search

RocketChat / Rocket.Chat.ReactNative

Rocket.Chat mobile clients
https://rocket.chat
MIT License
2k stars 1.17k forks source link

Certificate error in the iOS app #5080

Open agent-atlas opened 1 year ago

agent-atlas commented 1 year ago

Description:

I am trying to connect to a local RocketChat server using the iOS app on my phone. The server is behind a VPN and uses Nginx as a reverse proxy. I have valid self-signed certificates installed on my server. I have no issues with the Android app; after adding the certificate, I was able to connect. However, I'm having trouble with the iPhone. I suspect it's an issue with the iOS app. Could you please check?

Environment Information:

Steps to reproduce:

  1. Have the web server in front of Rocket.Chat require client certificates, and "Apply Your Certificate" on the initial screen of the iOS App 4.38.0.
  2. Enter your workspace URL
  3. Click Connect

Expected behavior:

App sends client certificate with the request, server permits it, connection succeeds.

Actual behavior:

tcpdump on web server target side shows request coming in without client certificate, it requires one so the connection fails, app reports "Oops! An SSL error has occurred and a secure connection to the server cannot be made."

Additional context:

diegolmello commented 1 year ago

Hey @agent-atlas. We need a test user on your workspace in order to understand what's going on. Can you reach me out at https://open.rocket.chat/direct/diego.mello? We can make sure to fix it for your use case specifically.

agent-atlas commented 1 year ago

I can't write. Gives an error "Room not found The room does not exist or you may not have access permission" If you can send me a message. my login in open.rocket.chat is atlas.ivan.96 or my mail address is atlas.ivan.96@gmail.com

klys commented 1 year ago

If you can compile the iOS application disable ATS, ATS will not allow the iOS application to connect a self signed certificate, there is not VALID self signed certificate that will passthrough App Transport Security on iOS, you must use a CA signed certificate.