« Robustness principle - Wikipedia, the free encyclopedia | Main | iPhone app idea (jailbroken) »

November 10, 2009

JBoss SSL vs. iPhone

Summary up front: the iPhone doesn't like SSL Certificate / keypairs in whatever the default keytool format is, at least as of iPhone OS 3.1.2 and Java 1.6.14.

If you create your key pair using:

keytool -genkey -alias myKeys -keyalg RSA

it works. If you do everything the exact same way, without specifying "-keyalg RSA" you'll end up with the dreaded "Safari could not establish a secure connection to the server" that I've been fighting with for the past two or three days.

So - the keywords that might help someone find this solution are:

Java keytool jboss ssl iPhone mobile safari self-signed certificates

If I get requests I can add details about how I created the certs, got JBoss to use them, etc. etc. etc. but I think that's all pretty well covered out on the Internet... This particular problem wasn't, mostly because I think everyone but me DOES use '-keyalg RSA'. But it was working with every other {#*(@$&#*$} browser without that, so I didn't think it was required. I was wrong. G'night!

Posted by aland at November 10, 2009 12:39 AM

Trackback Pings

TrackBack URL for this entry:
http://www.aland.us/mt/mt-tb.cgi/268

Comments

Post a comment




Remember Me?