IOS and SSL through TMG

[Sheridan]

We've got a cctv system hosted on a server which is accesible externally through our TMG2010 firewall - both servers have a domain wildcard certificate (Globalsign) on them for secure access.

 

The TMG publishes the cctv 'site' and is accessible from web clients/ios and android apps - or rather it was!

 

Since updating the cctv system and ios we can no longer connect from ios devices as it says 'cannot verify the identify of server.domain. Invalid certificate', whereas the android devices ask if you want to continue (if you accept it then works)

 

So basically the IOS apps no longer work at all, and the android ones still think the certificate is invalid.

 

Our wildcard (*.domain.com) is assigned to the HTTPS listener on the TMG, and also on the cctv publishing site (Milestone) - and is valid for another 2 years. The cctv server name is a valid domain name for the certificate as well, so I'm a bit stumped as to what it is objecting to! Oddly, on the IOS devices if you browse to the web version, it show the certificate as valid!