Why is my Not Trusted iOS profile?

I created CA, server, and client certificates with OpenSSL for my application. When I look at profiles, the root CA is displayed as "Trusted", but my server and client certificates (which are signed by my CA) are displayed as "Not Trusted".

These certificates appear to be signed by the root certification authority and work correctly in IE or Chrome.

  • Why is this not working?
  • Any way to debug, why do they appear as "untrusted"?
+4
source share
2 answers

I assume this happened because I used only a small (512 or 1024) byte certificate. When I used the newer version of OpenSSL to create a 2048 byte certificate, it started working.

I still need to check if the minimum valid key length is valid in iOS.

+3
source

iPhone Configuration Utility allows you to install and manage all configuration settings, including root certificates.

It should give you the opportunity to see which CAs on your device, add new ones and delete everything that causes problems.

0
source

Source: https://habr.com/ru/post/1433176/


All Articles