iPadOS unable to connect to custom DERP "tls: bad certificate"

iOS
8

Update by myself.

I SOLVED this problem.

My solution:

  1. Use https://whatsmychaincert.com/ to check the DERP with https://hostname:port, then it shows hostname:port is misconfigured. This is the chain it should be using.
  2. Follow the link and download the hostname.chain.crt, rename it to hostname.crt
  3. Replacing the old crt file with the file in step 2.
  4. Restart DERP, everything should be work fine!

PS:

  • My DERP is set behind a NAT, so I set port forwarding on my router.
  • I only have dynamic public IP address, so I use ddns.net to dynamic change the dns.
  • I can’t sign a SSL for ddns.net, so I sign another domain, and use CNAME to point to the host.ddns.net
  • Servers mentioned above is in China.

I don’t know whether my misconfiguration caused the problem or the wired network setting, but it works new

1 Like