Skip to main content
Question

How to script the trust settings for a cert that's already in Keychain

  • June 16, 2014
  • 3 replies
  • 17 views

Forum|alt.badge.img+14

Hi

We've got a cert in the system keychain on our clients that we need to change the trust settings for.

Anyone got any idea how to do that via command / script???

3 replies

bentoms
Forum|alt.badge.img+35
  • Hall of Fame
  • June 16, 2014

What OS clients?

Is it a root cert you wish to trust?


Forum|alt.badge.img+14
  • Author
  • Honored Contributor
  • June 16, 2014

@bentoms
Mavericks and Mountain Lion clients.

It's an SSL cert for our RADIUS servers. I saw your article about adding a cert to the system keychain, just am lost how to change trust settings for a cert that already exists.


Forum|alt.badge.img+10
  • Contributor
  • June 16, 2014

You may be able to use 'security' to export the settings from a known good host, then import them back in.

I took a quick look and it seems like you may need to find a way to identify the cert, as it doesn't look like it matches up easily.