Ios7.1https Enterprise Certificate Publishing method

OpenSSL uses the version of MacOS System, the key point is different directly using the iOS device to open HTTPS links, you need to send the certificate to the system mail, install to the device,

If the command execution is unsuccessful, execute with sudo.

1. Generate the private key of the server

OpenSSL genrsa-out Server.key 1024

2. Generate a sign-up request (note that except Common name can be empty, Common name must be the IP or domain name of the server)

OpenSSL Req-new-key server.key-out SERVER.CSR

3. Generate the CA private key

OpenSSL genrsa-out Ca.key 1024

4. Using the CA's private key to generate the CA's self-signed certificate

OpenSSL req-new-x509-days 365-key ca.key-out ca.crt

5. Create Democa in the current directory, create files Index.txt and serial,serial content for 01,index.txt empty, and folder Newcerts

OpenSSL ca-in server.csr-out server.crt-cert ca.crt-keyfile Ca.key

Email the ca.crt file to the iOS device's Mail for certificate installation

/private/etc/apache2/httpd.conf , edit this file to remove the ' # ' in front of the following three lines

LoadModule Ssl_module libexec/apache2/mod_ssl.so

Include/private/etc/apache2/extra/httpd-ssl.confinclude/private/etc/apache2/extra/httpd-vhosts.conf

/private/etc/apache2/extra/httpd-ssl.conf, edit this file to remove the ' # ' in front of the next two lines

Sslcertificatefile "/PRIVATE/ETC/APACHE2/SSL/SERVER.CRT"

Sslcertificatekeyfile "/private/etc/apache2/ssl/server.key"

/private/etc/apache2/extra/httpd-vhosts.conf , edit this file after ' namevirtualhost*:80 ' to add:

Namevirtualhost *:443

Add at the end of the file:

<virtualhost *:443>

Sslengine on

Sslciphersuite all:! Adh:! Export56:rc4+rsa:+high:+medium:+low:+sslv2:+exp:+enull

Sslcertificatefile/private/etc/apache2/ssl/server.crt

Sslcertificatekeyfile/private/etc/apache2/ssl/server.key

ServerName localhost

DocumentRoot "/library/webserver/documents"

</VirtualHost>

It's all set up here, check the configuration, and restart Apache if you have any questions.

sudo apachectl configtest

sudo apachectl restart

Ios7.1https Enterprise Certificate Publishing method