Bad Server Certifcate?

Alright, I've got a bit of an odd problem here.
Whenever I go on to a site that Safari says could be "insecure," I choose to continue, but when loading the page, all pictures on that page are replaced by blue boxes with question marks in them.
So I checked the "Activity" window, and for all those pictures, the words, "Bad Server Certificate" appear.
Is there anyway to get around this, so I can actually navigate on sites with this message?
Thanks
Ziggy

If you have the DeBug menu to the right of Safari's Help menu, scroll down to the bottom to "Security" and click, then select "Performs Lax Certificate Checks".
This allows you to navigate secure sites who have signed their own certificate (very common), and actually do have secure encryption; but, because their certificate was not signed by a known, "trusted", third party certificate authority, Safari issues fair warning.
==============================
Don't have the DeBug menu? Turn it on this way:
Quit Safari.
Open HD->Applications->Terminal;
at the cursor, a gray block, type the following:
<code>defaults write com.apple.Safari IncludeDebugMenu 1</code>
Relaunch Safari and see the DeBug menu.
==============================
P.S. This "lax certificate" preference doesn't seem to hold after you quit and relaunch Safari. But it's probably best to set it site by site anyway.

Similar Messages

Safari bug--bad server response

I tried posting this a few weeks ago and got zero replies. I searched the boards for previous threads. there are some. And sadly, no one seems to have a solution. but i am trying again just in case someone has discovered something.
On many webpages i get 'safari can't open the page...bad server response (NSURLErrorDomain:-1011" For example, wikipedia and photobucket, lord of the cows forums, purevolume, versiontracker, etc
I don't get this with Firefox or Netscape.
I don't get this error on my iBook that has the same basic set up as my powerbook. Same internet connection (AEBS through a wired linksys, cable modem). It only affects the powerbook. i don't use the ibook nearly as much (hardly ever) so maybe it would develop the problem if i used it a lot.
I do get the problem both in my regular user account and my test user account on the powerbook.
I called Apple and they trouble shot it with me. Nothing worked so then she said to reinstall my system from the DVD, so i did.
After the reinstall, the problem was gone.
Several days later the problem came back.
what might be causing it?? what might solve it? There must be some conflict with something on my powerbook, yes? since it doesn't do it on the iBook? It never did it on the powerbook until several months ago. It's a new error. It must be related to some software update i did along the way. I've noticed people who have Tiger get this problem too so i don't imagine that would solve it.
A couple of people said that using Safari Debugger and changing the User Agent fixed the problem for them. I tried that and still get the same 'bad server response.' The only thing that has helped was to reinstall the system. but the fix only lasted a few days.
someone suggested removing a cookies file. Isn't that a user specific file? I have the same problem in my test user too. I did try removing the cookies files but it didn't work. i get this problem with sites i've never been to before.
I had Safari 1.2 when the problem first started. Now i have 1.3.1.

From Dr Smokes X Lab on freeing some space.
Simple ways to free space
You can employ any of the following tips to increase the free space available on your Mac OS X startup disk without altering your hardware.
Empty the Trash
As obvious as it may sound, some folks regularly Trash files but neglect to periodically empty the Trash. In Finder, select Finder > Empty Trash or, under Mac OS X 10.3 or later, you can also select Finder > Secure Empty Trash.
Do not use the Trash as a "temporary" storage area. Only put an object in the Trash if you are sure it is no longer needed.
Archive old files
Archive — move, copy and delete, or backup and remove — files you do not use regularly to CD or another backup medium.
Archiving files and folders creates a copy of the items in a compressed file. Archived files take up less disk space than uncompressed files, so archiving is useful for making backup copies of your data and sending information over the Internet.
From Apple http://docs.info.apple.com/article.html?artnum=152335
Archiving files and folders
Select an item or items.
Choose File > Create Archive.
GL, Eme
 Power PC G4 (3.3) iMac♥ Flat Panel 10.3.9 { 15 Alum.PB,10.4.6 Mac OS X (10.4.6) AEBS iMac Intel Core Duo os 10.4.6 2gb

Bad server response

I have Safari 1.3. I used to never have any problems with Safari. Then, i started having sites that i can't open. I get an error message that says "Safari can't open this page. Bad server response." At first it was just an occasional site. Now, i encounter them fairly often. For example I can't use wikipedia, I can't use Photobucket. I can't open purevolume.com. The pages open fine in Netscape.
Safari doesn't have this problem on my iBook--just the Powerbook.
Does anyone know what is causing this? It started before I updated to OX 10.3.9. Is there any way of fixing this?
thanks

thanks for the suggestion. However, this has been going on for months. I clear the cache several times a day because i was a victim of identity theft where someone got information from my computer somehow, i don't know how, but at the time i didn't have a firewall or ecryption or anything. Now i have all that stuff but since then, i empty the cache frequently as a security measure.
I also manually threw away the safari cache and icons. apparently clearing the cache doesn't get rid of those. I threw away my safari prefs. i reinstalled 10.3.9 and java, repaired permissions repeatedly.
I don't have a clue what's wrong, what it is about these particular pages that safari can't open on this computer. For a long time, it was just one or two sites where it happened. Now, it's happening much more, since i installed 10.3.9. I don't know if there's any relationship to that. I also installed 10.3.9 on the iBook and Safari doesn't have this issue on the iBook.
I wonder what these pages have in common.
I have Safari Enhancer on the powerbook and not on the iBook. I wonder if it could cause this problem.

"bad server response" issue

Hello,
This PC guy recently switched to a mac and I'm loving it so far.
I was using MS MOney and upon the advice of many I am experimenting with moneydance. When I tried to download my qif file from my bank I am receiving the "bad server response" error. I tried downloading the same file on my pc and it works fine.
I've done some searches on the boards and it sounds like this my be a safari related issue. What I haven't found is the way around it.
Any advice about how to clear this up so I may downloaded the needed files?
Thanks.

You're welcome.
Unfortunately, we still live in a Windows-centric world where some cites are developed with IE for Windows in mind without considering other browsers, especially on the Mac platform.
For that reason I think it's a good idea on the Mac platform to have an alternate browser. While I find Safari quite good for most sites, there are instances where a site's coding does not adhere to the same WebKit Standards used by Safari.
Here's the other Mac Browsers I have tried and found useful (Firefox is my favorite):
Camino,
Mozilla,
Opera,
Shiira
Haven't tried:
OmniWeb (shareware).
I excluded Netscape because I don't like it - never did.
Another suggestion is to contact the financial site inquiring about Safari compatibility.
Regarding the PDF, it may be how the site is coded. I rarely have problems viewing/downloading PDF's via Safari.

Bad server cache issue

Hi all: Our remaining XP computers are running the Novell Client 4.91 SP5 IR1. I recently moved the locations of directories we use for folder redirection to another server. When my users log into some of these XP computers, they receive a message that the folder is not available (\\server_path_to_folder) yet they can browse to a mapped drive on that same server (I:\something). I was advised by Novell to turn off the bad server cache and set the associated timeouts to 0. However, this problem persists.
Has anyone seen similar behavior? And how did you fix it?

Thanks for the reply. I should have mentioned we use group policies via ZCM 11.2.4. I have also check the registry and all is fine. If I wait for 5 minutes, the default timeout period which I had set to 0, then everything begins to work.
If I knew how to clear this cache maybe I could work around the problem.
>>> laurabuckley<[email protected]> 2/17/2014 10:26 AM >>>
Hi,
I'm not sure of the method you have specifically used for folder
redirection, but, was that mechanism ever updated and pushed down to the
workstation correctly? That's where I would look.
Cheers,
Laura Buckley
Technical Consultant
IT Dynamics, South Africa
If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below...
laurabuckley's Profile: https://forums.novell.com/member.php?userid=122
View this thread: https://forums.novell.com/showthread.php?t=474830

Bad Server Name Cache

Hello,
Is there an equivalent of the Bad Server Name Cache in the settings for Novell Client 2 for Windows 7? We need this to get our Windows 7 clients working properly with DSFW, but it appears Novell removed this setting, for some reason.

Originally Posted by chewmanfoo
Hello,
Is there an equivalent of the Bad Server Name Cache in the settings for Novell Client 2 for Windows 7? We need this to get our Windows 7 clients working properly with DSFW, but it appears Novell removed this setting, for some reason.
I checked with a member on the Novell Client team. The Novell Client for Windows 7 does not have this configuration setting. So other option available is to change the 'Network Provider Order' to list Microsoft Client ahead of Netware client.
Thanks,
Praveen Kumar

How can I create a whitelist of banking websites based on the server certifcates of legitimate sites?

I want to configure FF so that I can optionally activate a whitelist of my legitimate banking websites. When the whitelist is turned on, FF should only be able to display those sites. When the whitelist is turned off, FF works as usual and displays all sites. I would create the whitelist by visiting my banking websites and somehow adding the server certificates of those sites to the whitelist. So the whitelist would consist of the server certs of my banking websites. When whitelisting is then turned on, FF would allow me to visit only those sites whose server certs match those on the whitelist. This would protect me against phishing sites. How can I do this? Thanks

I believe that did it! Thank you. I am running those changes on a secondary E-Mail address for the same job and server and it appears to be working properly.

Images from dataset causing bad server request

I'm using Spry for some time and find it really nice framework especially for data handling.
One thing bothers me is that when trying to display images based on xml dataset (like <img src="{photo}") one false server request happens.
Before updating the ds the browser tryies to load specified url, which is quite annoying.
So far I've tried:
1. spry state ready
2. spry if many properly formulated options
3. hiding that region with css display none and showing after ondatachanged notification
none helped.
Any help in that matter would be great.

Please post a link to your site.
Gramps

Submission Error, Bad Server Request

I have a client that has attempted to submit her form four times. Each time she receives the following error.
"An error has occurred. There was an error communicating with the server. PLease try again later. [ref:SJ9idS4Oa3EM-g5INcixlw, server BadRequest]"
Where does this originate from? Adobe or her server?
Also, when she returns to the link (that she saved before trying to submit) all of her attachments are still in the HTML form, but all of the filled in data fields have been deleted.
We want to figure this out in case another client has the same issue. Any help would be appreciated.
Thank you!

I am having the same issue. I sent the form link to the clients (an HTML form) and they are getting the same error message as mentioned above after saving, reopening, and then attempting to submit the form. I have also tried and am getting the same response. This is on both Mac and Windows and Firefox and Chrome. The error message references this: [ref: gunBmFz3UUDyGr7c-cnT2A, serverUnknownError]
Thanks,
Nicole

Bad server or What ?

Hi just doing a few things on my site and realized that it
was not centred properly in Firefox so trying to sort out the
problem, when I tried to connect to my webhost it says
connecting--- waiting for webhost----a ftp error occurred cannot
make conection to host--ftp mob-jukeboxes.com is not responding...
I turned of all of my Norton etc and disabled all firewalls
and have not changed any settings since I uploaded my site a few
months ago and ideas why I cannot connect thanks

Sounds like a server problem. If you want to be sure, go
download a free FTP client and try connecting. If it doesn't
connect it's a server issue, if it does it could be a DW
issue.

: %AAA-3-BAD SERVER TYPE ERROR

Hi all,
Receving this error in switch logs
: %AAA-3-BADSERVERTYPEERROR: Cannot process authentication server type tacacs+ (UNKNOWN)
%AAA-3-BADSERVERTYPEERROR: Cannot process authentication server type tacacs+ (UNKNOWN)
Anynone please tell me how to fix it?
When i telnet to switch it just ask for pw only.
Thanks
Mahesh

Need more information than just this. Did you debug? What are the aaa commands on the switch?
Sent from my iPhone

How to Remove a bad mailbox server and add new mailbox server to DAG and copy mailboxes over

DAG
2- cas - VM
2- mbx- physical blade (mbx1, mbx2)
5- mailbox databases
OS: Win 2008 SP2
Exchange 2010SP3
Storage: Tegile Disk jbod Luns
We have bad disks on mbx1. our plan is to get a new blade to replace the bad one named mbx3. we need to do this asap since we are running on 1 server without failover capability
How can I safely:
1. Add a new mailbox server to the DAG
2. Copy\Move the databases from the old (passive) server to the new server
3. Remove the bad mailbox server from DAG

You'll want to make sure that the new server is on all the same networks that the server you are removing is on, specifically networks that are DAG networks. Also, you'll want to avoid using Windows Network Load Balancing on the new mailbox server
since it will be part of the DAG. Also, just as you did with the current DAG members, ensure that the disk drive letters match the existing disks that hold databases & logs. Other than that, it's as simple as you have stated.
1.) Once you have the new mbx server built & configured with the mailbox role, you can use:
Get-DatabaseAvailabilityGroup "Name of DAG" | Add-DatabaseAvailabilityGroupServer "Name of New MBX Server"
2.) Add the databases to the new DAG member:
Add-MailboxDatabaseCopy "name of database" -MailboxServer "name of new DAG member" -ActivationPreference "[you decide based on the server replacing mbx1]"
3.) Once your databases are Mounted and/or Healthy on the new DAG member, you'll want to remove the databases from the "bad" server (make sure they are all passive on the server first):
Get-MailboxDatabaseCopy "SERVER\Database" | Remove-MailboxDatabaseCopy
4.) Once all of the databases are removed from the "bad" DAG member, remove him from the DAG:
Get-DatabaseAvailabilityGroup "Name of DAG" | Remove-DatabaseAvailabilityGroupServer "Name of old MBX Server"
Before you pull the blade, uninstall Exchange Server gracefully, as this will save you AD & Exchange headaches later on.
Petri has a pretty good GUI walk-through for some of the above steps here:
How to Configure Database Availability Group for Exchange Server 2010
Woody Colling, MCITP Exchange 2010
--The incentive for the experts to answer posts is to get their replies marked as helpful, or as the answer to our questions, help them help us, mark posts accordingly--

Certificate Authority is not being seen by windows server 2003 machines

Good Afternoon,
We recently installed a certificate authority using windows server 2008 r2. There was an old certificate authority that had went bad and the role could not be uninstalled on the bad server. The new certificate authority works with windows 2008 machines but
does not work with server 2003 machines. Mainly trying to get the domain controller certificate. At first it was stating that the rpc was unavailable for the CA. I tried to delete the remnants under the sites and services role of the old server. The error
now it states that it can not find a certificate authority. As stated above the newer machines (Server 2008) can see the certificate authority and request certificates but older machines cant. Any assistance on what to do next will be greatly appreciated.
Attached is the error I receive when trying to request a certificate through the CA mmc.
dmg

It is possible to change the hash algorithm a CA uses to support XP and 2003 "out of the box" without the hotfix.
But it would be better to have two CAs in parallel - one using a more modern algorithm and a CA supporting a "legacy" algorithm - and the latter should only be used as long as there are clients that aren't able to validate the other algorithms.
On the CA, start regedit and locate the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CertSvc\Configuration\<Your CA>\CSP
I am assuming that the Software CNG provider is used with SHA256 or higher (not with SHA1).
Change CNGHashAlgorithm to SHA1 and restart the CA service.
The setting can be reverted by changing the value back. All certificates and all CRLs signed by this CA will use the new hash algorithm after the restart.

How many cpus on server are allocated to client

hello,
its not an issue rather doubt which is hunting me from last 2-3 days.
My 10gR2 Oracle database running on
Widows server 2008 R2 Enterprise
Processor ----> intel Xeon cpu [email protected] GHz (4 processor)
RAM------>8GB
its a dedicated server.
Actually i was going through the AWR report whn one of the client came to me with slow database performance during some time interval.
when i had a look at the Top 5 Timed Events in Report it showed me the
Sql*net message from client      834.35si told them to run their query so that i can have trace of that.
then time event showed me something nearer to above and our database was taking only 15 sec to carry out the task.
i told them that
"you application/client is taking 834 sec to tell our database to do something.But once the database got your application's request to carry out something, the database is taking only 15 sec to provide you with the result"
so they asked me to justify that the problem is with application side/machine side.
After digging in a lot on the internet ground, chatting with my colleges on cell phone and running through many threads specially Asktom.oracle.com, i got really confused.
They came up with varied opinions which kept me thinking again & again over the same thing.
In one of his(Thomas kyte) thread the discussion was as follows.
The output of tkprof when the developers run the same program on their PC shows a big difference in
SQL*Net message from client.
The SQL*Net message from client from my tkprof is almost 4-5 times theirs.
Could you please advise what might be the cause of that?
Thanks
Followup   August 25, 2009 - 9am Central time zone:
that could mean.....
your machine is slow (their desktop cpus blow your server cpus away) as much as anything.
since their code is not instrumented, try SQL*Net trace (with TIMESTAMPS) can be helpful to check out the time in the network between the client and server. See Note 16658.1 - see if you experience radically different response times on the various machines.
4 stars   August 25, 2009 - 2pm Central time zone
Bookmark | Bottom | Top
Reviewer: Jaklin Ekdawi
My Database server is T5120 with 4 core 1.2 GHz Ultra SPARC T2 processor (from O/S it is seen as 32
CPU * 1.2 GHz).
Their PC has 2 CPU * 4 Ghz.
Based on the above, How come their PC is more powerful than my server?
The ASH Report for the execution period of the program shows ¿CPU + Wait for CPU¿ is the top event,
however, tkprof shows ¿SQL*Net from client¿ is the top event waited on.
Top User Events
Event        Event Class    % Activity    Avg Active Sessions
CPU + Wait for CPU     CPU             81.66        0.14
log file sync             Commit             5.92        0.01
db file scattered read     User I/O     2.37        0.00
Can you please explain why there is a difference between tkprof and ASH report?
Thank You
Followup   August 25, 2009 - 8pm Central time zone:
I only care about a single cpu, your client program is not using more than one.
I often downloaded stuff from my big bad sparc to my desktop because my desktop was many times faster than the sparc.
look further down in the ash report - sqlnet message from client is an idle wait, we tend to ignore it as it is the time we spent WAITING FOR THE CLIENT.
Their pc looks a lot faster than your server since you are only using a single cpu - your client is not multi-process. It only uses a single cpu.
4 stars   August 25, 2009 - 2pm Central time zone
Bookmark | Bottom | Top
Reviewer: Jaklin Ekdawi
Sorry, I forgot to say that during the execution time the cpu on the server was 98-99% idle based
on (using top and sar).
Thanks
Followup   August 25, 2009 - 8pm Central time zone:
I agree, because you could not use 31 out of 32 cpus, I would expect it to be almost idle.
97% idle would mean a single cpu was 100% used. So, it sounds like you were using almost 100% of that single cpu you had access to.
and it isn't as fast as their pc.
4 stars   August 25, 2009 - 10pm Central time zone
Bookmark | Bottom | Top
Reviewer: Jaklin Ekdawi
The tkprof from the developer's PC is below
OVERALL TOTALS FOR ALL NON-RECURSIVE STATEMENTS
call     count       cpu    elapsed       disk      query    current        rows
Parse      122      0.39       0.68          0        403          0           0
Execute    122      0.00       0.00          0          0          0           0
Fetch      396      0.09       0.11          0      25354          0         274
total      640      0.48       0.80          0      25757          0         274
Misses in library cache during parse: 122
Elapsed times include waiting on following events:
Event waited on                             Times   Max. Wait Total Waited
----------------------------------------   Waited ---------- ------------
SQL*Net message to client                     763        0.00          0.00
SQL*Net message from client                   763       14.71        312.91
SQL*Net more data to client                   122        0.00          0.00
The tkprof for the running the same process on Solaris DB Server
OVERALL TOTALS FOR ALL NON-RECURSIVE STATEMENTS
call     count       cpu    elapsed       disk      query    current        rows
Parse      124      0.06       0.03          0          0          0           0
Execute    124      0.04       0.01          0          0          0           0
Fetch      400      0.07       0.10          0        802          0         276
total      648      0.17       0.15          0        802          0         276
Misses in library cache during parse: 1
Elapsed times include waiting on following events:
Event waited on                             Times   Max. Wait Total Waited
----------------------------------------   Waited ---------- ------------
SQL*Net message to client                     774        0.00          0.00
SQL*Net message from client                   774       43.65        964.23
- On Solaris DB server, the CPU is 0.17, however, "SQL*Net message from client" is 964.23.
- On the developer¿s PC, the CPU is 0.48, however, "SQL*Net message from client" is 312.91.
Based on that, how I can approve it is CPU issue?
Followup   August 26, 2009 - 7pm Central time zone:
how about this.
have the developers write something that mimics what they do without the database in it. Same sorts of loops and processing they do in the code in the client.
run it on their machine
run it on yours
You'll find your big bad server has cpu's that are extremely slow compared to the desktop machine.
Hence - the time spent waiting for sqlnet message from client is - time spent in YOUR client on YOUR server processing the data returned from the database.
saying "the cpu 0.17 on one and 0.48 on the other" is meaningless, they are completely different cpus with completely different performance characteristics.
And that you have 32 of them - no use to you, you use one..
It looks like your server is about 2-3 times slower then their test machine.
5 stars SQL*Net Message from client may not be an issue from the app   May 28, 2010 - 8am Central time zone
Bookmark | Bottom | Top
Reviewer: Thierry B from Paris, France
Hi,
I just read your post as I experienced the exact same problem. I found something that fixed this
problem for me, my sqlnet.ora contained that line after an oracle upgrade:
TRACE_LEVEL_CLIENT=16
I don't know how it came there. But it was the cause of my problem (too long idle time). I simply
removed it and no more wait events.
I hope it can be of any help for anyone.
Followup   May 28, 2010 - 8am Central time zone:
that is a client side issue though, isn't it. It is an application side issue, not a database side issue.
5 stars   April 15, 2011 - 10am Central time zone
Bookmark | Bottom | Top
Reviewer: A reader in this thread Tom insisted that the client has access to only 1 CPU on the server even though the questioner told him that his machine is having around 32 CPU'S.
so this thread was the source of my confusion.
i kept asking myself "if the client application has access to one cpu out of 32 cpu's on the server on which the database server is running,then What is the use of multiprocessor? my oracle/client application has access to only one cpu on the server(like Tom said), what other 31 cpu's on the server machine are upto?if one cpu is getting exhausted by the client Application request, then what the other processor are doing ? are they not meant for load balancing?"
when i had a chat on cell phone with my colleagues regarding the oracle access to the cpu's on the server, then they told me that if there are more number of cpu's then the the response time would be fast cause workload is divided among the multiple processor to carry out the task in parallel.
Again i got confused with the deferring opinion..
so just want to have clarification on
* how many processes do i have access to on server machine where my oracle is installed?*
how many processes do the client applicaiton S/W/client machine have access to out of 32 processors?
is workload devided among the cpus on the server ,in case of huge request from the client application?
thanks & i hope my doubt would be cleared

Look at it in basic terms (forgetting for the moment about Oracle and SQL*Net and specific s/w itself).
A process is loaded into memory. This process contains machine code instructions. How many CPUs can execute these instructions?
Only 1.
Simplistically. The process has a single execution pointer and set of CPU registers. A single CPU executes the instruction (as indicated by the execution pointer). The registers are used and updated.
The same CPU may not be used each time around. So a single process can during its lifetime, be executed by a number of CPUs. But a single CPU at a time.
A process can thread. This basically means that a second copy of the execution pointer and registers set are created. Each such copy will be executed by by a single CPU at a time.
An Oracle client is serviced by an Oracle server process (either dedicated or shared). On Linux/Unix systems, this will be a unique physical process. On Windows, it will be a unique thread.
This process is executed by a single CPU. Thus that client is serviced by a single CPU.
This changes when Oracle can use parallel processing and there are PX slave processes available. In that case, the client is serviced by a single process - but that process has in turn enlisted the assistance of helper processes. Thus the client is now serviced by multiple processes (or threads on Windows) and thus by multiple CPUs.
However, it is not that simple either. It is "cheaper" for the kernel to run threads on the same CPU than on different CPUs. The reason is the same memory is used by both and access to that memory by different CPUs is more complex (and thus more expensive and slower) than from the same CPU.
So depending on a number of factors, that client may still be serviced by a single CPU despite the fact that PX slaves are used. And from a client process perspective, this does not really matter. The crux of the issue in this regard is the CPU utilisation/footprint of that client process on the server.
If the clock time for a client process says "+running for 60s+" and the server says "+CPU time is 10s+", you cannot say that the process was not serviced by multiple CPUs. You do not know whether than 10s CPU time was for 5 processes each spending 2s to service that client.
However, when the server says "+CPU time is 70s+" - a longer period that the wall clock time of the client, then it is reasonable to assume that multiple server processes (and thus CPUs) are servicing that client process.
As for exactly how many CPUs are in fact used by the server? That has no real bearing on this. It does not change client-server behaviour.
Even Oracle does not know and does not care which CPU is servicing it. The correct piece of s/w to deal with that, is the kernel. Yes, you can bind a thread or process to a specific server CPU, but the reasons for this is quite technical and is always an exception. Let the kernel deal with which CPU to use. It is of no concern to the server s/w (like Oracle), and even less to the client process being serviced by that server s/w.

Macbook Pro can't can't connect to server

Disclaimer: I have been trying to solve this issue for days. I've tried taking different steps to solve this issue, however I am not the most computer savvy. I'm having multiple issues that I believe are all related to the same unknown problem. Please bear with the length:
I tried connecting to iTunes and I get an error message:
"The certificate for this server is invalid. You might be connecting to a server pretending to be 'init.itunes.apple.com', which could put your confidential information at risk. Would you like to connect to the server anyway?"
If I click "cancel" I get an -9807 error message popup. If I click "continue" instead of "cancel" I keep getting the above message but with different server names such as p14-buy.itunes.apple.com, but I have not clicked "continue" all the way through the pop up warning messages. I'm afraid to do so honestly. I don't want to connect to a bad server or something (if that is even possible).
If I try to reinstall iTunes from the apple.com I get this message:
"'Install iTunes' is damaged and can't be opened. You should eject the disk image"
My computer will not load the app store so I can't do any updates. It will open but the store content will not load and I just get a blank gray box with the App store tabs such as "Featured" etc.
I went onto Find My iPhone on iCloud.com and it says my Macbook has been locked since Nov. 10, 2014. I can't remember anything specifically going wrong on that day. I tried accessing iCloud from System Preferences. When I typed in my iCloud password, it would not let me access the iCloud options so I signed out. I tried signing back in immediately after and I got a message saying that I cannot sign in at this time. I continue to receive this message.
I was getting a server error message for Calendar whenever I opened it until I logged out of iCloud.
iCloud on my iPad Mini and iPhone 6 is just fine.
I've ran a permissions repair just to see if it would fix anything and it didn't. I've tried accessing System Roots from Keychain Access, as directed by a YouTube video, but it is in Read Only mode so I can't do anything with it, and there is nothing listed in System Roots as far as I can see anyway.
What seems to be the overall issue and how can I solve it?

This could be a complicated problem to solve, as there are several possible causes for it.
Back up all data, then take each of the following steps that you haven't already taken. Stop when the problem is resolved.
Step 1
From the menu bar, select
           ▹ System Preferences... ▹ Date & Time
Select the Time Zone tab in the preference pane that opens and check that the time zone matches your location. Then select the Date & Time tab. Check that the data and time shown (including the year) are correct, and correct them if not.
Check the box marked
          Set date and time automatically
if it's not already checked, and select one of the Apple time servers from the menu next to it.
Step 2
Triple-click anywhere in the line below on this page to select it:
/System/Library/Keychains/SystemCACertificates.keychain
Right-click or control-click the highlighted line and select
          Services ▹ Show Info
from the contextual menu.* An Info dialog should open. The dialog should show "You can only read" in the Sharing & Permissions section.
Repeat with this line:
/System/Library/Keychains/SystemRootCertificates.keychain
If instead of the Info dialog, you get a message that either file can't be found, reinstall OS X.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. Open a TextEdit window and paste into it by pressing command-V. Select the line you just pasted and continue as above.
Step 3
Launch the Keychain Access application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Keychain Access in the icon grid.
In the upper left corner of the window, you should see a list headed Keychains. If not, click the button in the lower left corner that looks like a triangle inside a square.
In the Keychains list, there should be items named System and System Roots. If not, select
          File ▹ Add Keychain
from the menu bar and add the following items:
/Library/Keychains/System.keychain
/System/Library/Keychains/SystemRootCertificates.keychain
Open the View menu in the menu bar. If one of the items in the menu is
          Show Expired Certificates
select it. Otherwise it will show
          Hide Expired Certificates
which is what you want.
From the Category list in the lower left corner of the window, select Certificates. Look carefully at the list of certificates in the right side of the window. If any of them has a blue-and-white plus sign or a red "X" in the icon, double-click it. An inspection window will open. Click the disclosure triangle labeled Trust to disclose the trust settings for the certificate. From the menu labeled
          Secure Sockets Layer (SSL)
select
          no value specified
Close the inspection window. You'll be prompted for your administrator password to update the settings.
Now open the same inspection window again, and select
          When using this certificate: Use System Defaults
Save the change in the same way as before.
Revert all the certificates with non-default trust settings. Never again change any of those settings.
Step 4
Select My Certificates from the Category list. From the list of certificates shown, delete any that are marked with a red X as expired or invalid.
Export all remaining certificates, delete them from the keychain, and reimport. For instructions, select
          Help ▹ Keychain Access Help
from the menu bar and search for the term "export" in the help window. Export each certificate as an individual file; don't combine them into one big file.
Step 5
From the menu bar, select
          Keychain Access ▹ Preferences... ▹ Certificates
There are three menus in the window. Change the selection in the top two to Best attempt, and in the bottom one to CRL.
Step 6
Triple-click anywhere in the line of text below on this page to select it:
/var/db/crls
Copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder named "crls" should open. Move all the files in that folder to the Trash. You’ll be prompted for your administrator login password.
Restart the computer, empty the Trash, and test.
Step 7
Triple-click anywhere in the line below on this page to select it:
open -e /etc/hosts
Copy the selected text to the Clipboard by pressing the key combination command-C.
Launch the built-in Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Paste into the Terminal window by pressing command-V. I've tested these instructions only with the Safari web browser. If you use another browser, you may have to press the return key after pasting. A TextEdit window should open. At the top of the window, you should see this:
# Host Database
# localhost is used to configure the loopback interface
# when the system is booting. Do not change this entry.
127.0.0.1                              localhost
255.255.255.255          broadcasthost
::1                                        localhost
fe80::1%lo0                    localhost
If that's not what you see, post the contents of the window.

Bad Server Certifcate?

Similar Messages

Maybe you are looking for