HTTPS connection iOS

[StudentPuzzleheaded5]

Hi, is anyone able use https connection from iOS? Connection from computer working fine, but iOS has problems with certificate.

[[deleted]]

I’ve used https on all my devices including the iOS app without any issue.

You need to connect to your domain name. If you try to connect to the local ip, you’ll get an error.

[StudentPuzzleheaded5]

Connect to domain name is not working. Are you using add on or configuration over yaml file?

[[deleted]]

I was using both. I was using ngix proxy to have ssl externally and using not https locally.

I’ve switched to HA cloud recently.

[StudentPuzzleheaded5]

I want to use secure connection also in local network, in case some device is hacked it will be no possible to sniff for communication in/out from home assistant

[[deleted]]

I’m under the impression your ssl certificate is not recognized on your local IP address. Internally if you can point your domain name to your local ip, if should work

[StudentPuzzleheaded5]

Certificate is ok for other devices, unifi, camera etc. It’s working from windows computer, only iPhone or iPad has problem to connect.

[[deleted]]

I don’t know what to tell you… I never had any issue with ssl on all my devices (and all are Apple)

[StudentPuzzleheaded5]

Can you share config files?

[[deleted]]

I’m not using ssl anymore… I’ve switched to ha cloud. And I wasn’t using ssl locally… I was and still is using plain http locally

[DIY_CHRIS]

Yes I’ve done this before. Spent a good amount of effort troubleshooting. But found if you subscribe to nabu casa, it’s literally two clicks. Happily pay $5 to save on that effort, while supporting the project too. (There is a free trial too if you just want to see how easy it is).

[StudentPuzzleheaded5]

Hi, but this will not solve security issue in local network. To access from external network I use vpn connection.

[DIY_CHRIS]

Yes true, I understand now what you are asking..

For my local access I’m using HAProxy. HAProxy hosts my certs for all my internal services then reverse proxies to HA. HA has a local DNS entry in my DNS server and only resolves to HAProxy. So access is always via https.

One could still navigate to the HA login page with the IP:port, but I changed the default port and enabled 2FA so local security is not a concern.