mirror of
https://github.com/FiloSottile/mkcert.git
synced 2026-04-25 05:26:03 +03:00
[GH-ISSUE #233] Installed certificate does not show up in Certificate Trust Settings #148
Labels
No labels
TLS stack issue
Windows
bug
duplicate
duplicate
enhancement
help wanted
help wanted
pull-request
question
question
root store
waiting for info
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/mkcert#148
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Epho on GitHub (Jan 10, 2020).
Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/233
Related to #47
I recently installed the latest mkcert and am unable to see the cert in "Certificate Trust Settings". I tried uninstalling, deleting the root, and regenerating, for good measure, but no dice.
@coole106 commented on GitHub (May 6, 2020):
I'm having the same issue. I installed a certificate and it's not showing up here.
@vlad2 commented on GitHub (Jul 8, 2020):
Hi, one reason could be that the certificate doesn't have the CN (common name) section.
@suda commented on GitHub (Sep 10, 2020):
I think I know what's the problem here. At some point, Apple changed the UI for the cert management so after downloading the certificate you get this:
And yes, it is in Settings but not where you think. At the top of the menu now there's Profile Downloaded option:
You tap that and you should be presented with the installation dialog:
After that, it should appear in the Certificate Trust Settings:
Hope this helped :)
@tysecure commented on GitHub (Jan 17, 2023):
After generating the certificate, iOS states, "The authenticity of the profile cannot be verified," and it does not show up in Trust settings. I'm using the latest version of macOS Venture and iOS 16. Any ideas? Thanks
@flyi36 commented on GitHub (Feb 19, 2023):
https://github.com/FiloSottile
Thank u from me
@oojacoboo commented on GitHub (Sep 3, 2023):
I had this issue. You need to install all the intermediary/root CA "profiles". That'll be something like
ca.pem. When you're self-signing and acting as your own CA, this is what's important since it's the key signing the certificates.@AhmedNSidd commented on GitHub (Oct 31, 2024):
For what it's worth, I tried downloading all the intermediary certificates and then the root certificate (and tried it the other way around too), and couldn't get the certificates verified for my use case (I was exporting the certificates on my browser using Firefox)
@oojacoboo commented on GitHub (Oct 31, 2024):
Send the root CA certificate to your iOS device that you created, when self-signing whatever other certificate. Then from email, install that on iOS as a "profile". Then go into it and click to trust it, turning your CA certificated into a trusted root CA.
@AhmedNSidd commented on GitHub (Oct 31, 2024):
I did do exactly what you mentioned Jacob, but the issue I’m running into is that iOS ends up saying the certificate can’t be verified, so even though I can install the certificate, I can’t give it full trust.
Anyway, I think this could potentially have something to do with iOS 18. I found this thread: https://forums.developer.apple.com/forums/thread/764673
@oojacoboo commented on GitHub (Oct 31, 2024):
It needs to be a root CA, so make sure that's the case. Then, you need to go under your settings and "trust" it. I recall dealing with the unverified bit, but it was because it wasn't being marked as "trusted".
@gionapaolini commented on GitHub (Feb 9, 2025):
For those that still cannot see their certificate under "Certificate Trust Settings"
In my case the problem was that the certificate had an expiry date too high (it can be max 398 days, as stated here)
@ggitthub commented on GitHub (Mar 9, 2025):
I created my own CA certificate on Mac, imported it to an iPad and had the same issue with not seeing it in the "Certificate Trust Settings". Turned out I was importing a .p12 file instead of a .cer file (both are available as export from the Mac Keychain app).
The Configuration Profile under Settings > General > VPN & Device Management looks absolutely identical in both cases! BUT it doesn't show up to be trusted in Settings > About > Certificate Trust Settings if the .p12 file was used!
@philip-lamb commented on GitHub (Apr 19, 2025):
From that page: