david_dodell
Level 1 (9 points)
Servers Enterprise

Q: Push Certificate Error

Im running 10.7.5 server

 

My Push notification service certificate expires in a month.

 

I tried renewing tonight through the Server app ... and keep getting the error:

 

"An unexpected error (-1200) has occurred."

 

Any idea what this is ... don't tell me Apple is not supporting 10.7.5 anymore and we're going to loose Push Notification when this expires in a month?

Mac mini, Mac OS X (10.7.5)

Posted on Sep 8, 2016 9:34 PM

Close
david_dodell

Q: Push Certificate Error

  • All replies
  • Helpful answers

  • by Antonio Rocco,

    Antonio Rocco Antonio Rocco Sep 9, 2016 3:14 AM in response to david_dodell
    Level 6 (10,586 points)
    Desktops
    Sep 9, 2016 3:14 AM in response to david_dodell

    I think you have to do this via the APNS portal. There should be a link (small grey arrow) in the Server App (somewhere) that takes you directly to the portal. Use the AppleID you used to set up push to log in. The rest should be fairly obvious. Don't expect it to work straight away as it can take a day or two to fully revoke and renew. Even then I would still prepare yourself to re-enroll all your devices.

  • by david_dodell,

    david_dodell david_dodell Sep 9, 2016 6:23 AM in response to Antonio Rocco
    Level 1 (9 points)
    Servers Enterprise
    Sep 9, 2016 6:23 AM in response to Antonio Rocco

    I also tried that, and loading https://identity.apple.com/pweb/ returns the error  "Safari can't establish a secure connection to the server "identity.apple.com"

     

    I opened the same side using chrome and was able to login, but the only option it gives me is to REVOKE the certificate, there is no renewal as in the past.

     

    At the same time, I received an email from apple informing it was time to renew the certificates ... <sigh>

  • by david_dodell,

    david_dodell david_dodell Sep 9, 2016 6:27 AM in response to Antonio Rocco
    Level 1 (9 points)
    Servers Enterprise
    Sep 9, 2016 6:27 AM in response to Antonio Rocco

    I've never had this problem in the past ... just hitting the renew in OSX Server renewed everything ... it appears we might have an issue renewing a Lion Server ...

  • by Antonio Rocco,Helpful

    Antonio Rocco Antonio Rocco Sep 10, 2016 10:53 AM in response to david_dodell
    Level 6 (10,586 points)
    Desktops
    Sep 10, 2016 10:53 AM in response to david_dodell

    I've done this with my Lion Server. Turn off the Push Notification service in Server app, Revoke the certificate in the APNS portal - you'll get an email notifying you what to do next, switch Push Notification back on and create a new certificate from there. There's also an option to create a new certificate In the APNS portal.

  • by david_dodell,

    david_dodell david_dodell Sep 10, 2016 11:03 AM in response to Antonio Rocco
    Level 1 (9 points)
    Servers Enterprise
    Sep 10, 2016 11:03 AM in response to Antonio Rocco

    I've tried this ... I revoke the certificate on the APNS portal ... and it is now gone.

     

    The portal will not let me create a certificate there, it says it has to be through the server app.

     

    In the server app, I've disabled and re-enabled the push notification, and still get the -1200 error.   I also have tried creating a new Apple ID and creating a new certificate under the new ID and get the same -1200 error

     

    <SIGH>

     

    I know everyone says, just upgrade, but this will take multiple hours, since I have multiple domains hosting, forwarding, mailman servers ( which in itself took months to get working right ) customized spamassassin settings ... basically the server has become useless now.     If I'm going to spend hours restarting, it certainly won't be with OSX again ... it was an uphill battle to get it working originally well, probably will move to a hosted solution and not fight the battle anymore.

     

    It would have been nice if we had some type of warning ... Apple certainly could have pushed out an email from the APNS portal just like the renewal notice ( which doesn't work for most of the servers that I can tell ) and suggested a solution ...   I've learned that Apple is just not serious about enterprise solutions ... or concerned about their implementations and how this affects other people that have put trust into their solutions.