How does Apple iphone enable SSL monitoring, and how does IOS install ca certificates?

WFilter's "SSL Monitoring" module can decrypt the contents of https and SSL encrypted smtp/imap/pop3 to record their contents. The SSL monitoring module can not only control the computer, but also has the same effect on mobile phones. However, in order not to affect the normal use of the client, you first need to install the cacertificate on the client. It is relatively easy to install a ca certificate on a computer, so we will not repeat it. In this article, I will introduce how to install the ca certificate of SSL monitoring on iphone to achieve SSL monitoring of iphone.

1. Enable SSL monitoring

When enabled, open the https website in a safari browser and you will get the following prompt:

To resolve this problem, you need to install a ca certificate on the client. Here are the specific import steps.

two。 Two ways to install certificate files

Certificate files can be downloaded from Certificate configuration in SSL Monitoring. After download, there is a ca.crt file, which can be installed in two ways:

Mail installation. Send the ca.crt file as an attachment to the Email to the client, receive the message on the iphone, open the attachment and install it.

Install it through a safari browser. The specific steps are shown below:

The address in the safari browser that accesses WFilter and downloads the ca.crt file. Such as "192.168.1.1/bak/ca.crt".

After downloading, you can see the certificate file in the downloaded description File in configuration.

Click install to install the certificate.

You also need to trust the certificate in the Certificate Trust Settings.

3. Effect test

After the above configuration, the access content of the https can be monitored. As shown in the figure: