Apple Event: May 7th at 7 am PT
was working in 4.3.5 on iPad, but no more. Imported the cert with ipcu but Safari seems to not recognize that there is a cert installed. All certs are using sha1
iPad, iOS 5
Some additional info - the imported certificate works fine for Activesync, VPN, and WiFi, so I know it is installed correctly. When connecting to a web server that requires the certificate, the following is logged in the IPCU console:
MobileSafari[368] <Warning>: no itentities, but we have a challenge <NSURLAuthenticationChallenge: 0x2eeea0>
So to me, it looks like the Web server is requesting the client certificate, but mobilesafari does not see the identity certificate I imported.
I have the very same problem - tried different styles of certificates, no luck. Getting the same message in IPCU as well.
My cert is created by our internal CA, but it is trusted etc. and works fine for ActiveSync and WLAN EAP-TLS.
Does anybody have client certificates that work in Safari on iOS5?
We are having same problem here. Read somewhere that ios5 stopped support for md5 certificates but we are using sha1.
I hope someone can share if this is a known bug and if there is a fix or workaround.
After lots of testing a colleague of mine found something interesting:
When you get a certificate from a root CA it works fine in Safari, as soon as you issue it from a subordinate CA it doesn't work anymore. We haven't investigated in detail yet, but at least it's a first clue.
If this really turns out to be the problem I'd say it's a bug, and most CAs have a highly secured root that will never issue client certficates so until this is fixed we are out of luck.
Good catch! I confirmed that our application worked after installing a certificate issued from our root CA. This is really not "best practice" solution. I hope someone from Apple can comment?
Hi,
We have same problem but in other way. Client certificate imported with profile can be use to authenticate on OWA in Safari but does't work with ActiveSync. It's like ActiveSync on iPhone ignore client certificate.
We use iPhone 4.3.5 and Exchange 2007
Someone have an idea ?
Thanks
mobile safari no longer able to authenticate with client certificate in ios 5...
