3 ms·
AFAIK Chrome uses the OS certificate store, so you should just need to provision your CA in the OS itself. For iPhones you may be able to use configuration pro
by janosdebugs 3y ago
AFAIK Chrome uses the OS certificate store, so you should just need to provision your CA in the OS itself.
For iPhones you may be able to use configuration profiles, which are also useful if you want to set up stuff like email accounts, etc. However, it's been a while since I made on of those, so I don't know if you can use it for certificates. You may have better luck with Letsencrypt instead.
- Scion9066 3y agoYou can use it for certificates, it just looks like there's an extra step to say that you really trust it as a root: https://support.apple.com/en-us/HT204477 https://support.apple.com/en-us/HT204477
- jkaplowitz 3y agoThat extra step is only required when you deploy the certificates through one of the less secure methods: > You must manually turn on trust for SSL/TLS when you install a profile that is sent to you via email or downloaded from a website. The more secure deployment methods do not require this: > Apple recommends deploying certificates via Apple Configurator or Mobile Device Management (MDM). Certificate payloads are automatically trusted for SSL when installed with Configurator, MDM, or as part of an MDM enrollment profile. Both of these quotes are from the link you provided.
- Scion9066 3y agoI figured most people looking to do this at home wouldn't have a home MDM solution to deploy it with. You're right though that it could probably be done with Apple Configurator fairly easily.