0

ZeroSSL RSA Domain CA

I use NextDNS with the configuration profile on iOS.

I removed and reinstalled the profile, but the certificate will expire in three days, therefore May 22, 2024.

When will you renew it?

13 replies

null
    • BigDargon
    • 6 mths ago
    • Reported - view

    This does not affect, you can download the newly signed profile again. https://help.nextdns.io/t/q6y6vx3/date-of-signature-of-the-nextdns-io-certificate-installed-on-the-ios-profile-it-expires-on-52424#y4y6v8n

      • Virtual_Dimension
      • 6 mths ago
      • Reported - view

       I have already done so, even a little while ago, but the expiry date has not changed and still remains May 22, 2024. I will try again on the expiry day, hoping that it will be renewed.

      • BigDargon
      • 6 mths ago
      • Reported - view

       When the certificate expires, nextdns is still working properly. The profile signing certificate to authenticate the downloaded profile is not edited by anyone else.

      Suppose, you download a profile edited by someone, all your queries will be redirected to another server without knowing it. And someone will also forward you to a site with a different IP address.

      If you are an advanced user, turn off profile signing you will be able to edit the profile file using the editor or apple config. For example, you can change the hostname apple.dns.nextdns.io to doh3.dns.nextdns.io if you want to use DoH3.

      In summary, when the certificate expires, you can download the newly signed profile with the new certificate expiry date. Or continue to use without affecting anything.

    • Calvin_Hobbes
    • 6 mths ago
    • Reported - view

    I’m pretty certain the code signing certificate is what validates the configuration profile.  Once signed, the configuration profile should continue to work unless it’s tampered with.  
     

    After the code signing certificate expires, they won’t be able to issue NEW configuration profiles.   Existing profiles should continue to work 

     

    that’s my understanding.   I could be wrong.  
     

      • NextDNs
      • 6 mths ago
      • Reported - view

       you are perfectly correct.

      • Paulo_Emilio
      • 6 mths ago
      • Reported - view

       Hello guys. I'm also a subscriber to NextDNS. I'm in the same situation. And I downloaded a Quad9 profile, to contingency situations like this. To compare their behavior in relation to the renewal of NextDNS digital certificates. Quad9 renewed their certificate after it expired. Now it has an expiration date of 2025. Why doesn't NextDNS renew her certificate, just like Quad9 did? That's the question. I am using a renewed Quad9 profile certificate, but I would have to have the renewed NextDNS certificate. That's logical and right.

    • Virtual_Dimension
    • 6 mths ago
    • Reported - view

    @nextdns

    Ok, it's still working, but now the certificate has expired and is not verified by Apple. If I try to download a new configuration profile, the certificate remains expired with the same date.

    I am a paying user.

    I would just like to know why the certificate is not renewed by NextDNS.

      • Paulo_Emilio
      • 6 mths ago
      • Reported - view

       Hello guys. I'm also a subscriber to NextDNS. I'm in the same situation. And I downloaded a Quad9 profile, to contingency situations like this. To compare their behavior in relation to the renewal of NextDNS digital certificates. Quad9 renewed their certificate after it expired. Now it has an expiration date of 2025. Why doesn't NextDNS renew her certificate, just like Quad9 did? That's the question. I am using a renewed Quad9 profile certificate, but I would have to have the renewed NextDNS certificate. That's logical and right.

      • NextDNs
      • 6 mths ago
      • Reported - view

      once installed, a mobile certificate can't be changed, and thus can't be renewed. This is the same issue for Quad9 or anybody else. As explained earlier, this does not prevent it from working. If you really want to renew, you have to re-create a new certificate from https://apple.nextdns.io and re-install it.

      • Virtual_Dimension
      • 6 mths ago
      • Reported - view

       I just recreated the configuration profile and now the certificate has been renewed. The expiration date is now May 24, 2025

      • Paulo_Emilio
      • 6 mths ago
      • Reported - view

       I tried to recreate it three times. The download was from the old certificate. I'll try again. I'll be back with news soon. Thank you for your reply.

      • Paulo_Emilio
      • 6 mths ago
      • Reported - view

       I tried to recreate it three times. The download was from the old certificate. I'll try again. I'll be back with news soon. Thank you for your reply.

    • Paulo_Emilio
    • 6 mths ago
    • Reported - view

    Yesterday, 21 pm, the profile certificate expired. I downloaded a new profile today and it has the same date 5/21/24. Expired. Why don't they renew the profile certificate, like Quad9 does? I can't edit or create profiles, because this is only possible through a MAC, according to Apple support. I don't have a MAC. How do I get a profile with a valid certificate? Please.

Login to reply

Content aside

  • 6 mths agoLast active
  • 13Replies
  • 265Views
  • 4 Following