NexusHei1220 wrote:
I have tried to install and trust on iPhone but fail to access server by Safari after that: Trust manually installed certificate profiles in iOS and iPadOS - Apple Support
Should it have any advise?
Any ideas? Set up your own web of trust; your own private root certificate. Load the public root certificate into your devices using profiles.
There’s no difference here in security or basic operations or such between self-signed and commercial certificates, just how the trusted root store is originally populated, and who maintains the certificate chain.
That’s what this (from the article you linked) is referring to:
Apple recommends deploying certificates via Apple Configurator or Mobile Device Management (MDM). Certificate payloads are automatically trusted for SSL when installed with Configurator, MDM, or as part of an MDM enrollment profile.
You will learn more about generating and signing digital certificates than you have probably ever planned (or wanted) to know, if you follow this path:
Adding self-signed as trusted root… | Apple Developer Forums
Technical Note TN2326: Creating Certificates for TLS Testing
Certs are generally good for a maximum of a year, which means we can no longer use the obvious and classic strategy of setting an expiration twenty-five years out and deploy those certs then ignore the problem ‘til then.