Tag Archives: macOS

S/MIME for Apple Mail, The Right Way (DigiCert Version)

Install it on macOS:

  • Download cert bundle (.p7b) or individual certs (zipped) from DigiCert
  • Double click to install them on macOS Keychain Access

Install it on iOS:

  • Open Keychain Access, select category My Certificates
  • Right click and choose Export, select format .p12 (Make sure to export your cert into .p12, this will contain private key for iOS to send encrypted emails)
  • Email it with your individual certs (root CAs from DigiCert) and install them on iOS
  • Select this cert under email account settings

macOS Sierra Universal Clipboard Issue with VNC (Screen Sharing) Shared Clipboard

If you like me owning more than one Mac and using one of them to control the other via macOS built-in Screen Sharing feature, you may occur this issue after you upgrade your macOS to Sierra.

macOS Sierra introduces a new feature Universal Clipboard which can share the same clipboard among iOS and macOS devices. This sounds cool, but as it’s technically a part of Continuity feature, it would require Bluetooth to work.

So the problem is, when I control my Mac mini from my MacBook Pro via Screen Sharing in the same network, with the Shared Clipboard enabled, the Universal Clipboard would still always try to “sync” copied content via Bluetooth instead of using Screen Sharing Shared Clipboard.

It’s ok if both of your Macs are at your hand, but it’s a disaster if they’re in different rooms, Universal Clipboard via Bluetooth would become really slow to connect to each other, and this issue could even make your VNC drop connection if you copy images to your clipboard.

So here’s the solution, just disable Bluetooth on your Mac mini, and wait Apple to fix this bug.

Signing Git Commits without Entering Password Using `gpg-agent` and `pinentry-mac` on OS X

Install required packages via Homebrew:

$ brew install gpg gpg-agent pinentry-mac

Edit and add the following lines in ~/.gnupg/gpg-agent.conf:

pinentry-program /usr/local/bin/pinentry-mac

Edit and enable use-agent in ~/.gnupg/gpg.conf:


Then add the following line to your shell profile:

eval $(gpg-agent --daemon --sh)

ProxyChains-NG and OS X El Capitan System Integrity Protection System Integrity Protection

Apple introduces System Integrity Protection (SIP) as a security feature for OS X El Capitan (10.11), which prevent ProxyChains-NG working as before, you have to disable SIP to make it work:

  1. Reboot your Mac into Recovery Mode by pressing command-R
  2. Open Terminal and type csrutil enable --without debug:
$ csrutil enable --without debug
$ csrutil: requesting an unsupported configuration. This is likely to break in the future and leave your machine in an unknown state.
$ Successfully enabled System Integrity Protection. Please restart the machine for the changes to take effect.

Just ignore the warnings and then restart your Mac.

Uninstalling letsencrypt – Let’s Encrypt Community Support

If you have the environment variable XDG_DATA_HOME set, the installation is located at $XDG_DATA_HOME/letsencrypt. Otherwise, it is located at ~/.local/share/letsencrypt. You can simply delete this directory. You can also delete configuration, work, and log directories which by default are stored at /etc/letsencrypt, /var/lib/letsencrypt, and /var/log/letsencrypt respectively. The directory where you cloned our git repo can also be deleted.

Let’s Encrypt also installs some OS dependencies and how you remove these would be very OS specific. To see what dependencies were installed, take a look at the files in the bootstrap folder at the root of our git repo (link). Take a look at the shell script for your OS to see what packages are required. You can uninstall these packages through the normal means of your OS, but make sure they aren’t required by any other programs on your system.

Source: Uninstalling letsencrypt – Let’s Encrypt Community Support

三星 850 Pro、OS X El Capitan、SSD Trim 備忘

最近重灌了 El Capitan,在找「三星 850 Pro 是否可以用 trimforce 開啟 Trim 支援」時發現了下面的信息:


Samsung SSD 850 PRO 512GB:

  Capacity: 512.11 GB (512,110,190,592 bytes)
  Model:    Samsung SSD 850 PRO 512GB               
  Revision: EXM01B6Q
  Serial Number:    S1SXNSAF806527E     
  Native Command Queuing:   Yes
  Queue Depth:  32
  Removable Media:  No
  Detachable Drive: No
  BSD Name: disk0
  Medium Type:  Solid State
  TRIM Support: No
  Bay Name: Lower
  Partition Map Type:   GPT (GUID Partition Table)
  S.M.A.R.T. status:    Verified