mirror of
https://github.com/Start9Labs/documentation.git
synced 2026-03-30 20:14:50 +00:00
87 lines
2.8 KiB
ReStructuredText
87 lines
2.8 KiB
ReStructuredText
.. _lan-ios:
|
|
|
|
================================
|
|
Trusting Your Server's CA on iOS
|
|
================================
|
|
|
|
This applies to iOS v15 and v16. For older versions, see the `v14 guide </0.3.1.x/user-manual/connecting/connecting-lan/lan-os/lan-ios>`_.
|
|
|
|
|
|
#. Download the certificate to your Downloads folder
|
|
|
|
.. note::
|
|
In order to do this, open Safari and visit your Start9 server's .local URL while connected to WiFi, but make sure it is prefixed with `http://` and not `https://`.
|
|
|
|
Log in using your password, then click the hamburger (3 lines) menu at the top right, select System > LAN > Download Certificate. It may say `This website is trying to download a configuration profile. Do you want to allow this?` Click `Allow`.
|
|
|
|
Once this is done, you can skip to step 3, below.
|
|
|
|
If you downloaded the certificate from a browser such as Firefox, you will need to copy the file from that Downloads folder to your iCloud Downloads folder. Navigate there via `Files > iCloud Drive > Downloads`. Otherwise, the "Profile Download" dialog will not appear when you click on the file in the next step.
|
|
|
|
#. Open your iCloud Downloads folder and click on the certificate. It will display a dialog box that says "Profile Downloaded." Click `Close`.
|
|
|
|
.. figure:: /_static/images/ssl/ios/import_cert.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. Head to *Settings > General > VPN & Device Management*
|
|
|
|
.. figure:: /_static/images/ssl/ios/settings_general_vpn.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. Locate the profile under "DOWNLOADED PROFILE" and tap on it
|
|
|
|
.. figure:: /_static/images/ssl/ios/install_1.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. Tap *Install*
|
|
|
|
.. figure:: /_static/images/ssl/ios/install_2.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. Tap *Install* again
|
|
|
|
.. figure:: /_static/images/ssl/ios/install_3.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. Tap *Install* yet again
|
|
|
|
.. figure:: /_static/images/ssl/ios/install_4.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. You should see green text with a check-mark saying "Verified" under the Profile Installed dialog.
|
|
|
|
.. figure:: /_static/images/ssl/ios/install_5.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. Tap *Done* near the top right.
|
|
|
|
#. Next, navigate to *General > About > Certificate Trust Settings*.
|
|
|
|
.. figure:: /_static/images/ssl/ios/trust_1.png
|
|
:width: 20%
|
|
:alt: Certificate trust settings
|
|
|
|
#. Under "Enable full trust for root certificates", enable your "adjective-noun Local Root CA".
|
|
|
|
.. figure:: /_static/images/ssl/ios/trust_2.png
|
|
:width: 20%
|
|
:alt: Enable full trust
|
|
|
|
#. Tap *Continue*
|
|
|
|
.. figure:: /_static/images/ssl/ios/trust_3.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. Your certificate should now be installed and trusted:
|
|
|
|
.. figure:: /_static/images/ssl/ios/trust_4.png
|
|
:width: 20%
|
|
:alt: Profiles |