<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Certificate for GP Gateway for IOS 13.x in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/certificate-for-gp-gateway-for-ios-13-x/m-p/304794#M79232</link>
    <description>&lt;P&gt;Dear all,&lt;/P&gt;&lt;P&gt;was anyone able to generate a certificate satisfying the new requirements from Apple for IOS 13?&lt;/P&gt;&lt;P&gt;&lt;A href="https://support.apple.com/en-us/HT210176" target="_blank"&gt;https://support.apple.com/en-us/HT210176&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I have no problems generating the correct Subject Alternative Name extension, but no idea so far how to satisfy:&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;TLS server certificates must contain an ExtendedKeyUsage (EKU) extension containing the id-kp-serverAuth OID.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Regards,&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&amp;nbsp; &amp;nbsp;Andreas&lt;/SPAN&gt;&lt;/P&gt;</description>
    <pubDate>Mon, 23 Dec 2019 20:43:28 GMT</pubDate>
    <dc:creator>idelconsulting</dc:creator>
    <dc:date>2019-12-23T20:43:28Z</dc:date>
    <item>
      <title>Certificate for GP Gateway for IOS 13.x</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/certificate-for-gp-gateway-for-ios-13-x/m-p/304794#M79232</link>
      <description>&lt;P&gt;Dear all,&lt;/P&gt;&lt;P&gt;was anyone able to generate a certificate satisfying the new requirements from Apple for IOS 13?&lt;/P&gt;&lt;P&gt;&lt;A href="https://support.apple.com/en-us/HT210176" target="_blank"&gt;https://support.apple.com/en-us/HT210176&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I have no problems generating the correct Subject Alternative Name extension, but no idea so far how to satisfy:&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;TLS server certificates must contain an ExtendedKeyUsage (EKU) extension containing the id-kp-serverAuth OID.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Regards,&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&amp;nbsp; &amp;nbsp;Andreas&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 23 Dec 2019 20:43:28 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/certificate-for-gp-gateway-for-ios-13-x/m-p/304794#M79232</guid>
      <dc:creator>idelconsulting</dc:creator>
      <dc:date>2019-12-23T20:43:28Z</dc:date>
    </item>
    <item>
      <title>Re: Certificate for GP Gateway for IOS 13.x</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/certificate-for-gp-gateway-for-ios-13-x/m-p/304822#M79234</link>
      <description>&lt;P&gt;Actually all good.&lt;/P&gt;&lt;P&gt;Didn't realize initially that my self signed certificate (generated on the PA) was valid for more than 825 days.&lt;/P&gt;&lt;P&gt;Issued a new one and all OK now.&lt;/P&gt;</description>
      <pubDate>Tue, 24 Dec 2019 00:20:10 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/certificate-for-gp-gateway-for-ios-13-x/m-p/304822#M79234</guid>
      <dc:creator>idelconsulting</dc:creator>
      <dc:date>2019-12-24T00:20:10Z</dc:date>
    </item>
  </channel>
</rss>

