HTTPS Decrypting / IOS

Question

Hi @All,

I have problems to get working the https decryption with all my IOS devices.
I configured a firewall rule for testing the https decryption which has (actually) two devices in there -- my Desktop PC and my own iPhone.

Both devices has the Sophos CA Certificate for https-decrypting imported. It is working normally on my desktop PC but I cannot get it working on my iphone. It's always telling me for SSL sites that it has a untrusted certificate.

I also tried to create my own openssl-ca - same issue as with the Sophos CA Certificate. (desktop is working but not the iPhone)

Do you have any clues on that?

Thx for any help!

This thread was automatically locked due to age.

DomNik · Accepted Answer

Hi Florian, 
 since one of the last iOS versions you need to activate the full trust to your root certificate after the installation as a profile. 
 You can find this menu here: 
 Settings --> General --> Info --> Scroll down --> Certificate trust settings (my Devices are not running in English, so I hope the translation is close to the original) 
 
 If your certificate is not visible there, you need to create a new one with the correct CA extensions (and maybe stronger algorithms). 
 I've used the following HowTo after I ran into this problem some weeks ago: 
 jamielinux.com/.../introduction.html 
 
 Best Regards 
 Dom Nik