In Keychain access, 
 -&gt; View -&gt; Show Expired Certificates, then in your login keychain click on expired certificate and delete it. I also had the same expired certificate in my System keychain, so I deleted it from there too.

-&gt; After deleting the expired cert from the login and System keychains,download certificate from below link and open with keychain.


Download https://developer.apple.com/certificationauthority/AppleWWDRCA.cer and add it to Keychain access &gt; certificates (which expires on 2023)




I have two lists of arrays. 

How do I easily compare equality of these *with Java 8 and its features*, without using external libraries? I am looking for a &quot;better&quot; (higher-level, shorter, more efficient) solution than brute-force code like this (untested code, may contain typos etc, not the point of the question):

    boolean compare(List&lt;String[]&gt; list1, List&lt;String[]&gt; list2) 
    {
        // tests for nulls etc omitted
        if(list1.size() != list2.size()) {
           return false;
        }
        for(i=0; i&lt;list1.size(); ++i) {
            if(!Arrays.equals(list1.get(i), list2.get(i))) {
                return false;
            }
        }
        return true;
    }

Or, if there isn&#39;t any nicer way, that&#39;s a valid answer too.

Bonus: If Java 9 offers an even better way what whaterver Java 8 can offer, feel free to mention it as well.

**Edit:** After looking at the comments, and seeing how this question has become moderately hot, I think **the &quot;*better*&quot; should include first checking lengths of all arrays, before checking array contents**, because that has potential to find inequality much quicker, if inner arrays are long.

How to compare equality of lists of arrays with modern Java?

I don&#39;t know exactly how, but on a certain moment we ruined our complete visual studio solution. It wouldn&#39;t build anymore, nor clean, nor find any reference.

Afters hours of searching and trying to fix everything we got to the point that everything was building and running again.

However.. every time we open our solution we will get the message “Projects have recently been added to this solution. Do you want to get them from source control?”. 

This is probably cause by trying to fix one thing and breaking something else.

How do we get rid of this message?

[![Projects have recently been added to this solution. Do you want to get them from source control?][1]][1]


  [1]: http://i.stack.imgur.com/6K6zq.png

Every time I open my VS solution I get “Projects have recently been added to this solution. Do you want to get them from source control?”

Keychain shows all the certificates as Invalid in my keychain suddenly, as it working before 2 days and i also check in Developer portal and it shows valid there. It marks each and every certificate in Keychain as **&quot;This certificate has invalid issuer&quot;** . As message suggesting that it must be problem from issuer side and and our issuer is Apple. So how to fix it ?

This certificate has an invalid issuer

Here i posting image of keychain. I need quick help.

[![enter image description here][1]][1]


  [1]: http://i.stack.imgur.com/2QglP.png

This certificate has an invalid issuer : Keychain marks all certificates as &quot;Invalid Issuer&quot;

Keychain shows all the certificates as Invalid in my keychain suddenly, as it working before 2 days and i also check in Developer portal and it shows valid there. It marks each and every certificate in Keychain as "This certificate has invalid issuer" . As message suggesting that it must be problem from issuer side and and our issuer is Apple. So how to fix it ?
This certificate has an invalid issuer
Here i posting image of keychain. I need quick help.
<a href="http://i.stack.imgur.com/2QglP.png" target="_blank" rel="noopener noreferrer"><img src="http://i.stack.imgur.com/2QglP.png" alt="enter image description here"></a>

I am trying to upload an **Apple TV** App to the App Store for testing purposes, but I got the issue:

&gt; This Action could not be completed. Try Again (-22421)

as in the below image:

[![enter image description here][1]][1]

So what can I do?

  [1]: http://i.stack.imgur.com/eV1e7.png

This action could not be completed. Try Again (-22421)

2 days before I successfully uploaded the archive for my application and my application is on app store, but yesterday and today when I upload the archive I see &quot;Uploading the archive&quot; message (with subtitle &quot;Sending api usage to itunes connect&quot;) at the beggining, but then I see &quot;iTunes Store operation failed. This action couldn&#39;t be completed. Try again later&quot; :

[![enter image description here][1]][1]

When I try to upload the archive for another application, everything is OK, it&#39;s very strange, because since 2 days ago I only changed the minimum age in the application from 17 to 18 (so I didn&#39;t change everything important in the application settings).

May be in happen because we use iAd network and apple notified that this network will be unavailable since July ? 

[![enter image description here][2]][2]


  [1]: http://i.stack.imgur.com/0tdjj.png
  [2]: http://i.stack.imgur.com/Gz8ye.png

Can&#39;t upload archive to app store since yesterday

I come to React Native development without previous experience in iOS development. I want to build release. .ipa file - ideally from the command line but the official documentation [Running On Device][1] is very brief.

I was able to deploy applications on my iPhone manually via XCode but still, I can&#39;t find any &quot;release IPA&quot; file. I have updated my code with `#ifdef DEBUG` directives to make it more generic.

Is there a way to build an application in release mode only via the command-line? If no, what is &quot;the official&quot; way to generate an RN application?

I am currently using RN 0.20.


  [1]: https://facebook.github.io/react-native/docs/running-on-device-ios.html#content

How to build .ipa for React Native?

I am trying to play audio through a *WebView* built which is built in Swift. Upon playing the audio, sometimes it will play out and other times it&#39;ll play for ~2 seconds and stop. I then get an error in the Xcode log:

    /Library/Caches/com.apple.xbs/Sources/AppleGVA/AppleGVA-9.1.6.1/Sources/Slices/Driver/AVD_loader.cpp: failed to get a service for display 4 

AVD_loader.cpp: failed to get a service for display 4

Is there a way to set `fontStyle: &#39;italic&#39;` **only** for the `placeholder` of the TextInput in React Native?

looking [here at the documentation][1]  seems like you can only set a placeholder and placeholderTextColor.


  [1]: https://facebook.github.io/react-native/docs/textinput.html

How to change styling of TextInput placeholder in React Native?

When I added my latest build for internal testing with Test Flight, I saw that it had a &quot;Missing Compliance&quot; status.

Is this a major problem? Why does this appear? How can I resolve this issue?

[![Test flight status Missing Compliance][1]][1]

  [1]: http://i.stack.imgur.com/XBXUa.png

Missing Compliance status in Test Flight

What is the purpose of writing comments in Swift as:

&lt;!-- language: objective-c --&gt;

    // MARK: This is a comment

When you can also do:

&lt;!-- language: objective-c --&gt;

    // This is a comment

What does the `// MARK` achieve?




Swift: Understanding // MARK

After updating to Xcode 7.3, it throws the error `Cannot create __weak reference in file using manual reference counting` in pod files. Has anyone solved this issue?

Xcode 7.3 cannot create __weak reference in file using manual reference counting

I am an self-employed iOS developer and so have my own iOS distribution membership.

For a few days, I am working as a developer in a team. My apple account has been added in their iTunes Connect / Users and Roles. It works since I can access to the app details of the current app we develop.

However, I can&#39;t get it right on Xcode. And so Xcode says the bundle ID is not right because I don&#39;t have the provisioning profiles.

In &#39;Project&gt;General&gt;Identity&gt;Team&#39;, I can only select my own account and I don&#39;t see the new team I am part of.
I don&#39;t see it neither in the Accounts page of Xcode preferences.

A provisioning profile has been created by the team leader for me. It didn&#39;t solve the problem.

Question: How to add new team we belong to in Xcode?

---

# Note - at long last Apple will resolve this insanity, 
# They are finally fixing it in 2018:

[![enter image description here][1]][1]


  [1]: https://i.stack.imgur.com/PtnTb.png

Development team not showing in Xcode

Im trying to follow the following https://stackoverflow.com/questions/28585821/none-of-the-valid-provisioning-profiles-include-the-devices as I&#39;m trying to run an application on my iPhone 5 and getting the error &quot;No matching provisioning profiles found&quot;. which is odd as it runs on my iPhone 6 fine...

when i log into developer.apple.com and click on &#39;Certificates, IDs &amp; Profiles&#39;  it takes me to &#39;https://developer.apple.com/account/#/welcome&#39; where it doesn&#39;t give me any option to add a device as all i can see is: 

[![enter image description here][1]][1]


Is there another way of fixing the error?

Any help would be appreciated.


  [1]: http://i.stack.imgur.com/8AQkM.png

Can&#39;t Access Certificates, Identifiers &amp; profiles within developer.apple.com

I&#39;m working on a project for a client. I have two .cer files (developer and distribution) both are loaded into Keystore Access on Mac OS X. However I&#39;m unable to export as a .p12 file.

[![ui][1]][1]

Alternatively I tried OpenSSL but still no luck...

&gt; openssl pkcs12 -export -in followMe_ios_development.cer -out followMe_ios_development.p12 -clcerts -nokeys

How can I export this .cer file as a .p12 so I can compile this app for iOS?
 


  [1]: https://i.stack.imgur.com/VlWjx.png

Convert .cer to .p12

During the installation of .NET Framework 4.6.2, I got an error:

&gt; .NET Framework installation failed: -2146762486. A certificate chain
&gt; could not be built to a trusted root authority


A solution to the above-mentioned error is given at this [MSDN Blog link][1], which says to do the following steps:

**1.**  Download the certificate http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt  locally (Example: C:\Temp)

**2.** You can use the certmgr.exe utility to add the certificate by using the command line. For more information, see the Certmgr.exe (Certificate Manager Tool) topic at MSDN.

**3.** Open an admin command prompt and run this command: certmgr.exe /add  C:\Temp\MicRooCerAut2011_2011_03_22.cer /s /r localMachine root

**4.** Next, try installing the patch KB3135996 or KB3136000


**MY QUESTION:**

The installation of .NET framework 4.6.2 has to be done on several production systems so, ***are the above-mentioned steps standard***? I mean, ***could it create problem to install the same certificate on several systems***? When the systems will be connected to the internet at some point, could it create conflict?

**PS:** Solving this problem (managing certificates) by connecting the systems to the Internet is not an option for me since the whole process must be **offline**.

  [1]: https://blogs.msdn.microsoft.com/vsnetsetup/2016/03/28/a-certificate-chain-could-not-be-built-to-a-trusted-root-authority-2/

A certificate chain could not be built to a trusted root authority

Using Xcode 9.1, after building an iOS app, I want to archive it and upload it to the appStore for beta-testing.
But I get the following issue after clicking the button `Upload to the App Store...` and choosing `Automatically manage signing`:

&gt; &quot;My Name&quot; has one iOS Distribution certificate but its private key is
&gt; not installed. Contact the creator of this certificate to get a copy of the private key.

I do not know why this &quot;private key is not installed&quot;, but the Distribution certificate may have been created on a different computer or something. In any case:

What is the simplest way to retrieve the missing private key and install it? In order to make things work.


Distribution certificate / private key not installed

I am trying to use a client certificate to authenticate and authorize devices using a Web API and developed a simple proof of concept to work through issues with the potential solution.  I am running into an issue where the client certificate is not being received by the web application.  A number of people of reported this issue, [including in this Q&amp;A][1], but none of them have an answer.  My hope is to provide more detail to revive this issue and hopefully get an answer for my issue.  I am open to other solutions.  The main requirement is that a standalone process written in C# can call a Web API and be authenticated using a client certificate. 

The Web API in this POC is very simple and just returns a single value.  It uses an attribute to validate that HTTPS is used and that a client certificate is present.  

    public class SecureController : ApiController
    {
        [RequireHttps]
        public string Get(int id)
        {
            return &quot;value&quot;;
        }

    }
Here is the code for the RequireHttpsAttribute:

    public class RequireHttpsAttribute : AuthorizationFilterAttribute 
    { 
        public override void OnAuthorization(HttpActionContext actionContext) 
        { 
            if (actionContext.Request.RequestUri.Scheme != Uri.UriSchemeHttps) 
            { 
                actionContext.Response = new HttpResponseMessage(System.Net.HttpStatusCode.Forbidden) 
                { 
                    ReasonPhrase = &quot;HTTPS Required&quot; 
                }; 
            } 
            else 
            {
                var cert = actionContext.Request.GetClientCertificate();
                if (cert == null)
                {
                    actionContext.Response = new HttpResponseMessage(System.Net.HttpStatusCode.Forbidden)
                    {
                        ReasonPhrase = &quot;Client Certificate Required&quot;
                    }; 

                }
                base.OnAuthorization(actionContext); 
            } 
        } 
    }

In this POC I am just checking for the availability of the client certificate.  Once this is working I can add checks for information in the certificate to validate against a list of certificates.

Here are the setting in IIS for SSL for this web application.

[![enter image description here][2]][2]

Here is the code for the client that sends the request with a client certificate.  This is a console application.

        private static async Task SendRequestUsingHttpClient()
        {
            WebRequestHandler handler = new WebRequestHandler();
            X509Certificate certificate = GetCert(&quot;ClientCertificate.cer&quot;);
            handler.ClientCertificates.Add(certificate);
            handler.ServerCertificateValidationCallback = new RemoteCertificateValidationCallback(ValidateServerCertificate);
            handler.ClientCertificateOptions = ClientCertificateOption.Manual;
            using (var client = new HttpClient(handler))
            {
                client.BaseAddress = new Uri(&quot;https://localhost:44398/&quot;);
                client.DefaultRequestHeaders.Accept.Clear();
                client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue(&quot;application/json&quot;));
                
                HttpResponseMessage response = await client.GetAsync(&quot;api/Secure/1&quot;);
                if (response.IsSuccessStatusCode)
                {
                    string content = await response.Content.ReadAsStringAsync();
                    Console.WriteLine(&quot;Received response: {0}&quot;,content);
                }
                else
                {
                    Console.WriteLine(&quot;Error, received status code {0}: {1}&quot;, response.StatusCode, response.ReasonPhrase);
                }
            }
        }

        public static bool ValidateServerCertificate(
          object sender,
          X509Certificate certificate,
          X509Chain chain,
          SslPolicyErrors sslPolicyErrors)
        {
            Console.WriteLine(&quot;Validating certificate {0}&quot;, certificate.Issuer);
            if (sslPolicyErrors == SslPolicyErrors.None)
                return true;

            Console.WriteLine(&quot;Certificate error: {0}&quot;, sslPolicyErrors);

            // Do not allow this client to communicate with unauthenticated servers.
            return false;
        }

When I run this test app I get back a status code of 403 Forbidden with a reason phrase of “Client Certificate Required” indicating that it is getting into my RequireHttpsAttribute and it is not finding any client certificates.  Running this through a debugger I have verified that the certificate is getting loaded and added to the WebRequestHandler.  The certificate is exported into a CER file that is being loaded.  The full certificate with the private key is located on the Local Machine’s Personal and Trusted Root stores for the web application server.  For this test the client and web application are being run on the same machine.
  
I can call this Web API method using Fiddler, attaching the same client certificate, and it works fine.  When using Fiddler it passes the tests in RequireHttpsAttribute and returns a successful status code of 200 and returns the expected value.

Has anybody run into the same issue where HttpClient does not send a client certificate in the request and found a solution?

**Update 1:**

I also tried getting the certificate from the certificate store that includes the private key.  Here is how I retrieved it:

        private static X509Certificate2 GetCert2(string hostname)
        {
            X509Store myX509Store = new X509Store(StoreName.My, StoreLocation.LocalMachine);
            myX509Store.Open(OpenFlags.ReadWrite);
            X509Certificate2 myCertificate = myX509Store.Certificates.OfType&lt;X509Certificate2&gt;().FirstOrDefault(cert =&gt; cert.GetNameInfo(X509NameType.SimpleName, false) == hostname);
            return myCertificate;
        }

I verified that this certificate was getting retrieved correctly and it was being added to the client certificate collection.  But I got the same results where the server code does not retrieve any client certificates.

For completeness here is the code used to retrieve the certificate from a file:

        private static X509Certificate GetCert(string filename)
        {
            X509Certificate Cert = X509Certificate.CreateFromCertFile(filename);
            return Cert;

        }
 
You will notice that when you get the certificate from a file it returns an object of type X509Certificate and when you retrieve it from the certificate store it is of type X509Certificate2.  The X509CertificateCollection.Add Method is expecting a type of X509Certificate.

**Update 2:**
I am still trying to figure this out and have tried many different options but to no avail.  

 - I changed the web application to run on a host name instead of local host.
 - I set the web application to require SSL
 - I verified that the certificate was set for Client Authentication and that it is in the trusted root
 - Besides testing the client certificate in Fiddler I also validated it in Chrome.

At one point during trying these options it started working.  Then I started backing out changes to see what caused it to work. It continued to work.  Then I tried removing the certificate from the trusted root to validate that this was required and it stopped working and now I cannot get it back to working even though I put the certificate back in the trusted root.  Now Chrome will not even prompt me for a certificate like it used too and it fails in Chrome, but still works in Fiddler.  There must be some magic configuration I am missing.

I also tried enabling &quot;Negotiate Client Certificate&quot; in the binding but Chrome still will not prompt me for a client certificate.  Here is the settings using &quot;netsh http show sslcert&quot;

     IP:port                 : 0.0.0.0:44398
     Certificate Hash        : 429e090db21e14344aa5d75d25074712f120f65f
     Application ID          : {4dc3e181-e14b-4a21-b022-59fc669b0914}
     Certificate Store Name  : MY
     Verify Client Certificate Revocation    : Disabled
     Verify Revocation Using Cached Client Certificate Only    : Disabled
     Usage Check    : Enabled
     Revocation Freshness Time : 0
     URL Retrieval Timeout   : 0
     Ctl Identifier          : (null)
     Ctl Store Name          : (null)
     DS Mapper Usage    : Disabled
     Negotiate Client Certificate    : Enabled

Here is the client certificate I am using:

[![enter image description here][3]][3]

[![enter image description here][4]][4]

[![enter image description here][5]][5]

I am baffled as to what the issue is.  I am adding a bounty for anyone that can help me figure this out.

  [1]: https://stackoverflow.com/questions/22197762/webapi-httpclient-not-sending-client-certificate
  [2]: http://i.stack.imgur.com/Wr1ZK.png
  [3]: http://i.stack.imgur.com/ejN8h.png
  [4]: http://i.stack.imgur.com/byZZR.png
  [5]: http://i.stack.imgur.com/lMMaF.png

How to use a client certificate to authenticate and authorize in a Web API

I am trying to add certificate Authority (CA) file name - `ca.crt` to `/etc/ssl/certs`, for that I followed [this article](https://www.mankier.com/8/update-ca-trust#Source_Configuration).

I copied my `ca.crt` file  to ` /etc/pki/ca-trust/source/anchors/` and run the command below;

    update-ca-trust extract

After that I checked `/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt` file, but I didn&#39;t find my CA.

I am not able to figure out what may be the problem.

What am I doing wrong and how can I fix it?

How to add Certificate Authority file in CentOS 7

I am working on a project that needs to connect to an https site. Every time I connect, my code throws exception because the certificate of that site comes from untrusted site.  Is there a way to bypass certificate check in .net core http?

I saw this code from previous version of .NET. I guess I just need something like this.
     
     ServicePointManager.ServerCertificateValidationCallback += (sender, cert, chain, sslPolicyErrors) =&gt; true;

bypass invalid SSL certificate in .net core

I am just simply trying to add the domain `test.example.com` to the certificate that already exists for `example.com`. How do I add a domain to my existing certificate and replace the old certificate?

I have tried these few commands

    ./letsencrypt-auto certonly --cert-path /etc/letsencrypt/archive/example.com --expand -d test.example.com

    ./letsencrypt-auto certonly -d example.com --expand -d test.example.com

Result: both created a brand new cert in a new folder test.example.com-0001


    ./letsencrypt-auto certonly --renew-by-default  --expand -d test.example.com

Result: error folder test.example.com already exists.




    ./letsencrypt-auto renew --expand -d orange.fidka.com

Result: error, I can only renew if my certificate is expired.
    

Letsencrypt add domain to existing certificate

I get the following error when trying to install Punkt for nltk:

    nltk.download(&#39;punkt&#39;)    
     [nltk_data] Error loading Punkt: &lt;urlopen error [SSL:
     [nltk_data]     CERTIFICATE_VERIFY_FAILED] certificate verify failed
     [nltk_data]     (_ssl.c:590)&gt;
    False



NLTK download SSL: Certificate verify failed

How to simply store a String in Keychain and load when needed.
There are several SO solution which mostly refers to Git repo. But I need the smallest and the simplest solution on latest Swift. Certainly, I don&#39;t want to add git framework for simply storing a password in my project.

There are similar solution https://stackoverflow.com/questions/30719638 , which did not work for me. Tired with compiler errors.

Save and Load from KeyChain | Swift

Starting with macOS Sierra, I can&#39;t import a codesign-identity into a keychain with /usr/bin/security any more without usr/bin/codesign UI-prompting for access when using this identity. This breaks the packaging scripts of build server. There seems to be no workaround. This affects custom created keychains, but also the login.keychain.

Steps to Reproduce:
Execute the following commands in Terminal (requires a signing identity to be available to import):

    security create-keychain -p test buildagent.keychain
    security unlock-keychain -p test buildagent.keychain
    
    security list-keychains -d user -s buildagent.keychain
    security default-keychain -s buildagent.keychain
    
    security import identity.p12 -k buildagent.keychain -P password -T /usr/bin/codesign
    
    codesign -vfs &#39;$IDENTITY&#39; &#39;${PRODUCT}&#39; --keychain &#39;buildagent.keychain&#39;

Result: macOS shows a UI-prompt asking for permission to access the previously imported private key.

I have tried many workarounds, but nothing seems to work:

 - Using the new .keychain-db extension when specifying the keychain-name 
 - Using the login.keychain instead of the custom one
 - Importing the p12 with -A (&#39;Allow any application to access the
   imported key&#39;) 
 - Importing the Cert und Key separately (being extracted
   from the p12 before with openssl pkcs12)

Importing the identity definitely works, I can see the cert and key when displaying the contents of the keychain in the Keychain Access application. The access control setting for the private key is also correctly configured (with the desired codesign exception rule).

How can I avoid the UI prompt from Sierra?

security / codesign in Sierra: Keychain ignores access control settings and UI-prompts for permission

I&#39;m trying to learn to load apps on my iPhone from Xcode.  When I do I keep getting &quot;Codesign wants to access key &quot;access&quot; in your keychain,  I put I my login password but it keeps popping up over and over.  I&#39;ve tried my computer login so many times, apple account password, and many others.

[![enter image description here][1]][1]


  [1]: https://i.stack.imgur.com/678Uf.png

Content Type	Original Author	Original Content on Stackoverflow
Question	technerd	View Question on Stackoverflow
Solution 1 - Ios	Uma Madhavi	View Answer on Stackoverflow

This certificate has an invalid issuer : Keychain marks all certificates as "Invalid Issuer"

Ios Problem Overview

Ios Solutions

Solution 1 - Ios

Every time I open my VS solution I get “Projects have recently been added to this solution. Do you want to get them from source control?”

How to compare equality of lists of arrays with modern Java?

Attributions