views:

404

answers:

4

I have a few sites that have SSL Certificates installed. When an SSL request is made with my employer's iPhone, this error message is displayed:

Accept Website Certificate

The certificate for this website is invalid. Tap Accept to connect to this website anyway.

I've pulled up the same pages in other browsers, including Safari, and they do not show any issues with the certs.

These two URLs exhibit the problem:

  1. https://www.powerlunchbunch.com/index.php?template=join&nav=20
  2. https://www.councilonagingmartin.org/index.php?template=donate&nav=257

Additional Information:

  1. Both SSL certs are issued by Network Solutions
  2. The sites are hosted on Rackspace Cloud Sites
+3  A: 

I think it's because you (or your hosting company) haven't configured the full certificate chain on your web server.

Take a look at a report from an ssl checker, such as this:

http://www.sslshopper.com/ssl-checker.html#hostname=www.councilonagingmartin.org

...

I can see from this report that you're using Apache2.2. Configuring 'intermediate certificates' on Apache2 goes something like this:

SSLCertificateFile /etc/ssl/crt/yourDOMAINNAME.crt

SSLCertificateKeyFile /etc/ssl/crt/private.key

SSLCertificateChainFile /etc/ssl/crt/chainCert.xxx

I don't know if you configured the certificate yourself, or your hosting company configured it, so you'll either need to contact your hosting company, or the certificate provider, who can provide the intermediate certificate(s).

Hope That Helps

amir75
Thanks! I will be contacting my hosting company.
Sonny
+1  A: 

Unfortunately, the Root CA for both those certificates, Network Solutions, L.L.C. is not a trusted certificate authority on the iPhone.

If you look at the certificate chain, it does end up at AddTrust, which is a trusted CA on the iPhone.

So you likely have one of the following problems:

1) Your certificate is not installed correctly on the web server

2) You need to work with Network Solutions (the SSL cert issuer) to get a cert that properly chains to AddTrust.

Alan
A: 

I got the same warning message on my iPhone for my company's site. I used the SSL Checker site that amir75 posted in his response, but everything looks like it is configured properly. Does the Apple iOS have issues with wildcard certs?

Droo
You may want to create a new question Droo. I don't know.
Sonny
A: 

You need help to installation guideline & configure SSL Certificate.

You are using Apache2.2 Here at full & easy installation information.

http://www.clickssl.com/install-ssl.aspx

kimshy babe