Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Ipad 2 IOS 9.3.5 - How to add a new root certificate to the trust store? Wikipedia inaccessible.

As of October 2021 sites such as Wikipedia which use an updated Let's Encrypt SSL Certificate no longer can be accessed via Chrome or Safari browsers available for this device. The ios 9 trust store lacks the ISRG Root X1 root cert: https://letsencrypt.org/docs/certificate-compatibility/

Is there any way for users to update our device's trust store with this root certificate?

To others left without ability to use wikipedia on these devices, note that you can use Maxthon Browser v5.4.8.3 to access wikipedia and other sites using these types of ssl certs (you are prompted to "cancel" or "continue" during notification that the site's security cannot be trusted, whereas chrome and safari offer no option to continue to the site.

Thanks

Posted on Oct 4, 2021 2:22 PM

Best reply

MrHoffman

Community+ 2024

Level 10

116,187 points

Posted on Oct 4, 2021 2:46 PM

There's no good way to do this, that far back.

Probably the least-bad option, which requires some work on a Mac with more recent software... Try creating a configuration profile with the LetsEncrypt root certificate and the LetsEncrypt intermediate certificate on a Mac with the Apple Configurator 2 app installed, and see if that configuration profile can then be installed on the iPad second-generation, and allow access.

Or use an alternate browser with its own certificate store.

Or replace the iPad 2 with something supported by recent or current iOS versions.

View in context

26 replies

lary1d

Level 1

8 points

Nov 1, 2021 11:45 AM in response to JanHans

janhans, and parapunter.....it effing worked,,it was so simple,,thanks so much,,why didnt overdrive or the certificate people tell me about this.....i have wasted so much time trying to figure this out..i am a stubborn old fool....now back in business...on the old ipad 2....

Nov 12, 2021 10:23 PM in response to MrHoffman

I'd like to try this on my iPad 3rd gen with 9.3.5. I tried going to the letsencrypt website, and it seemed to start to work, however when the Setting app opens up, it hangs for a bit, then crashes.

Will this Configurator app work on a personal iPad and not a "Managed" one?

Thanks! (or... any idea how to stop the Settings app from crashing?? My other idea is to re-install the iOS, but that seems like more trouble than it's worth, as there are apps on the iPad that I can no longer get if it gets wiped...)

Oct 5, 2021 7:08 AM in response to MrHoffman

Thanks, MrHoffman

Oct 6, 2021 2:32 PM in response to letters9umbers

Be aware that there are no iPad native tools to edit the Certificate Store. In adding Certificates in the manner that you have, you’ll be unable to remove the Certificate.

Oct 6, 2021 2:41 PM in response to LotusPilot

Really? It looks like you can just go Settings/General/Profiles , select the certificate and choose "Delete Profile".

Oct 6, 2021 2:59 PM in response to LotusPilot

No. I followed the method suggested by parapunter and it seems I can just delete the profile in settings to remove the certificate. I'm using an iPad3 with ios 9.3.6.

Oct 26, 2021 1:45 PM in response to JanHans

How do i get that file into my Mac, the file is loading down, but how can i get it to the right place so it will help my computer?

Oct 26, 2021 3:01 PM in response to MrHoffman

Thanks for your help, i can come to the system Roots, but after that Im bet ..... i just now try to load down Firefox, it might help!

Oct 27, 2021 8:11 AM in response to MrHoffman

Hi! Thanks, now I can load down my podcasters again!! To load down High Sierra made it!!!

but I had to take my phone to answer, Safari can’t open this site now, because it’s not safe it says!!!!

Oct 31, 2021 6:35 AM in response to MrHoffman

Thanks, all seems to function now!

JanHans

Level 1

8 points

Oct 31, 2021 11:28 AM in response to lary1d

That is easy to fix. Go with Safari on you ipad to https://letsencrypt.org/certs/isrgrootx1.pem and follow prompts to install the certificate on you ipad. Then the Libby/Overdrive will work.

Ipad 2 IOS 9.3.5 - How to add a new root certificate to the trust store? Wikipedia inaccessible.