Perspective IOS App doesn't valid Certificate

Ignition
,
1

Hi,

We're trying to get the Perspective App working on an iPad. We use an internal Windows CA, and have successfully installed the profile and enabled the root ca in the Certificate of Trust.

When we add the gateway manually, the sprite just spins next to the gateway address. Is there anything else that needs to be installed for it to allow you to select the application?

spinning
spinning725×747 67.2 KB

trust
trust764×391 30.5 KB

Thanks

2

We're on 8.1.22 and the latest iPad app.

There is also the following error in the perspective app logs: Alamofire.AFError.ServerTrustFailureReaon.noCertificatesFound

3

Are you trying to add the gateway by IP address or by name? Certificates typically only contain a DNS name. A subject alternative name of the IP address can be included in certificates to permit access that way. Does that exist in the cert?

4

Thanks for the reply. By the FQDN, and the alternative does not exist.The FQDN matches the common name on the cert.

5

DNS name in the CN attribute is deprecated. I don't think Apple will consider a certificate trusted if it does not have an entry in the SAN field.

6

Heyo: Requirements for trusted certificates in iOS 13 and macOS 10.15 - Apple Support

  • TLS server certificates must present the DNS name of the server in the Subject Alternative Name extension of the certificate. DNS names in the CommonName of a certificate are no longer trusted.
2 Likes
7

Thanks so much!

8

Hi Kevin,

Thanks for this solution as I was having the same issue. Could a documentation person update the general "Security Certificates - Ignition User Manual 8.1 - Ignition Documentation" page with this information?