Ignition 8.1, issue is with mobile application but we have not been able to test this scenario with just a browser yet.
We have installed SSL certificates on our Master gateway and Backup gateway. When connecting from the Ignition mobile app, we are prompted to download the certificate upon entering the HTTPS URL for the Master gateway and it works fine. But, when we test a failover scenario where the Backup should take over, we are prompted to download the cert and it just spins indefinitely.
We do not have any "Require SSL" or "Require Two Way Auth" settings activated, nor do we have "Force Secure Redirect" on. The Backup gateway is set up as an approved Incoming Connection on the Master. Are there any settings we might be missing to allow the Backup certificate to automatically take over in this scenario?
Adding to my own post to mention that we got past this, but only after adding the IP to the SAN on the redundant gateway. The IP is not configured on the master gateway, and I always refer to DNS, not IP. Regardless, the redundant gateway's SSL certificate needed an IP address in the SAN for this to work.
Hmm. Are your gateways supplying the DNS name as their public name ("auto" is usually not sufficient)? And the gateway and backup are pointing at each other with their DNS names?
The backup is showing as an incoming connection on the master as the DNS name as expected. When the launcher asks if I want to trust the redundant certificate, it refers to it as the IP but the name of the certificate is the Common Name which is the DNS, so I'm not sure where that IP reference is coming from.
Until I added the IP to the SAN on the backup, trusting that cert would result in this error
Where would I verify the public name for the backup gateway? I should also add that since this post I confirmed this same behavior not in the iOS mobile app.
I see now, yes in this case we have "auto detect HTTP address" on in both the master and redundant. I'm guessing this needs to explicitly list the DNS address that is accessed instead of auto?