLE WEBSITE have to be re-authorized "allowed"....this is a large frustration. But I can't use anything that has a camera feature on it. however it says its working, I'm guesing its a driver issue but it does not come up with any error messages. Awaiting any & all suggestions. Mahalo!


Tim

Hi Tim,


I'm happy to try to help. Based on your symptoms, I'm nearly certain that your underlying issue is different to Hoss's. Would you mind creating your own question (Just copy your post and post it as a question here: OS X 10.11 beta). I've found that troubleshooting multiple issues in one thread can get confusing for all concerned.


Thanks,

Max.

OH MY GOD!!!
IT'S FIXED!!!


Today's software update FIXED IT!!!!


WEEEEEE HEEEEEE HEEEEEEEEEEEEEEEE!!!!!!!!!!!


I was going to sit down with my Mac this evening to follow your Anti-Hizmet instructions, but the software update beat me to it!!!


WEEEE HEEEEEE HEEEEEEEEEEEEEEEEE!!!!!!!


can you tell I'm pretty excited by it?


Hey, man, THANK YOU SO MUCH for all your patience with me.

I am SURE we'll find other stuff to work on......

You Are DA BOM!

😎

🙂

Glad that Beta 8 fixed it for you...


'till the next time 🙂