Macos Mac OS X服务器代码签名证书续订失败

服务器上收到证书即将过期的警报。我点击“续订”按钮，它显示未知错误。因此，我深入挖掘并在命令行上运行以下命令

sudo /Applications/Server.app/Contents/ServerRoot/usr/sbin/certadmin --recreate-CA-signed-certificate "macserver.local Code Signing Certificate" "IntermediateCA_MACSERVER.LOCAL_1" dd3d0ec3

对此，我得到了以下错误：

/Applications/Server.app/Contents/ServerRoot/usr/sbin/certadmin --recreate-CA-signed-certificate: Unable to renew identity 'macserver.local Code Signing Certificate': unable to renew certificate: could not find original certificate 'macserver.local Code Signing Certificate' with serial number 'dd3d0ec3' issued by 'IntermediateCA_MACSERVER.LOCAL_1' (-25300)

因此，我运行以下操作来搜索证书，它确实找到了它：

sudo security find-certificate -c "macserver.local Code Signing Certificate"
keychain: "/Library/Keychains/System.keychain"
class: 0x80001000 
attributes:
"alis"<blob>="macserver.local Code Signing Certificate"
"cenc"<uint32>=0x00000003 
"ctyp"<uint32>=0x00000001 
"hpky"<blob>=0xA14502C168EB2D717615AA60535926B760804C8F  "\241E\002\301h\353-qv\025\252`SY&\267`\200L\217"
"issu"<blob>=0x308193312A302806035504030C21496E7465726D65646961746543415F46494C455345525645522E4C4F43414C5F3131123010060355040A0C09727472616374696F6E312D302B060355040B0C244D41434F5358204F70656E4469726563746F727920496E7465726D6564696174652043413122302006092A864886F70D010901161361646D696E40727472616374696F6E2E636F6D  "0\201\2231*0(\006\003U\004\003\014!IntermediateCA_MACSERVER.LOCAL_11\0220\020\006\003U\004\012\014\011macserver1-0+\006\003U\004\013\014$MACOSX OpenDirectory Intermediate CA1"0 \006\011*\206H\206\367\015\001\011\001\026\023mymacserver@gmail.com"
"labl"<blob>="macserver.local Code Signing Certificate"
"skid"<blob>=<NULL>
"snbr"<blob>=0x00DD3D0EC3  "\000\335=\016\303"
"subj"<blob>=0x30553132303006035504030C2966696C657365727665722E6C6F63616C20436F6465205369676E696E6720436572746966696361746531123010060355040A0C09727472616374696F6E310B3009060355040613025553  "0U1200\006\003U\004\003\014)macserver.local Code Signing Certificate1\0220\020\006\003U\004\012\014\011macserver1\0130\011\006\003U\004\006\023\002US"

sudo安全查找证书-c“macserver.local代码签名证书”
keychain:“/Library/Keychains/System.keychain”
类别：0x80001000
属性：
“alis”=“macserver.local代码签名证书”
“cenc”=0x00000003
“ctyp”=0x00000001
“hpky”=0xA14502C168EB2D717615AA60535926B760804C8F”\241E\002\301h\353 qv\025\252`SY&\267`\200L\217”
“issu”=0x308193312A0302806035504030C2496E7465726D6564961746543415F4694C455345525645522E4C4F43414C5F31311230100655040A0C0972747616374696F6E312D302B060355040B0C244D414F5358244F70656E446926563746F727920496E7465726D65464646174652043422302006092A868686F70D01090161613616D60646464646262366F2231（\006\003U\004\003\014！IntermediateCA\U MACSERVER.LOCAL_11\0220\020\006\003U\004\012\014\011MAC服务器1-0+\006\003U\004\013\014$MACOSX OpenDirectory Intermediate CA1“0\006\011*\206H\206\367\015\001\011\001\026\023mymacserver@gmail.com"
“labl”=“macserver.local代码签名证书”
“打滑”=
“snbr”=0x00DD3D0EC3”\000\335=\016\303”
“subj”=0x3055332303006035504030C29766696C6573657277665722E6C6F63616C20436F646520536676E696E67204365727469666963617465312010060355040A0C09727472616374696F6E310B300906050505050505053“0U1200\006\003U\004\003\014\014”macserver.local代码签名证书1\0200\020\006\006\003U\004\012\012\014\014\011macserver1\0130\0030\00602U

---

有人对此有什么想法吗？

我已经为我的证书解决了这个问题。我使用的不是十六进制，而是十进制。因此，在您的情况下，序列号应该是十进制的371176211

希望这对你也有帮助

---

谢谢

请检查此页，我明白了。谢谢。：）