为什么我的iOS个人资料“不受信任"? [英] Why is my iOS Profile "Not Trusted"?

问题描述

我已经为我的应用程序使用OpenSSL创建了CA，服务器和客户端证书.当我在配置文件下查看时，根CA显示为受信任"，但是我的服务器和客户端证书(由我的CA签名)显示为不可信".

I have created a CA, server and client certificates with OpenSSL for my application. When I look under profiles, the root CA shows up as "Trusted", but my server and client certificates (which are signed by my CA) show up as "Not Trusted".

这些证书显示为由根CA签名，并且工作正常在IE或Chrome下.

These certificates show up as being signed by the root CA, and work correctly under IE or Chrome.

1. 这些为什么不起作用?
2. 任何调试为什么的方式都显示为不可信"?

1. Why don't these work?
2. Any way to debug why they show up as "not trusted"?

推荐答案

我推测是因为我只使用了一个小(512或1024)字节的证书.当我使用较新版本的OpenSSL创建2048字节的证书时，它开始工作.

I am speculating that it occurred because I was only using a small (512 or 1024) byte certificate. When I used a newer version of OpenSSL to create a 2048-byte certificate, it started working.

我仍然必须验证iOS中是否确实存在最小可接受的密钥长度.

I still have to verify if there is indeed a minimum-acceptable key length in iOS.

这篇关于为什么我的iOS个人资料“不受信任"?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！