SSL Certificate installation on iPad

[former_member197782]

Hi Experts,

We have installed SMP Server on LINUX System and deployed standard WM 6.2 App through management console.

Application got successfully deployed into SMP server.

But we are getting SSL Invalid chain error on iPad when trying to sync the device.

Installed root.cer certificate in device, but the cerificate was not signed. So we are getting the same SSL invalid chain error in device after certificate installation.

We have followed below steps for generating the root.cer certificate.

Creating your own CA and issuing yourself certificates . Referred SAP Note 2030021 (Option B)

Step1 : Create a Self Signed Root Certificate by running the following command and providing the required input:

Step2: Install the trusted CA in the device.

Step3: Create a config file used to issue the certificates

Step4: Create a Certificate Signing Request (CSR)

Step5: Issue the certificate

Step6: Package the certificate for use with the server or client

These steps created the following files on root directory of the system.

1. root.cer

2. privkey.pem

3. myca.conf

4. certindex

5. serialfile

6. ourdomain.csr

7. ourdomain.key

8. ourdomaincert.pfx

We have executed all commands on the LINUX system. But still the certificate is not signed.

Can anyone please suggest on this.

Thanks & Regards,

Roopa M.

[bill_froelich · Accepted solution]

What certificate is the Linux server presenting to the iOS client?  iOS needs to be able to validate the signer of the SMP server certificate which by default is a self-signed certificate in the configuration directory (smp_crt.cer).  You can directly install this to the iOS client to trust it assuming that the Issued To on the certificate matches the FQDN entered on the client as part of the URL. 

If you want to generate your own certificate using a your own CA that is fine but the resulting certificate needs to then be installed on the SMP server with the root CA certificate added to the iOS device.

--Bill

[former_member197782 · Accepted solution]

Hi Bill,

After successful installation of SMP server on LINUX system, we could see the certificate file (sapag.cer) file in server configuration folder(/SAP/MobilePlatform3/Server/configuration/sapag.cer)

We have tried to install this certificate on device iPad, but we are getting "Not signed" status after installation of certificate from iPad configuration utility tool.

As a result we are getting "SSL Invalid chain error" on device when trying to sync the app from device iPad.

Can you please suggest the procedure to install the SMP certificate on LINUX SMP Server and on device iPad.

Thanks in advance.

Thanks & Regards,

Roopa M.

[bill_froelich · Accepted solution]

I would expect the file to be smp_crt.cer.  See if you have this certificate in your configuration directory and then email to the ipad and install.

--Bill