[FLEX-27716] IOS doesn't prompt to trust self-signed certificate when using REST APIs.

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: Adobe Flex SDK 4.5.1 (Release)
• Component/s: Mobile: MobileApplication
• Environment: Affected OS(s): Apple IOS; Language Found: English
• Assignee: Unassigned
• Reporter: Adobe JIRA
• Created: 20/Jun/11 21:18
• Updated: 20/Jun/11 21:18

Description

Steps to reproduce:

1. Create httpservice object that uses https and receives json code back
2. Create a self signed certificate and use on web server for SSL encryption
3. make a get call using the httpservice (example: https://server:443/reports/3)

Actual Results: Http request error. IOS never prompts to accept invalid certificate and thus a secure communication channel is never established.

Expected Results: A prompt to accept the certificate regardless of it being self-signed.

SSL certificate management works great under android so only IOS is affected.

The IOS safari browser will prompt me to accept the certificate when using the same https url so it must be specific to IOS air app.

Workaround (if any): Buy an expensive trusted certificate? I can't verify since I don't want to shell out money to test this and I can't expect my users to do the same with their internal web servers. Another workaround is to not use https and send everyone's passwords in plain text using http.

Http calls work fine only https fails.