Issues with Older Mac OSX Systems Accessing Cloud or Activation Server

BeerSmith

BeerSmith

Staff member
Administrator
Grandmaster Brewer
Joined
Apr 5, 2003
Messages
6,331
Reaction score
143
Location
Virginia
We did a server upgrade on 25 August 24 on the BeerSmithRecipes.com site. Unfortunately many older Mac OSX versions have an old version of openSSL dating from 2017 or earlier, which can't properly validate new certificates.

There is a fix which involves updating the trusted certificate list for the SSL
stack (just one file actually):

You can do this from the file finder on the Mac but you need admin permissions:
  • Save the attached cert.pem file off to someplace like your Desktop
  • Open the Apple File Finder (normal file manager)
  • On the Go menu->Go To Folder...
  • In the dialog type "/etc/ssl" without the quotes and press OK
  • This should take you to the /etc/ssl directory which has the old "cert.pem" file in it.
  • You can drag the old cert.pem (in that directory) somewhere else (like your documents folder) if you want to keep a backup copy (not required)
  • Then try dragging the new cert.pem (one I sent you) into that folder and overwrite the one that is there
  • It will likely ask for a password as that is a protected directory
  • If that works try restarting BeerSmith
Note: the "cert.pem" file attached here was extracted from Mozilla Firefox dated 24 Sep 2024. Some users may wish to get a updated version. Libcurl publishes an update periodically here. If you wish to export your own list from a trusted browser or another Mac there are sites online describing how to do so.

Thanks,
Brad Smith
 

Attachments

Last edited:
Hi Brad,
I think I'm facing this issue.
I'm using an old Mac with masOs Catalina 10.15 and my beersmith software can't connect to add-ons, activation server and cloud.
Could you help me ?
thanks
Rémy
 
I can but I need to send along a small file as an attachment - could you please drop an email to (beersmith at beersmith.com) and I will send the file as well as the instructions.

Brad
 
I've posted the file and instructions above.
 
Thank you, Brad!
This fix was fast and easy.
I had been struggling with this for a few months and "finally" decided to break down and "check the Forum".
Much appreciated!
 
Yes, unfortunately we are required to update the web certificates annually so I really had no choice. Hopefully the fix will give older Mac users an option for several more years.
 
You must log in or register to reply here.
Back
Top