Skip to main content
Participant
April 18, 2013
Question

SSL Client Authentication not working on iPad

  • April 18, 2013
  • 3 replies
  • 1128 views

I have set up client authentification via SSL. I have installed a certificate on my iPad. I have added the certifying authority as "trusted" on my iPad. If I open the https url via Safari everything works fine. No prompt like not trusted or choose client certificate, nothing, it just works.

Now if I call that url from AIR via my app, I get nothing.

The apache log doesn´t show anything related to the apps calls. The request via Safari puts the following:

access.log

192.168.178.70 - - [17/Apr/2013:16:11:41 +0200] "GET /Project/index.php?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 200 2524 "https://192.168.178.88/Project/" "Mozilla/5.0 (iPad; CPU OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3"

ssl_request.log

[17/Apr/2013:16:11:41 +0200] 192.168.178.70 TLSv1 AES128-SHA "GET /Project/index.php?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 2524

Tried to call via StageWebView. Gave me this:

Error #2044: Unhandled ErrorEvent:. text=The Server „192.168.178.88“ needs a Client-Certificate.

So AIR uses a different certificate storage? Help is much appreciated.

This topic has been closed for replies.

3 replies

Participant
April 26, 2013

As this seems to be a bug I filed a report:

https://bugbase.adobe.com/index.cfm?event=bug&id=3550264

chris.campbell
Legend
April 26, 2013

Thank you for the bug report.  I'll give the iOS team a heads up.  Is it possible to include a copy of your app or a sample project that will allow us to quickly reproduce the problem internally?  If you'd like to keep this private feel free to email it to me at ccampbel@adobe.com.

Thanks,

Chris

Participant
April 29, 2013

The sample app is way too complex to be posted and the crucial part of the app itself is just a simple request to a https url. The real work is setting up the whole CA, Webserver and Client-Certificate-Construct. I won´t send you those certificates as they won´t work on other machines anyway.

Got the idea for the approach here:

http://blogs.adobe.com/simplicity/2009/02/using_tls_client_auth.html

Look at the last post by "Daniel" there. Seems to indicate the problem is at least there since March 2012.