iPad:the server requires a client certificate - ipad

I have https server configured with ssl options.I configured certificates in Settings>General>Profiles.
When I access my server using Safari browser it works fine. But same doesn't work with Firefox,chrome and my ios app.
Do I need to do any specific step to solve this problem?

I am afraid it is not possible to solve this issue :/
I'm having the exact same problem: I have installed a custom certificate on my IPad and the secure connection works fine on Safari, but on Firefox the website tells me that there is no certificate installed
On the desktop application there is an option to add certificates to Firefox (tools > security > certificates), but this option does not exists in Firefox
From my understanding this is due to Firefox for IOS having only very limited functionalities (no module for example), so unfortunately it looks like it is not possible to set Firefox for IOS to use local security certificates...

Related

didFailProvisionalLoadForFrame for certain URL but works fine in Safari

I've got an odd issue where a certain domain fails to load in a WKWebView. It gives an error:
WebPageProxy::didFailProvisionalLoadForFrame: frameID=3, domain=NSURLErrorDomain, code=-1200
Which I believe is complaining about a certificate issue? It works fine if I allow insecure content via info.plist, but of course I don't want to allow that.
The cert is fine for that domain. I'm unable to share the url unfortunately. It's a .gov domain. The cert is DigiCert and not-expired.
It works fine in Safari outside of the app, and even in Firefox and Chrome, which I thought used WKWebView but maybe not?
Has anyone ever experienced this issue? What additional steps can I do to pin down what exactly WKWebView is complaining about and what can be done to fix it?
We're actually using Xamarin, but we have test projects in both Xamarin and Xcode that replicate the issue.
Thanks!
I found the problem!
WKWebView (unlike Safari) requires that SSL certs support forward secrecy.
https://developer.apple.com/documentation/bundleresources/information_property_list/nsexceptionrequiresforwardsecrecy
You can check if a cert supports this here:
https://www.ssllabs.com/ssltest/analyze.html
It's possible to disable it in info.plist but we've opted to ask the site owner to change their certs.

HTML5 Video Does Not Play on iOS over HTTPS when deployed to Firebase Hosting

I am using the the HTML5 Video tag on a PWA created in angular 6 and for the life of me I can't get it to work. At first I thought it was an issue with encoding since it works on FF, Chrome (Desktop and Mobile), and Safari Desktop. I have checked the encoding and the use of the video tag. I believe that all is in order. I am able to play the video on iOS when serving it using HTTP from my local.
ng serve --host 0.0.0.0
It fails to play when trying to use HTTPS and a cert generated from openssl.
http-server dist/marcel-webapp/ -S
This leads me to believe that the issue is only with untrusted certificates. The problem that I having a very hard time finding the solution to is that I am hosting it on Firebase, and google handles the provisioning of the SSL certificates automatically. I checked my version of the trust store on my phone and the neither the root or intermediate certificates in use are listed.
Here is the link to the video my site
The question is... If really do have a certificate issue on firebase, what can be do about it?
Thanks in advance for any guidance on this.
Update and actual problem identified! I eliminated an untrusted certificate as the problem by deploying to AWS. The problem is actually related to the service worker created when adding PWA support to the project. The reason the video works over HTTP is that service workers are only enabled in HTTPS. I'm using Angular 6 to create the PWA, however it seems that other frameworks have the same problem. Turning off services workers in the Safari allows the video to display as expected
Settings > Safari > Advanced > Experimental Features > Service Workers
I found this post describes the problem in great detail. View Post Here

Oracle MAF application can't load remote URL on iphone

I created a new feature that should load a remote URL connection. I also whitelisted the domain, just to be sure. The problem is that when I deploy it on my iPhone, it does not load that URL. On the contrary, on the simulator, it loads the URL without any issues.
What can be the problem?
Thank you in advance,
Razvan
I found the answer I needed. Since MAF 2.2.1, non-HTTPS connections seem to fail to run on iOS. So if you disable Application Transport Security (APS) , the problem should be solved. You can do it like this in JDeveloper :
Disabling App Transport Security for MAF Applications on iOS Devices
MAF applications that you migrate to this release of MAF enable ATS by default. You can disable ATS in your MAF application as follows:
In JDeveloper, choose Application > Application Properties > Deployment.
In the Deployment page, double-click the iOS deployment profile.
Choose iOS Options.
Select Disable Application Transport Security and click OK.
Hope to be helpful for others.
Thanks,
Razvan

SSL self signed certificate not working on ipad / iphone

We use IIS 7 and self signed certificates for our internal sites. All works perfect on windows PCs, laptops and from the server itself. the request https:// server/folder resolves correctly.
However, when we try to connect using an ipad or iphone, the page cannot be displayed. Chrome on iOS says "Page cannot be displayed" and Safari simply shows a blank page.
Is there any settings we need to change from the server side in order to make this work?

Mixed content message when all looks to be over SSL?

I'm working on an ASP.NET MVC5 app, upgraded from MVC3, to 4, and now to 5.
I deployed it to an internal IIS 7.5 server that has a wildcard cert on it. The CA is an enterprise trusted root by domain group policy.
When I load my site, I'm expecting a nice green lock icon in Google Chrome, but instead I get:
In the Chrome developer tools, on the Network screen, I'm looking at all the resources that were collected by the browser. Each one is going over HTTPS.
Why am I getting this error?
Well, it looks like something weird happened in Chrome. I shut down all my browser windows, and when I started the site back up again, all was well and I got my green lock icon.

Resources