[GH-ISSUE #1864] error raised when import P12 file #1857

Closed
opened 2026-03-03 19:54:59 +03:00 by kerem · 3 comments
Owner

Originally created by @Gnosnay on GitHub (Dec 1, 2023).
Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/1864

Originally assigned to: @NghiaTranUIT on GitHub.

Description

image

Steps to Reproduce

following the steps under custom-certificates.
https://docs.proxyman.io/advanced-features/custom-certificates#6-how-to-generate-self-signed-certificates-for-custom-root-certificate-that-comply-with-new-apples-security-requirements

Current Behavior

Failed to import ca p12

Expected Behavior

Import ca p12 successfully

Environment

  • App version: e.g Proxyman Version 4.14.0
  • macOS version: e.g macOS 14.1.1
  • Openssl: OpenSSL 3.1.4 24 Oct 2023 (Library: OpenSSL 3.1.4 24 Oct 2023)
Originally created by @Gnosnay on GitHub (Dec 1, 2023). Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/1864 Originally assigned to: @NghiaTranUIT on GitHub. ## Description <!--- Description for the bug? --> <img width="701" alt="image" src="https://github.com/ProxymanApp/Proxyman/assets/20450379/bc06461e-48cf-461d-a72e-4604aa7fd27b"> ## Steps to Reproduce <!-- Add relevant code and/or a live example --> following the steps under `custom-certificates`. https://docs.proxyman.io/advanced-features/custom-certificates#6-how-to-generate-self-signed-certificates-for-custom-root-certificate-that-comply-with-new-apples-security-requirements ## Current Behavior Failed to import ca p12 ## Expected Behavior Import ca p12 successfully ## Environment - App version: e.g Proxyman Version 4.14.0 - macOS version: e.g macOS 14.1.1 - Openssl: OpenSSL 3.1.4 24 Oct 2023 (Library: OpenSSL 3.1.4 24 Oct 2023)
kerem 2026-03-03 19:54:59 +03:00
Author
Owner

@NghiaTranUIT commented on GitHub (Dec 2, 2023):

Thanks @Gnosnay I'm able to reproduce this issue. Let me investigate it 👍

<!-- gh-comment-id:1836984975 --> @NghiaTranUIT commented on GitHub (Dec 2, 2023): Thanks @Gnosnay I'm able to reproduce this issue. Let me investigate it 👍
Author
Owner

@NghiaTranUIT commented on GitHub (Dec 2, 2023):

@Gnosnay I found the problem: A certificate, which is generated by OpenSSL 3.1.4 is not compatible with the latest MacOS 14. Thus, the System Keychain can't import it.

To fix it, you can use the -legacy on the 4th step:

openssl pkcs12 -export -legacy -out root-ca.p12 -in root-ca.pem -inkey key.pem -passin pass:your_password -passout pass:your_password

Then, import it will work 👍

I've updated the Docs: https://docs.proxyman.io/advanced-features/custom-certificates#6.-how-to-generate-self-signed-certificates-for-custom-root-certificate-that-comply-with-new-apples

<!-- gh-comment-id:1837023915 --> @NghiaTranUIT commented on GitHub (Dec 2, 2023): @Gnosnay I found the problem: A certificate, which is generated by OpenSSL 3.1.4 is not compatible with the latest MacOS 14. Thus, the System Keychain can't import it. To fix it, you can use the `-legacy` on the 4th step: ``` openssl pkcs12 -export -legacy -out root-ca.p12 -in root-ca.pem -inkey key.pem -passin pass:your_password -passout pass:your_password ``` Then, import it will work 👍 I've updated the Docs: https://docs.proxyman.io/advanced-features/custom-certificates#6.-how-to-generate-self-signed-certificates-for-custom-root-certificate-that-comply-with-new-apples
Author
Owner

@Gnosnay commented on GitHub (Dec 2, 2023):

@Gnosnay I found the problem: A certificate, which is generated by OpenSSL 3.1.4 is not compatible with the latest MacOS 14. Thus, the System Keychain can't import it.

To fix it, you can use the -legacy on the 4th step:

openssl pkcs12 -export -legacy -out root-ca.p12 -in root-ca.pem -inkey key.pem -passin pass:your_password -passout pass:your_password

Then, import it will work 👍

I've updated the Docs: https://docs.proxyman.io/advanced-features/custom-certificates#6.-how-to-generate-self-signed-certificates-for-custom-root-certificate-that-comply-with-new-apples

Nice bro! Thank you so much for your fast response. I learnt a lot from your documentary.

<!-- gh-comment-id:1837024281 --> @Gnosnay commented on GitHub (Dec 2, 2023): > @Gnosnay I found the problem: A certificate, which is generated by OpenSSL 3.1.4 is not compatible with the latest MacOS 14. Thus, the System Keychain can't import it. > > To fix it, you can use the `-legacy` on the 4th step: > > ``` > openssl pkcs12 -export -legacy -out root-ca.p12 -in root-ca.pem -inkey key.pem -passin pass:your_password -passout pass:your_password > ``` > > Then, import it will work 👍 > > I've updated the Docs: https://docs.proxyman.io/advanced-features/custom-certificates#6.-how-to-generate-self-signed-certificates-for-custom-root-certificate-that-comply-with-new-apples Nice bro! Thank you so much for your fast response. I learnt a lot from your documentary.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/Proxyman#1857
No description provided.