mirror of
https://github.com/Start9Labs/documentation.git
synced 2026-03-26 02:11:55 +00:00
a71ff64314
* Update Download Root CA screens/guide language * One more language change * self-signed > Root CA-signed language * One mo' language change
88 lines
3.3 KiB
ReStructuredText
88 lines
3.3 KiB
ReStructuredText
.. _lan-ios:
|
|
|
|
=========================
|
|
Trust Your Root CA on iOS
|
|
=========================
|
|
Complete this guide to download your Start9 server's Root Certificate Authority (CA), and trust it on your client device (iOS). This allows you to use encrypted ``https`` connections to your ``.local`` (LAN) and ``.onion`` (tor) server addresses, access services on LAN, and enhances performance on tor. The Root CA was created by your server when you perfomed the initial setup, and signs the certificate of your server's main UI, as well as that of all services.
|
|
|
|
This applies to iOS v15 and v16. For older versions, see the `v14 guide </0.3.1.x/user-manual/connecting/connecting-lan/lan-os/lan-ios>`_.
|
|
|
|
#. Download the certificate to your Downloads folder
|
|
|
|
.. note::
|
|
In order to do this, open Safari and visit your Start9 server's .local URL while connected to WiFi, but make sure it is prefixed with ``http://`` and not ``https://``.
|
|
|
|
Log in using your password, then click the hamburger (3 lines) menu at the top right, select **System** > **Root CA** > **Download Root CA**. It may say `This website is trying to download a configuration profile. Do you want to allow this?` Click `Allow`.
|
|
|
|
Once this is done, you can skip to step 3, below.
|
|
|
|
If you downloaded the certificate from a browser such as Firefox, you will need to copy the file from that Downloads folder to your iCloud Downloads folder. Navigate there via `Files > iCloud Drive > Downloads`. Otherwise, the "Profile Download" dialog will not appear when you click on the file in the next step.
|
|
|
|
#. Open your iCloud Downloads folder and click on the certificate. It will display a dialog box that says "Profile Downloaded." Click `Close`.
|
|
|
|
.. figure:: /_static/images/ssl/ios/import_cert.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. Head to *Settings > General > VPN & Device Management*
|
|
|
|
.. figure:: /_static/images/ssl/ios/settings_general_vpn.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. Locate the profile under "DOWNLOADED PROFILE" and tap on it
|
|
|
|
.. figure:: /_static/images/ssl/ios/install_1.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. Tap *Install*
|
|
|
|
.. figure:: /_static/images/ssl/ios/install_2.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. Tap *Install* again
|
|
|
|
.. figure:: /_static/images/ssl/ios/install_3.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. Tap *Install* yet again
|
|
|
|
.. figure:: /_static/images/ssl/ios/install_4.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. You should see green text with a check-mark saying "Verified" under the Profile Installed dialog.
|
|
|
|
.. figure:: /_static/images/ssl/ios/install_5.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. Tap *Done* near the top right.
|
|
|
|
#. Next, navigate to *General > About > Certificate Trust Settings*.
|
|
|
|
.. figure:: /_static/images/ssl/ios/trust_1.png
|
|
:width: 20%
|
|
:alt: Certificate trust settings
|
|
|
|
#. Under "Enable full trust for root certificates", enable your "<custom-address> Local Root CA".
|
|
|
|
.. figure:: /_static/images/ssl/ios/trust_2.png
|
|
:width: 20%
|
|
:alt: Enable full trust
|
|
|
|
#. Tap *Continue*
|
|
|
|
.. figure:: /_static/images/ssl/ios/trust_3.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|
|
#. Your certificate should now be installed and trusted:
|
|
|
|
.. figure:: /_static/images/ssl/ios/trust_4.png
|
|
:width: 20%
|
|
:alt: Profiles
|
|
|