Level 1

50 points

iOS 4 Mail and self-signed certificates

I connect to a mail server that has a self-signed certificate. Under previous versions of iOS, this meant that I would have to allow the server connection once after a phone restore or update; however under iOS 4.2.1, I have to allow the certificate every time I access mail after the phone has been idle for the 'lock' time.

Can I get iOS 4.2.1 to trust the self-signed certificate the mail server uses?

MacPro Quad Core, G4 1000bT, MacBookPro, mini server, Mac OS X (10.6.5), 10.6.5 Server on MacPro

Posted on Nov 23, 2010 2:59 AM

91 replies

Nov 25, 2010 8:46 AM in response to johninsj

Sure. Yes, doesn't seem to matter. Public DNS for host and host on cert are one in the same.

Apple just needs to include the install dialogue and the time of prompt (which they did not do on this rev of the iOS) and we are set. But, I fear this will be a while in that we can't get patches OTA, hence the rapid search for a workaround by all of us.

Syth Author

Level 1

50 points

Nov 25, 2010 1:31 PM in response to Community User

I mailed myslef the .pem file and installed it, but I am still getting the dialog every time I unlock my phone and try to send an email. I think I am only getting it when SENDING mail now, however.

Nov 25, 2010 1:40 PM in response to Syth

Great. You want to do the ssl cert in use for dovecot AND postfix or sendmail. The former for the getting of email and the other for the sending.

Nov 27, 2010 12:43 PM in response to SuperNurtay

Yes SuperNurtay that is how it should work. Problem is, it does not. As all the other posts speak to, one can accept the cert and it might quash the alerts until screen-lock or iOS restart, but they do not allow the perm accept. What should happen on details is to 'Install' so you can hold the acceptance.

The only way I have found to do this with iOS 4.2.1 is to email the .pem files from the server to yourself and upon download in MobileMail you get the option to install the cert as you should get when you setup email accounts.

Bruno L.

Level 1

13 points

Nov 27, 2010 12:56 PM in response to Community User

I may have missed before but can't find it. How do you get the .pem files? Is this something that is on the server? And can't I get them if I am on a shared server?

Ritey

Level 1

0 points

Nov 29, 2010 12:43 PM in response to bigcarpchaser

I have the same issues as already described, tis really annoying!

Syth Author

Level 1

50 points

Nov 30, 2010 7:45 PM in response to Merged Content 1

ZOMG! You rock!

Syth Author

Level 1

50 points

Nov 30, 2010 8:55 PM in response to Syth

Ah crud. Never mind. It appeared to have worked at first, but after shutdown and restarting my phone, the dialogs are back 😟

Syth Author

Level 1

50 points

Nov 30, 2010 8:56 PM in response to Syth

Thought it was worked around, but isn't for me.

Nov 30, 2010 10:16 PM in response to jemenake0

I am disconnecting from the thread now. For everyone who can, emailing yourself the .pem files for the cert and downloading them via MobileMail on the iPhone does work to get you the iOS dialogue screens you need to permanently trust the self-signed cert. Been running on this for many days now.

JKane

Level 1

12 points

Dec 12, 2010 8:22 AM in response to JKane

OK, I stand corrected....

It stopped working again soon after. This is really annoying 😟

dolfan87

Level 1

0 points

Dec 30, 2010 8:33 AM in response to JKane

Has anyone found a fix? This has been driving me crazy since the "upgrade"

Bruno L.

Level 1

13 points

Jan 10, 2011 1:57 PM in response to VW Web Design

Hi,

This sounds like an interesting option. I am trying to find the smtp info on my cpanel, but can't seem to be able to locate it. Any way you could help?

Thanks

JakRen

Level 1

0 points

Jan 18, 2011 4:13 AM in response to Bruno L.

IP Address : Worked.

it's been 3 days now. I "only' have to push one button to send email!!

Thanks for the help.

B

JakRen

Level 1

0 points

Jan 26, 2011 4:14 AM in response to JakRen

well,

here we are 8 days later and it's doing it again. I now remember what it was like having a WM5 phone. this is unacceptable.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

iOS 4 Mail and self-signed certificates