pfSense CA Root and IOS 14.4
-
Hello,
I am wondering if any other iPhone users here have imported the CA root from pfSense?
I have imported the certificate, where it creates a custom profile on IOS, and then went into Settings -> General -> About -> Trusted Certificates and enabled my custom custom root CA.
However, when I try to browse any internal sites (on Safari or Microsoft Edge) that have certificates signed by my custom root, they continue to be untrusted. This exact same certificate setup works fine on Windows, Linux, Android and my iPad.
One main difference is that my iPhone (which I am completely new to) is managed (by Microsoft InTune) by my employer also, but so was my Android device which did not have this problem.
I know this is not a pfSense problem at all, but I wanted to toss the problem here before I try and contact the Apple "Geniuses" and see if anyone could provide a suggestion.
Thanks for your help!
Mark. -
Safari will no longer trust SSL/TLS certificates with validity periods longer than 398 days.
Check your pfsense Web Server certificate.
-
@nocling said in pfSense CA Root and IOS 14.4:
Safari will no longer trust SSL/TLS certificates with validity periods longer than 398 days.
And Chrome, and I think Firefox or at least they talked about it. It depends on when they were issued though...off the top of my head Chrome was for certs issued after Sept. 1 2020. Safari was earlier I think.
-
@nocling said in pfSense CA Root and IOS 14.4:
l no longer trust SSL/TLS certificates with validity periods longer than 398 days.
Check your pfsense Web Server certificateI think you hit the nail on the head. my certificates are set to expire years from now, so this could very well be the issue. I was completely unaware of this certificate limit on the Apple.
Thank you for bring it to my attention, I am going to reissue a certificate and test it out.
Cheers,
Mark.