certificate for this server is invalid

Question

My app is live. It was working fine. But somedays before we changed the certificates(for security purpose) on Server. And Now whenever I tried to run my app. It is giving error:

The certificate for this server is invalid. You might be connecting to a server that is pretending to be "DOMAIN NAME" which could put your confidential information at risk.

I am using Swift3. I want to know Is this front-end issue or server-end? How can I resolve this?

Note: I have searched a lot about the issue, but didn't get the solution. I also tried Titanium - "The certificate for this server is invalid. You might be connecting to a server that is pretending to be DOMAIN.COM” but I was already follow all the steps.

Other thing is web-app and Android-app is working Ok. But iOS app giving error.

Crime

Answer 1

Solved same issue with just setting devices' date & time to automatic.

Oira

It perfectly worked for me. Thank you, Tushar. What is the underlying problem? How it is related to Date and Time? – Vivyan

Answer 2

You can check to see if this is a server-side problem by testing the TLS endpoint using SSL Labs (assuming this is an HTTPS connection). If the results come back invalid, the site will tell you why. If you're using a self-signed certificate, that would certainly cause this error.

If the results come back as valid from SSL Labs, then it's probably on the client side. Some client software doesn't have built-in trusted root certificates, but I doubt that Swift doesn't use the default OS root certificate store.

Eipper

Thanks for information. I tried that and I can see there is column that shows RC4:Yes INSECURE (more info). Do you know How can we make it secure? – Crime

RC4 is a cipher enabled on the server. What kind of web-server are you using? – Eipper

I am using Apache. – Crime

Here's a link on configuring Apache with strong cipher suites. To get rid of RC4, you can either use the suggested SSLCipherSuite (from the link) or add :!RC4: to the existing SSLCipherSuite configuration directive. – Eipper

Ok.. I will check that. Is we usually face that kind of issues from certificates, Do you have any idea? – Crime

Answer 3

Please also check your firewall restrictions. In my case, this error occurred due to my firewall blocked the required URL. it's worked fine after removing firewall restrictions

Jetport

Answer 4

Remove https://www from ServerTrustPolicy and put just url

Santinasantini

Answer 5

I just ran into this issue with a user and it appears iOS14 enables TLS1.3. I updated my web server's ssh settings (I'm using nginx) to support this version and that fixed the issue. I'm not sure that it solves op's problem but it may help a human from the future.

http {
    ...
    ##
    # SSL Settings
    ##

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
    ssl_prefer_server_ciphers on;
    ...

}

src: https://developer.apple.com/forums/thread/655074?answerId=622645022#622645022

Katmandu

Answer 6

The solution that worked for me is that I open the url that is giving me error and I allowed web site by clicking visit this website.

Analphabetic

Answer 7

If you go to Date & Time deactivate automatic and activate again it works too. Worked for me perfectly.

Tacy