hcl-bot
October 20, 2015, 10:10pm
1
I have a server running…
Domino 9.0.1 FP4 IF2
Traveler 9.0.1.8
Using a Self-signed SSL certificate generated using OpenSSL and KYRTool
Just setting up the first user to connect to Traveler, and she has an iPhone 6 running iOS 9.0.2.
We downloaded the IBM Verse client from the appStore, and it installed perfectly without an issue.
Trying to connect to the server, however, we observe the following error…
Account Setup Incomplete
Unable to connect to the server because its certificate is not trusted
I have no issues at all connecting to the server using Android devices, so I am at a loss what to do?
Any assistance would be most appreciated!
Subject: Thanks Shaun!
Damn, I never realized this restriction existed!
I have other clients who use the ‘normal’ (original) Traveler client and have self-signed certificates.
I expect they are going to lose connectivity if they ever upgrade then?
Subject: They may get lucky…
If they upgrade the client from the older Traveler client to the new Verse client they may get lucky and things will continue to work. However, if they were to uninstall/reinstall or do a new install on another device then it will not work.
Subject: You need a “real” SSL cert
“IBM Traveler servers must support SSL/TLS and have a valid certificate. For security reasons, the app will not connect to a server with a self-signed, expired or otherwise untrusted certificate, nor will it connect to a server configured for HTTP rather than HTTPS.”
Taken from - IBM Documentation https://www-304.ibm.com/support/knowledgecenter/SSYRPW_9.0.1/iOSVerseNeedtoKNow.dita
Subject: Other SSL gotchas
Note Android devices with Verse do not require SSL enabled only Apple devices.
Also with apple devices using Verse you need to watch that the apple certificate does not expire either
by keeping up to date with the Traveler Fix packs.
I used a Comodo SSL certificate which does not have a root Cert installed on Android Devices so they have to accept the certificate each time
it is renewed, wheres as the apple devices with ios 9 have it pre installed so no errors.