bug: SSL server certificate not found on iOS

[jvondermarck]

Hello, I know an issue about this problem (kotlin.Exception: Server certificate path not found) that has been closed one year ago but there is no documentation about where do we need to put the certificate in a KMP project. I tried to put the file in many folders but so far it is not working...

I did this :

tls = TLSClientSettings(
      serverCertificate = Res.getUri("files/ca-certificates.crt"),
),

The file ca-certificates.crt is in my commainMain/commonResources/files folder.

And on Android I don't need to set a certificate, so it does not make sense at all, and I don't even know if the certificate I have a good since I never used one before...

[davidepianca98]

Hello, different platforms may include difference CA certificates and that could be the reason why you are not needing it for Android. I suggest putting the file in resources, reading it to string using the platform specific way and passing the value of the file to TLSClientSettings like this: TLSClientSettings(serverCertificate = certificateContent).
Otherwise you could disable verification by using TLSClientSettings(checkServerCertificate = false) for testing.

[UAndreiRamescu]

I have the same problem in a compose multiplatform application, i don't understand how to pass the certificate, can you update the documentation please ?

[davidepianca98]

@UAndreiRamescu Regarding Compose Multiplatform resources I found the following links:

• https://www.jetbrains.com/help/kotlin-multiplatform-dev/compose-multiplatform-resources-setup.html
• https://www.jetbrains.com/help/kotlin-multiplatform-dev/compose-multiplatform-resources-usage.html#raw-files

Once the file has been read, you can just pass the string content to the TLSClientSettings object.

[MohammadRezaei92]

Witch file should I use? .crt or .pem? chain or fullchain?

[davidepianca98]

Only PEM files are accepted. Only the root certificated should be needed. But if not working you could try the full chain.

[MohammadRezaei92]

I tired all the files. It's ok on the android side but, on the IOS side I got this error when I pass serverCertificate

`io.github.davidepianca98.socket.IOException: OpenSSL error 1
at 0 iosApp.debug.dylib 0x10fa0d683 kfun:kotlin.Throwable#(kotlin.String?){} + 99
at 1 iosApp.debug.dylib 0x10fa077a7 kfun:kotlin.Exception#(kotlin.String?){} + 95
at 2 iosApp.debug.dylib 0x111422173 kfun:io.github.davidepianca98.socket.IOException#(kotlin.String?){} + 95
at 3 iosApp.debug.dylib 0x11142cc87 kfun:io.github.davidepianca98.socket.tls.TLSSocket#read(){}kotlin.UByteArray? + 2447
at 4 iosApp.debug.dylib 0x111444adb kfun:io.github.davidepianca98.TLSClientSocket#read(){}kotlin.UByteArray? + 807
at 5 iosApp.debug.dylib 0x112caab2f kfun:io.github.davidepianca98.socket.tls.TLSSocket#read(){}kotlin.UByteArray?-trampoline + 59
at 6 iosApp.debug.dylib 0x11142c093 kfun:io.github.davidepianca98.socket.tls.TLSSocket.send0#internal + 951
at 7 iosApp.debug.dylib 0x11142bbeb kfun:io.github.davidepianca98.socket.tls.TLSSocket#send(kotlin.UByteArray){} + 211
at 8 iosApp.debug.dylib 0x112ca9f8f kfun:io.github.davidepianca98.socket.SocketInterface#send(kotlin.UByteArray){}-trampoline + 99
at 9 iosApp.debug.dylib 0x111430357 kfun:io.github.davidepianca98.MQTTClient.send#internal + 663
at 10 iosApp.debug.dylib 0x111430e63 kfun:io.github.davidepianca98.MQTTClient.sendConnect#internal + 2191
at 11 iosApp.debug.dylib 0x111430093 kfun:io.github.davidepianca98.MQTTClient.connectSocket#internal + 1227
at 12 iosApp.debug.dylib 0x11142ddab kfun:io.github.davidepianca98.MQTTClient#(io.github.davidepianca98.mqtt.MQTTVersion;kotlin.String;kotlin.Int;io.github.davidepianca98.socket.tls.TLSClientSettings?;kotlin.Int;kotlin.String?;kotlin.Boolean;kotlin.String?;kotlin.String?;kotlin.UByteArray?;io.github.davidepianca98.mqtt.packets.mqttv5.MQTT5Properties;io.github.davidepianca98.mqtt.packets.mqttv5.MQTT5Properties?;kotlin.String?;kotlin.UByteArray?;kotlin.Boolean;io.github.davidepianca98.mqtt.packets.Qos;kotlin.Int;kotlin.Int;kotlin.Function + 3719
at 13 iosApp.debug.dylib 0x11142e6c7 kfun:io.github.davidepianca98.MQTTClient#(io.github.davidepianca98.mqtt.MQTTVersion;kotlin.String;kotlin.Int;io.github.davidepianca98.socket.tls.TLSClientSettings?;kotlin.Int;kotlin.String?;kotlin.Boolean;kotlin.String?;kotlin.String?;kotlin.UByteArray?;io.github.davidepianca98.mqtt.packets.mqttv5.MQTT5Properties?;io.github.davidepianca98.mqtt.packets.mqttv5.MQTT5Properties?;kotlin.String?;kotlin.UByteArray?;kotlin.Boolean;io.github.davidepianca98.mqtt.packets.Qos?;kotlin.Int;kotlin.Int;kotlin.Functi + 2275
at 14 iosApp.debug.dylib 0x111c13ee3