Business One Mobile 1.11.1 IPhone Certification Error

[Former Member]

Hello

As you know, SAP Business One mobile applications are update at Android 1.2.0 and Iphone 1.11.1. I think the most critical change is that SSL certification is mandatory now.

We create SSL certication for 32bit business one server. (We followed all steps in 2019275 - SAP Business One mobile apps require a valid SSL certificate)

We can use successfully business one mobile 1.2.0 for android. However business one 1.11.1 for iphone is can not connect server and give us an error. I could not understand the issue. Because i have installed certificate successfully at server, android and iphone devices.

When i want to connect using iphone device it is give us the following error : "The certificate for this server was not issued by a trusted certificate authority. The conection to the server is disabled. Contact your IT administrator for more details."

Please help about this issue if you are succesfully connect with sap business one 1.11.1 for iphone

[rui_lamas]

Hi Daniel, same problem also with ios 15. No problems with older versions of ios, neither with android. Did you found a solution?

[rui_lamas]

Well, maybe usefull for someone else the self signed certificate should be as in How to verify a SSL certificate for SAP Business one mobile solution | SAP Blogs.

[Former Member · Accepted solution]

Hi Sefa and Tamizh,

Please refer following note and document for your reference.

2019275 - SAP Business One mobile apps require a valid SSL certificate

SAP Business One mobile app for iOS - Release 1.11.1 is available! Please note changes in SSL certif...

Hope these helps.

Regards,

Rupesh

[Former Member · Accepted solution]

Hi Rupesh,

I used also this note( 2019275 - SAP Business One mobile apps require a valid SSL certificate) and i achieved Business One Mobile at android devices.

As you know, there is one "Client.Cer" file. When you install this certificate your mobile device, It must works with android and IOS devices.

I used same certificate with mobile devices but it is working with android, not working with Iphone and Ipad. 

This is right note, it is works. But it is not solve this issue.

Regards.

[Former Member · Accepted solution]

Hi Sefa,

Have you followed the following path to resolve your query. It is already given the comments of the document.

Instead of server domain name  use IP address. Below is the script to generate the SSL.

set OPENSSL_CONF=c:\openssl-win64\bin\openssl.cfg

openssl genrsa -out ServerKey.key 1024

openssl req -new -x509 -key ServerKey.key -out myCA.cer -days 3650 -subj /CN="SAP"

openssl genrsa -out ClientKey.key 1024

openssl req -new -key ClientKey.key -out CertReq.csr -subj /CN="IP Address"

openssl x509 -req -days 3650 -in CertReq.csr -CA myCA.cer -CAkey ServerKey.key -CAcreateserial -out ClientCert.crt

openssl pkcs12 -export -inkey ClientKey.key -in ClientCert.crt -out keystore.pkcs12

******************************************************

here  cmd i went to Java -->jre1.8.0_31-->bin i run below scripts

keytool -delete -alias tomcat -keystore "C:\Program Files (x86)\SAP\SAP Business One Integration\IntegrationServer\Tomcat\webapps\B1iXcellerator\.keystore" -storepass sapB1iP

keytool -importkeystore -srckeystore "C:\Program Files (x86)\SAP\SAP Business One Integration\IntegrationServer\Tomcat\webapps\B1iXcellerator\keystore.pkcs12" -srcstoretype PKCS12 -destkeystore "C:\Program Files (x86)\SAP\SAP Business One Integration\IntegrationServer\Tomcat\webapps\B1iXcellerator\.keystore" -deststoretype JKS -deststorepass sapB1iP -srcstorepass sapB1iP

keytool -changealias -alias 1 -destalias tomcat -keystore "C:\Program Files (x86)\SAP\SAP Business One Integration\IntegrationServer\Tomcat\webapps\B1iXcellerator\.keystore" -storepass sapB1iP

Regards,

Rupesh

[Former Member · Accepted solution]

Hello Rupesh,

Thank you for your assistance. I used same script. The only difference between your script and my script is that:

Your used : openssl req -new -key ClientKey.key -out CertReq.csr -subj /CN="IP Address"

I used : openssl req -new -key ClientKey.key -out CertReq.csr -subj /CN="DomainName"

I will try again with IP Address.

I am very grateful.

Best regards

[Former Member · Accepted solution]

Hello Rupesh,

I changed domainname to IP address, i can connect with my iphone.

Thank you so much.

[Former Member · Accepted solution]

Hi Sefa,

You are welcome...!!!

But please try to help someone who is facing same scenario as yours.

Regards,

Rupesh

[Former Member · Accepted solution]

Hi, I Realize the same procedure , but do not send me certificate error , but a black box that says " the connection failure " and not understand that can be used to work with Android, but perform this procedure once more , to change the domain name , and place the IP .

Please your help

[Former Member · Accepted solution]

Hi Douglas,

     You may create your own thread.

Regards,

[Former Member · Accepted solution]

Sorry

[Former Member · Accepted solution]

Hi Rupesh,

When running this command

keytool -importkeystore -srckeystore "C:\Program Files (x86)\SAP\SAP Business One Integration\IntegrationServer\Tomcat\webapps\B1iXcellerator\keystore.pkcs12" -srcstoretype PKCS12 -destkeystore "C:\Program Files (x86)\SAP\SAP Business One Integration\IntegrationServer\Tomcat\webapps\B1iXcellerator\.keystore" -deststoretype JKS -deststorepass sapB1iP -srcstorepass sapB1iP

I get the error failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded

You have any idea about this?

Regards

Dave

[former_member360929 · Accepted solution]

You have probably signed the cert with wrong password.

Try using: sapB1iP when openssl asks for password.

[Former Member · Accepted solution]

Hi, Rupesh I have followed each and every step as it is described but iphone still gives me the same problem i am using v8.3 of iphone, 9.1 for b1 and 1.11.1 for iphone app can you help me in this?

[Former Member]

Hi,

I was getting the same error on IOS. Have you noticed that there is a seperate field for "Port" in Android app but not in IOS mobile app. So where to enter Port in IOS??

Kindly enter IP in IP field on IOS platform (IPad or Iphone) as follow:

IP: "Server-ip:port" e.g IP: 192.168.0.1:8443

I got my this issue resolved my entering like this.

Hope it'll be helpful.

[former_member791004]

hola

sigo teniendo el mismo problema para conectar Ios 15 con el certificado podrias compartir una pantalla de tu IOS porfavor

[Former Member]

I got the SSL to work with the ip address.  But now I am no longer PCI compliant.  Using an IP address for an SSL certificate is a big nono.  Is there any other way to get it to work?

[former_member186605]

Hi all,

some good news (in this solved thread just for the records):

You can create self-signed certificates now using the Certificate Tool

As of integration framework (B1if) version 1.22.0 (delivered with SAP Business One 9.1 PL08 and SAP Business One 9.1, version for SAP HANA PL08), the integration framework provides a Certificate Tool. The certificate tool automates the creation of a root certificate and a self-signed server certificate based on the root certificate, it also deploys the server certificate to the integration framework keystore. Based on the server certificate, the tool creates an SSL certificate for the mobile device that connects to the integration framework with the SAP Business One mobile app

A more detailed documentation is available in the integration framework version 1.22.0 or higher, (choose Start -> All programs -> Integration solution for SAP Business One -> Integration Framework  -> Help -> Documents -> Operations Part 2.)

For the context of mobile apps, we enhanced SAP Business One Note 2019275 - SAP Business One mobile apps require a valid SSL certificate

best, peter

[Former Member]

I have tried everything but no use it is still giving me the same error that the the certificate is not issued by competent authority.

Help anyone as I desperately need it.

[Former Member]

Dear All,

I am also facing the same issue. The certificate is working fine in Android mobile. The same certificate is working for iPhone.

If it is working for anyone, please share the steps to follow.

Regards,

Tamizharasi. S