2

Running iOS 10.2 I added the root certificates of CAcert to my iPhone profile using various ways:

  • directly from their website in mobile Safari
  • sent by email to mail app
  • by adding a profile with the Apple Configurator 2 software

each time the certs show in the profile, but they are marked as "not checked / validated" in red.

Everytime mail app tries to connect to the mail server a warning dialog pops up that it cannot validate the mail server. Consequently it does not connect. Plus the popups are very annoying.

On MacOS the CAcert certificates are added to the Keychain and MacOS Mail works just fine. Same with all browsers and Apache running on the same box. It's a wildcard certificate (*.example.com) that I se for all services. All fine except mail.app on iOS - this also used to work fine with mail app in the past as well, by the way (older version of iOS).

An ideas?

Improve this question

2 Answers 2

Reset to default
1

In addition to the root certificate you will in some instances also need to add the intermediate certificate in case the mail server you're connecting to does not present the full certificate chain.

You can download the intermediate certificate here:

http://www.cacert.org/?id=3

Improve this answer
0

I've had the same problem I install the CaCert root and intermediate via iPhone Configurator 2 mobile profile. This then works on iOS9 and MacOS devices perfectly. However with iOS10 it appears that the CACert isn't not trusted.
Nor does it even listed in the 'override'config page.

I can only conclude that with iOS10 the certificate validation criteria has been tightened and that CACert contains something that Apple deems as untrustworthy.

Can't find anyone in Apple support to say why it doesn't work :-(

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .