Let's Encrypt cert

DT

Somewhat shallow knowledge of certs and OpenVPN (I've been using an older OpenVPN server I installed under linux for several years but with self-signed certs). I used a self signed server cert and a client cert for each client.

Considering using Let's Encrypt free CA for cert so I can use OpenVPN on iPhones. Apple stopped allowing self-signed certs at some point during an upgrade.

My question is - Since Let's Encrypt certs expire every 90 days, would I have to regenerate client certs each time?

Sorry if its a stupid questions.

TinCanTech

DT wrote Apple stopped allowing self-signed certs at some point during an upgrade.

Can you quote a source for this information ?

DT

This happened a couple of years ago? I tried finding the "official" article stating this but can't. The following link is just from a google search:
https://www.experts-exchange.com/questions/29002119/Self-Signed-SSL-Certs-Exchange-2016-and-iOS-10-and-above-devices.html

This used to work. You would email your self signed cert to your iPhone, imports it and you had to create a profile to use it. But OpenVPN would work them. Some time, again I think for iOS 10, Apple stopped allowing that.

Other google searches imply there is now a workaround but I have yet to be able to get it to work.

Are you able to get self-signed certs working on iPhone for OpenVPN?

TinCanTech

DT wrote Are you able to get self-signed certs working on iPhone for OpenVPN?

Probably not .. unless you read how to do it in the right howto.