Bug: Can't mark server certs as trusted
 

I filed a bug as well, but for others who might be having this issue.

We've got our own server, our own server certificate, and our own WebDAV server. OF on my Mac syncs without any issues (since at some point I was able to trust the certificate permanently). Now I'm trying to sync with my iphone, and I'm getting an "untrusted server certificate" dialog box, with no way to trust the certificate. As a result, I'm unable to sync.

And no, I don't want to use http instead of https. I'd like to trust my own web server cert. :)

Thanks for looking into this!

[QUOTE=mhedstrom;40106]I filed a bug as well, but for others who might be having this issue.

We've got our own server, our own server certificate, and our own WebDAV server. OF on my Mac syncs without any issues (since at some point I was able to trust the certificate permanently). Now I'm trying to sync with my iphone, and I'm getting an "untrusted server certificate" dialog box, with no way to trust the certificate. As a result, I'm unable to sync.
[/QUOTE]

I have this same problem. On the Mac it was not a problem, I just simply have to trust the server certificate in Safari (once), and OmniFocus picks up the "trust" automatically. But this doesn't seem to be an option on the iPhone, safari will ask me if I trust the cert, but no option to mark it as permanently trusted. And I assume therefore, the OF App will not have this trust information.

Any hope that an upgrade to the OF App will at least allow us to trust the cert for the session, even if it's not permanent? That'd be tons better than nothing, although a permanent trust relation would be nice too (or heck, even a check box in the prefs to no verify the CA of the certificate)

Thanks!

-- Leif

[QUOTE=zwoop;40136]Any hope that an upgrade to the OF App will at least allow us to trust the cert for the session, even if it's not permanent?[/QUOTE]

Yes, we plan to fix this in an update.

[QUOTE=Ken Case;40158]Yes, we plan to fix this in an update.[/QUOTE]

Thanks Ken, that sounds great! I'll live with having to trust the cert every session if it means I can sync. :)

[QUOTE=Ken Case;40158]Yes, we plan to fix this in an update.[/QUOTE]

Cool!

In an attempt to work around this (for now) I setup an SSH tunnel between my Mac and the server, and I changed the "url" accordingly. Everything seems to work, i.e. it uploads the files etc., but every time I sync I get an error saying "can't find host". I guess it's just an annoyance, since everything seems to work, but figured I'd post here.

Update: I fiddled around with this some more, it seems to be port related. I had setup the tunnel for port 4080 -> port 80 (remote), and that causes all sorts of problems. If I change the ssh tunnel to listen to port 80 locally (which means I have to run ssh as root), then OF works fine.

When do we get a private cert fix for OFI?
 

[QUOTE=Ken Case;40158]Yes, we plan to fix this in an update.[/QUOTE]
Time frame? I'm DOA without it, which means it's costing OG money since I'm not buying a copy of the Mac version without sync.

This sync bug will kill a customer in 14, 13, 12 ...
 

[QUOTE=swhobbit;40634]Time frame? I'm DOA without it, which means it's costing OG money since I'm not buying a copy of the Mac version without sync.[/QUOTE]

To be precise, my Mac eval copy expires in 14 days. Will I have a fix in 7-10 days, or should I drag it to the trash now?

(Note I have already foolishly paid for OFI, which actually has the bug).

-ahd-