Continuously getting kSecTrustResultRecoverableTrustFailure while trust evaluation - iphone

Question

I want to securely communicate with my server and here is what I am doing...

NSURLProtectionSpace *protectionSpace = [challenge protectionSpace];
SecTrustRef         


        

Answer 1

SecTrustResultRecoverableTrustFailure happens if

• the certificate is md5 hashed (IOS5)
• the server does not present the root and intermediate certificates
• the SecTrustSetAnchorCertificatesOnly(trust,YES) is set and the anchor certificate is only in the built in anchor certificates
• the certificate is expired
• ?

I solved my problem by configuring the webserver to send the whole certificate chain instead of only the server certificate.

By configuring my apache mod_ssl: https://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslcertificatechainfile