终于发现了一个删除信任里残留证书的方法

之前用Shadowrocket的HTTPS解密需要导入证书功能,但是换iPhone X的时候,恢复备份之后发现证书所依赖的描述文件没有被恢复过来,但是信任证书居然还残留在里面删不掉,虽说忽略掉不打开信任开关也没问题,但是比较还是会逼死强迫症的。翻查网络和询问作者都一直误解,终于今天在Telegram上面Shadowrocket的作者推送了这个链接,问题终于得到了解决!

https://apple.stackexchange.com/questions/300203/how-can-i-delete-a-certificate-that-got-restored-from-a-backup-under-ios-10-11

With iOS, certificates are installed as part of profiles. Deleting a certificate means removing the profile.

When an iPhone with profiles is backed up, and then the backup is restored to a new device, the profiles are no longer visible under Settings > General > Profiles. So, they can’t be deleted via the usual way.

The certificates however get restored to the device. One can see them e.g. under Settings > General > About > Certificate Trust Settings.

Hence my question: How can these certificates be deleted from the device?

I found a certificate in my iOS device’s Certificate Trust Settings. And it was not be found in Profiles. Finally I remove it by add the cert file again, and then I can found and remove it in Profiles.

At first, I can’t found the cert file, because this CA was installed years ago. So I did these things:

Backup iPhone to Mac, View backup file by some software (I used iMazing)
Find TrustStore.sqlite3 in Backup/KeychainDomain/ and export it to HOME DIR.
Use this project https://github.com/ADVTOOLS/ADVTrustStore to export certfile

./iosCertTrustManager.py -t ~/TrustStore.sqlite3 -e ~/foo.crt
Airdrop or Email this crt file to iOS device, and install it.
Find it in Settings > General > Profiles and Remove it.
It disappear in “Certificate Trust Settings”
Done.

 

折腾了一下,将wordpress改成HTTPS访问了

在Dreamhost的管理界面可以很简单的添加Let’s Encrypt的证书,然后各种修改,反正现在访问这里已经是慢的,所以也就不在乎HTTPS那点微不足道的损耗了。

当然完全修改之后的后遗症估计是会有,到时候再慢慢捉虫子吧。

参考资料是:

让我们愉快地给网站加密吧!

wordpress 博客全站开启https

群晖NAS空间扩容折腾记

家里买了N年的群晖212J,挂着一只希捷的2T硬盘,就是备份一下有用的文件,上传一下照片,建立一下Photo Station,放点片子让小米盒子DLNA连上来播播片,再弄个Time Machine服务备份一下MacBook,居然也能用了这些年。

不过一只硬盘始终没发挥好双盘位NAS的功效,说不好那天罢工就挂了。一直都想着啥时候扩容升级上去。今天见京东上午10点到12点,西数红盘4TB做特价1399降到999,一只便宜400,两只就800,那么就赚一只硬盘钱了喂!于是一时忍不住剁手就下单整了两只……
继续阅读群晖NAS空间扩容折腾记

动手修复Lightning线

今天是个动手的日子!iPhone数据线自从换Lightning换口之后,最大的问题就是包皮会裂开!看了网上介绍热缩管修复技术之后,从万能的淘宝上采购了一捆,然后自己动手!技巧是电吹风不够力,最好用打火机烤,推荐可以竖着放的Zippo煤油那种,可以省一只手干活,当然请注意安全防火和避免明火烧线。于是手上几条线全被修复或者加固了!我都觉得好佩服自己啊!哈哈哈 <( ̄︶ ̄)>

  

π日

2015年3月14日,一个很完美的π日,因为3/14/15,3.1415926535897932384626……  我至今都能记得这个长度:山巅一寺一壶酒,尔乐苦煞吾,把酒吃,酒杀尔,杀不死,乐啊乐!