Ticket Options
Question Details
TICKET ARCHIVE -> Safari 1.3.1 Secure Website Problems
SMP2005 - Sep 13, 2005 - 5:48 pm
Hi
I have been hitting brick walls trying to access particulat websites.
I am on MAc OSX 10.3.9 running Safari 1.3.1 (v312.3). When I go to Amazon (for example) and attempt to log in I get this lovely window;
"Safari can’t open the page (amazon.com) because it couldn’t establish a secure connection to the server “www.amazon.com”. "
I have tried anything I can think of and nothing is getting around this. It happens on sites such as Ebay, and other things in nature.
Any thoughts would be a huge help.
Thanks
Shawn
I have been hitting brick walls trying to access particulat websites.
I am on MAc OSX 10.3.9 running Safari 1.3.1 (v312.3). When I go to Amazon (for example) and attempt to log in I get this lovely window;
"Safari can’t open the page (amazon.com) because it couldn’t establish a secure connection to the server “www.amazon.com”. "
I have tried anything I can think of and nothing is getting around this. It happens on sites such as Ebay, and other things in nature.
Any thoughts would be a huge help.
Thanks
Shawn
jghaffner - Sep 15, 2005 - 1:42 pm
Hi Shawn!
I'm John, and I'll be trying to help you with this problem.
Could you list the things you've tried? That will help diagnosing the problem and also prevent some duplication.
I'd suggest clearing Safari's cache -- in my version it's under the Safari menu.
Also, have you installed any third-party plug-ins? If so, I'd remove them and see if the condition still exists.
Have you tried using Firefox
Please let me know how it goes!
--------
John H.
MacOSX.com Volunteer
I'm John, and I'll be trying to help you with this problem.
Could you list the things you've tried? That will help diagnosing the problem and also prevent some duplication.
I'd suggest clearing Safari's cache -- in my version it's under the Safari menu.
Also, have you installed any third-party plug-ins? If so, I'd remove them and see if the condition still exists.
Have you tried using Firefox
Please let me know how it goes!
--------
John H.
MacOSX.com Volunteer
SMP2005 - Sep 15, 2005 - 4:46 pm
Hey John,
I really appreciate you trying to solve this. I really think this all changed for me a while back when I installed a security update (via Apple), because I used to be able to access all websites.
OK - I have cleaned caches, both under prefs and via Cocktail. I went to look at "thind party plug ins" (from the pull down menu) and there are a lot there, but, it is all greek to me. Not sure what it means.
I have re-installed Safari 1.3.1 - and got all the same issues. I installed Safari Enhancer and ran it - got no results.
Some one posted here a while back, an approach to solving this, (having to do with keychains...) and I started to go into it - but, again, got lost on some of the actual mechanics of how to do it. I will post the persons reply at the bottom of this post.
I hope this helps you solve this annoying problem!
I greatly appreciate it.
Shawn
>>>
n article,
Zephrane wrote:
> how can you see encrypting security certificates installed in this
> browser, I haven't seen anything like in the prefs.
Safari's certificates are kept in a system keychain file. It's in the
file /System/Library/Keychains/X509Anchors
In order to view it, at least one way, there might be others, is to open
your "KeyChain Access.app" in the Utilities folder and use the "Add
KeyChain" menu item under the File menu. This will allow you to browse
the file.
AFAICT you can't use KeyChain Access to modify this file, or even a copy
of it. The only way I know of to add a CA certificate to the
X509Anchors file is with the "certtool" command in the Terminal.
I've forgotten where I saw this posted but if you need to add a CA
certificate to the system keychain here's how:
-------------Apologies to the original author-----------------
You need to copy the master keychain used by Safari to your own
~/Library/Keychains folder before using certtool, then copy it back
again (using sudo).
So:
% cp /System/Library/Keychains/X509Anchors ~/Library/Keychains
% certtool i mycert.pem k=X509Anchors
% sudo cp ~/Library/Keychains/X509Anchors
/System/Library/Keychains/X509Anchors
>>>>>
I really appreciate you trying to solve this. I really think this all changed for me a while back when I installed a security update (via Apple), because I used to be able to access all websites.
OK - I have cleaned caches, both under prefs and via Cocktail. I went to look at "thind party plug ins" (from the pull down menu) and there are a lot there, but, it is all greek to me. Not sure what it means.
I have re-installed Safari 1.3.1 - and got all the same issues. I installed Safari Enhancer and ran it - got no results.
Some one posted here a while back, an approach to solving this, (having to do with keychains...) and I started to go into it - but, again, got lost on some of the actual mechanics of how to do it. I will post the persons reply at the bottom of this post.
I hope this helps you solve this annoying problem!
I greatly appreciate it.
Shawn
>>>
n article
Zephrane
> how can you see encrypting security certificates installed in this
> browser, I haven't seen anything like in the prefs.
Safari's certificates are kept in a system keychain file. It's in the
file /System/Library/Keychains/X509Anchors
In order to view it, at least one way, there might be others, is to open
your "KeyChain Access.app" in the Utilities folder and use the "Add
KeyChain" menu item under the File menu. This will allow you to browse
the file.
AFAICT you can't use KeyChain Access to modify this file, or even a copy
of it. The only way I know of to add a CA certificate to the
X509Anchors file is with the "certtool" command in the Terminal.
I've forgotten where I saw this posted but if you need to add a CA
certificate to the system keychain here's how:
-------------Apologies to the original author-----------------
You need to copy the master keychain used by Safari to your own
~/Library/Keychains folder before using certtool, then copy it back
again (using sudo).
So:
% cp /System/Library/Keychains/X509Anchors ~/Library/Keychains
% certtool i mycert.pem k=X509Anchors
% sudo cp ~/Library/Keychains/X509Anchors
/System/Library/Keychains/X509Anchors
>>>>>
SMP2005 - Sep 15, 2005 - 10:09 pm
Hi John
I am installing Firefox and will happily nuke Safari forever if this works! I will keep you posted.
Shawn
I am installing Firefox and will happily nuke Safari forever if this works! I will keep you posted.
Shawn
jghaffner - Sep 16, 2005 - 2:50 pm
Hi Shawn,
Sounds like you've done good work so far.
I just looked at the Safari Enhancer web site. It doesn't seem like it would change anything regarding secure web sites.
As far as the discussion about the Keychains and the certificates, that _might_ change the behavior, but it sounds as if you'd have to work in the terminal. Right now it doesn't seem to fit the problem.
When I look at my list of Installed Plug-Ins, I see things like Java Plug-Ins, and things for Flash sites, and QuickTime and Windows Media Player and the like. Those plug-ins are from Apple, or are pretty standard fare (RealPlayer, Macromedia, etc.) What would concern me are plug-ins from smaller developers who may not be as quick to update their plug-ins.
Let me know how it goes with Firefox, and we'll see if it's Safari's problem, or a system-wide problem.
John
--------
John H.
MacOSX.com Volunteer
Sounds like you've done good work so far.
I just looked at the Safari Enhancer web site. It doesn't seem like it would change anything regarding secure web sites.
As far as the discussion about the Keychains and the certificates, that _might_ change the behavior, but it sounds as if you'd have to work in the terminal. Right now it doesn't seem to fit the problem.
When I look at my list of Installed Plug-Ins, I see things like Java Plug-Ins, and things for Flash sites, and QuickTime and Windows Media Player and the like. Those plug-ins are from Apple, or are pretty standard fare (RealPlayer, Macromedia, etc.) What would concern me are plug-ins from smaller developers who may not be as quick to update their plug-ins.
Let me know how it goes with Firefox, and we'll see if it's Safari's problem, or a system-wide problem.
John
--------
John H.
MacOSX.com Volunteer
SMP2005 - Sep 16, 2005 - 7:12 pm
Hey John,
I loaded Firefox........ it works flawlessly! Screw Safari..... what a chunk of (fill in the blank).
You saved me and my problem!
On a sort of side note, since Firefox is now installed - why is it the ".dmg" download of Firefox and the icon (that appears like a HD of Firefox) BOTH want to reside on my desktop. I have dragged the Firefox icon to my dock and when I tried to drag either of those mentioned items, I lose Firefox and have to reinstall.
Any thoughts?
Again, John - I wish all my Digital Performer issues were as simple of a fix as a one word recommendation!!
Shawn
I loaded Firefox........ it works flawlessly! Screw Safari..... what a chunk of (fill in the blank).
You saved me and my problem!
On a sort of side note, since Firefox is now installed - why is it the ".dmg" download of Firefox and the icon (that appears like a HD of Firefox) BOTH want to reside on my desktop. I have dragged the Firefox icon to my dock and when I tried to drag either of those mentioned items, I lose Firefox and have to reinstall.
Any thoughts?
Again, John - I wish all my Digital Performer issues were as simple of a fix as a one word recommendation!!
Shawn
jghaffner - Sep 19, 2005 - 3:29 pm
Hi Shawn,
I'm glad Firefox works, but that doesn't quite answer the question as to why Safari isn't. It's puzzling to me, because I use Safari every day, and find it quite reliable. Something is probably askew in one of the preference files.
As to your question about the Firefox icon on your desktop. My guess is that when you download items, they automatically go to your desktop. When you open the .dmg file, you can install Firefox wherever you like. I'd recommend you put it in your Applications folder.
When you drag something to the Dock, you're not storing the actual item there, you're putting an alias or shortcut to it into the Dock. The original item stays in its location. So, if you put Firefox into the dock and then drag the copy from the desktop into the trash, you're deleting the original file!
Does this help?
--------
John H.
MacOSX.com Volunteer
I'm glad Firefox works, but that doesn't quite answer the question as to why Safari isn't. It's puzzling to me, because I use Safari every day, and find it quite reliable. Something is probably askew in one of the preference files.
As to your question about the Firefox icon on your desktop. My guess is that when you download items, they automatically go to your desktop. When you open the .dmg file, you can install Firefox wherever you like. I'd recommend you put it in your Applications folder.
When you drag something to the Dock, you're not storing the actual item there, you're putting an alias or shortcut to it into the Dock. The original item stays in its location. So, if you put Firefox into the dock and then drag the copy from the desktop into the trash, you're deleting the original file!
Does this help?
--------
John H.
MacOSX.com Volunteer
SMP2005 - Sep 20, 2005 - 7:22 am
Hey John
Yes, thats fixed that problem.
Now.... using Firefox, I tried to access iTunes and create a user account. When I did, I was stopped with this window;
"iTunes could not connect to the music store. The requested keychain was invalid. Open Keychain access and run Keychain first aid."
I did that (both my main accoun - me and the system account are unlocked). I ran first aid on my name account and rebooted. I went back to first aid, did the repair and verify again and rebooted. I attempted to access iTunes after each reboot and got stuck at the same spot.
I am baffled about this wntire keychain, security thing on my Mac. Any suggestions, John ?
Shawn
p.s. - you can always email me directly if you would rather - info@shawnpatterson.com
Yes, thats fixed that problem.
Now.... using Firefox, I tried to access iTunes and create a user account. When I did, I was stopped with this window;
"iTunes could not connect to the music store. The requested keychain was invalid. Open Keychain access and run Keychain first aid."
I did that (both my main accoun - me and the system account are unlocked). I ran first aid on my name account and rebooted. I went back to first aid, did the repair and verify again and rebooted. I attempted to access iTunes after each reboot and got stuck at the same spot.
I am baffled about this wntire keychain, security thing on my Mac. Any suggestions, John ?
Shawn
p.s. - you can always email me directly if you would rather - info@shawnpatterson.com
jghaffner - Sep 20, 2005 - 2:20 pm
Hi Shawn,
I know next to nothing about Keychain, sorry. It's one of the things I haven't had to deal with.
I think what would be best would be to close this question. Then, you can ask the Keychain question on a separate ticket. Would that be OK?
As far as direct email, I think it would be best to leave this on the board so that others can benefit from the discussion.
--------
John H.
MacOSX.com Volunteer
I know next to nothing about Keychain, sorry. It's one of the things I haven't had to deal with.
I think what would be best would be to close this question. Then, you can ask the Keychain question on a separate ticket. Would that be OK?
As far as direct email, I think it would be best to leave this on the board so that others can benefit from the discussion.
--------
John H.
MacOSX.com Volunteer
IF THIS IS YOUR QUESTION AND YOU WISH TO RESPOND, LOGIN HERE FIRST.
