无法删除 Apple WWDRC 证书

Question

最近 Apple posted an announcement，据此中间证书已于 2 月 14 日过期，必须手动下载，并应替换系统钥匙串中较旧的过期证书。

我无法从钥匙串中删除现有证书，更不用说导入新证书了。如何删除旧的并用新的替换它？

已执行的步骤：

Answer 1

错误消息显示 "Operation not permitted"。所以你没有必要的访问权限。要解决此问题，请单击钥匙串左上角的锁并输入您的密码。

输入凭据后，您应该可以删除旧证书。

Answer 2

我想出了解决这个问题的方法。

首先，我enabled the root user in my system

OS X Lion (10.7) and later

1. From the Apple menu choose System Preferences.
2. From the View menu choose Users & Groups.
3. Click the lock and authenticate as an administrator account.
4. Click Login Options.
5. Click the "Edit" or "Join" button at the bottom right.
6. Click the "Open Directory Utility" button.
7. Click the lock in the Directory Utility window.
8. Enter an administrator account name and password, then click OK.
9. Choose Enable Root User from the Edit menu.
10. Enter the root password you wish to use in both the Password and Verify fields, then click OK.

在终端中，我以 root 用户身份登录

1. Open Terminal
2. Type su and then press Enter
3. Enter the password you just set for the root user above. This will log you in as the root user
4. Type cd /Library and then press Enter
5. Type chmod 777 Keychains/. This will change folder permissions for the Keychains folder
6. Now open the Keychain Access App and delete the Apple Worldwide Developer Relations Certification Authority certificate from the System keychain
7. Import the renewed Intermediate certificate in your login keychain
8. Close the Keychain Access app

尽管您刚刚删除的证书将再次出现在系统钥匙串中，但您所有其他开发人员和分发证书将再次生效。

确保将 Keychains 文件夹权限设置回 755

chmod 755 Keychains/

Answer 3

我能够通过首先查看 系统钥匙串 中的 expired certificate 然后删除它们来删除证书。然后重新检查证书是否也从 证书钥匙串 中删除。然后下载新证书并安装它们。这可能 help 你。

Answer 4

https://discussions.apple.com/thread/7357200?start=0&tstart=0

如上link所示，在OS为运行full模式时，有些key是无法删除的，需要以recovery模式开机。