Can IOS install self sign SSL cert for browsing internal web server by Safari or Chrome?

I have tried to install and trust on iPhone but fail to access server by Safari after that: Trust manually installed certificate profiles in iOS and iPadOS - Apple Support


Should it have any advise?

Thanks


Posted on Mar 24, 2022 2:59 AM

Reply
Question marked as Top-ranking reply

Posted on Mar 24, 2022 7:48 AM

NexusHei1220 wrote:

I have tried to install and trust on iPhone but fail to access server by Safari after that: Trust manually installed certificate profiles in iOS and iPadOS - Apple Support

Should it have any advise?


Any ideas? Set up your own web of trust; your own private root certificate. Load the public root certificate into your devices using profiles.


There’s no difference here in security or basic operations or such between self-signed and commercial certificates, just how the trusted root store is originally populated, and who maintains the certificate chain.


That’s what this (from the article you linked) is referring to:

Apple recommends deploying certificates via Apple Configurator or Mobile Device Management (MDM). Certificate payloads are automatically trusted for SSL when installed with Configurator, MDM, or as part of an MDM enrollment profile.


You will learn more about generating and signing digital certificates than you have probably ever planned (or wanted) to know, if you follow this path:


Adding self-signed as trusted root… | Apple Developer Forums

Technical Note TN2326: Creating Certificates for TLS Testing


Certs are generally good for a maximum of a year, which means we can no longer use the obvious and classic strategy of setting an expiration twenty-five years out and deploy those certs then ignore the problem ‘til then.

Similar questions

1 reply
Question marked as Top-ranking reply

Mar 24, 2022 7:48 AM in response to NexusHei1220

NexusHei1220 wrote:

I have tried to install and trust on iPhone but fail to access server by Safari after that: Trust manually installed certificate profiles in iOS and iPadOS - Apple Support

Should it have any advise?


Any ideas? Set up your own web of trust; your own private root certificate. Load the public root certificate into your devices using profiles.


There’s no difference here in security or basic operations or such between self-signed and commercial certificates, just how the trusted root store is originally populated, and who maintains the certificate chain.


That’s what this (from the article you linked) is referring to:

Apple recommends deploying certificates via Apple Configurator or Mobile Device Management (MDM). Certificate payloads are automatically trusted for SSL when installed with Configurator, MDM, or as part of an MDM enrollment profile.


You will learn more about generating and signing digital certificates than you have probably ever planned (or wanted) to know, if you follow this path:


Adding self-signed as trusted root… | Apple Developer Forums

Technical Note TN2326: Creating Certificates for TLS Testing


Certs are generally good for a maximum of a year, which means we can no longer use the obvious and classic strategy of setting an expiration twenty-five years out and deploy those certs then ignore the problem ‘til then.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Can IOS install self sign SSL cert for browsing internal web server by Safari or Chrome?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.