Iphone flagging url as insecure - iphone

I'm debugging a site using an iphone with ios 6.. Using the inspector from the iphone on the mac while visiting a site I get:
Failed to load resource: The certificate for this server is invalid. You might be connecting to a server that is pretending to be “www.photorank.me” which could put your confidential information at risk.
When I go to the same site on a mac using ffox/chrome/safari that issue does not exists.
The URL with the issue is https://www.photorank.me/static/js/olapic/widgets/ecommerce.js
It seems that the certificate is invalid for some reason but the only device saying so is the iphone and ipad..
Any idea what is wrong?

It's not trusted, see this or this. OSX might have wider root certificates base than iOs devices or simulator.

Related

Error on charles proxy when trying to intercept iOS requests however charles proxy certificate is already configured and trusted

I tried to intercept the requests on my android and iOS apps using charles proxy.
On android i'm able to see the requests and response without issues however on iOS it's not working fine.
I receive:
SSL handshake with client failed - Remote host terminated the handshake
You may need to configure your browser or application to trust the Charles Root Certificate. See SSL Proxying in the Help menu.
The manual proxy is correctly configure on the device, and i already trusted the charles certification on my iphone. I'm quite sure that all configs are correctly set up.
I'm wondering if it's a limitation on my iOS app. Any ideia?
Thanks in advance
You might need to tell your device to trust the certificate.
From this page on the Charles Proxy website:
If you are on iOS 10.3 or later, open the Settings.app and navigate to General > About > Certificate Trust Settings, and find the Charles Proxy certificate, and switch it on to enable full trust for it (More information about this change in iOS 10).

Invalid code signature due to inadequate entitlements

I am trying to run an app on my physical device, it starts to build onto my device then crashes due to an 'invalid code signature, inadequate entitlements or its profile has not been explicitly trusted by the user.'
I have updated my iPhone and Xcode to the latest release, tried to clean the build and edit run scheme build configuration to 'Release' and tried to set my executable to 'Ask On Launch'. I searched for a Iphone Developer file on keychain and could not seem to find one but i am not sure what i am supposed to do.
Can anyone help?
The problem is that the developer is not trusted on the device. If you manually try to run the apps on the device, you will see an Untrusted Developer message.
To solve this issue on the device, go to Settings > General > Profiles or Settings > General > Device Management, depending on the device type and the iOS version. There, trust the developer and allow the apps to be run.
For newer versions on your iPhone (version 14+)
Settings > General > Device Management (In the VPN section past Date & Time section).
Then trust the device
Adding newer settings
2022 iPhone 15 variation. Load the app --> Next as below.
Settings > General >
VPN & Device Management > Developer App > Trust "Apple Development:....."
Please check the internet connection of the Testing IOS device, Signature verification fails if device isn't connected to Internet.
I had the same issue, I just
Created a new Project with the sample Hello world
Deployed it to the device - it was working
Deployed my desired app again and it started working
I hope it helps.
If nothing works, do this,
Open XCode -> Window -> Devices & Simulators.
Remove your device from that window.
Reconnect the device and you will receive the trust certificate again.
This work after upgrading to iOS 15.
on your iphone,
Settings > General > Profiles or Settings > General > Device Management
Developer app. (Click on) for trust.
In my case simply reconnecting the lightning cable did the job.
If you see this issue happen out of nowhere, one other possible source of the problem is a network outage.
Your device will periodically need to dial out to a service to validate the provisioning profile. I don't have details on how often this needs to happen but I do know this validation action happens during the app's startup. If your device can't connect to the internet or Apple is experiencing an outage, it can interrupt this process and produce this error.
You can check the status of Apple's services here:
https://developer.apple.com/system-status/
Certificates, Identifiers & Profiles is what you want to keep an eye on.
If none of the above works and you've already trusted the developer, try 4G/5G connection instead of wifi.
This problem occurs because the installed app's developer is not trusted by iOS device.
To solve this issue on the device, go to
Settings > General > VPN & Device Management
Here is the screenshot

Failed to install ad-hoc distribution with itunes 11.0.1

I have strange problem. I developed app code signed it with Distribution provisioning profile which includes correct devices and sent it to Client. He installed via iTunes and there were no problems. Suddenly iTunes 11 was released and Client told me that he is unable to install app on his devices.
The situations looks like this:
authorizing computer
adding app to iTunes library
selecting app to sync/install on device
start synchronization
Synchronization goes to step 4 where message says thet apps to synchronization are prepared and synchronization ends showing in iTunes that app is installed on device. But on device there is no app. No error or any kind of message, nothing...
To make things more complicated I'm able to install app on my devices (I even borrowed iPad's, iPhones and one iPod touch from friends to check it). Although I'm not able to install it on one iPod Touch 4G. The app is compatible with iOS 5 and 6.
Any ideas?
Same issue i was facing, i don't why iTunes 11 has this strange behaviour. But i managed to sent my .ipa to client using, Diawi. You have to upload your .ipa over here and it'll generate a link which will pass to your client and it'll be download easily. So this is simple and nice solution without interacting with iTunes.
Similar situation to me. iTunes 11 (OSX 10.8) failed to install IPA file. Everything seems all right, but there is no app on device, iPhone4 iOS6.0.1 in this case.
But when I install app via Test Flight, installation works.
When I try to install same application on OSX 10.7, iTunes10, installation works fine.
Maybe is problem in iTunes artwork that has to be 1024x1024, I do not know.

iPhone Simulator custom CA certificate

I'd like to test an application on the iphone simulator which connects to a service using a certificate which is signed by our own CA. I can do this on the actual device by adding a provisioning profile which has the CA certificate. I had thought that having the CA certificate in the standard OSX keychain would work, but it doesn't.
So I can access the service via Safari without warning, but I get error when trying to run things in simulator.
The crypto api's are unavailable to the simulator. I think someone at apple was smoking crack when they made this decision because i fail to see how having an iPhone changes the out come of a cryptographic algorithm. Never the less in order to develop with these systems you'll need an iphone or ipod touch.
This link worked for me
canAuthenticateAgainstProtectionSpace method set to return yes.
NOTE: this will accept any certificate so should be removed for production releases: ie: ONLY for testing
It seems to work okay when I point the emulator at one of our live servers which a use a 'real' certificate. But I've just been getting 1200 errors trying to get the emulator to talk to a local test server I set up this morning.
So there must be crypto libraries there (or our app wouldn't talk to the live servers with real certificates), but there certainly seems to be a problem with self-signed certs.

How to send HTTPS requests to host with untrusted server certificate in iPhone Simulator?

I develop an iPhone framework which sends HTTPS requests in order to communicate with a publicly available backend server. Currently I have a big problem regarding untrusted server certificates.
The certificate of the backend server is not signed by a trusted CA, so my first approach was to use NSURLRequest's private allowsAnyHTTPSCertificateForHost. While this worked as expected and was fine as temporary workaround, our customer demands a clean solution as final result. Therefore I wrote a method which allows to install a provided certificate from the file system in the keychain, but this method does not work as expected in the iPhone Simulator. The certificate is installed in the host machine's Mac OS X keychain instead. Unfortunately, if I call NSURLConnection's sendSynchronousRequest method, I retrieve an "untrusted server certificate" error. It seems as if NSURLConnection is not able to access the host's Mac OS X keychain to retrieve the certificate.
Is my guess correct or did I miss something?
Would my approach work if I ran my app on a real iPhone device instead (I do not have one available yet)?
Does there exist a keychain in the iPhone Simulator at all?
Is it at all possible to send HTTPS requests to a server with an untrusted certificate on the iPhone Simulator or do I have to use precompiler directives to implement different routines depending on the underlying platform (simulator or device, respectively)?
Any help is highly appreciated.
Thanks,
Matthias
You can get free trusted SSL certificates at http://startssl.com
Perhaps the ASIHTTPRequest library can help with that?
Yes agree with Beat Bolli but i have done this by NSURL request.may be you are skipping spmething.