Access from iOS device to instance no longer authorizing

[Mariusthvdb (Marius)]

Continuing the discussion from 2021.7: A new entity, trigger IDs and script debugging:

issue: can no longer authenticate to 1 of my instances on any iOS device. I can see and control it on Desktop.

My login/pw are correct (it doesn’t throw the red error of either being incorrect), and it very briefly accepts the credentials, after which it shows the above.

after that clicking RETRY, results in the same screen, but now a notification is being issued:

below are several snippets from the 2021.7.4 thread, where I left, since it apparently has nothing to do with the update to 2021.7.4, and which are necessary to make this stand alone:

@Mariusthvdb

did I miss anything in the 2021.7.4 release note that could block iOS connection to the instance? Im having issues with 2 of my instances, which on 1 I could solve by hard booting the Pi3. another just wont come back on the iPhone either Safari or Chrome browser (while it is perfectly fine on desktop now,) and I have SSH and SMB connection alright.

posted the only errors on the log in discord Discord

Already deleted the tokens, restarted the iPhone twice, deleted website history, and every time I get a new auth screen, after which Unable to connect to Home Assistant. RETRY is displayed…

ip is not banned.
please have a look if you can help me out get my instance back on iPhone?

@Mariusthvdb

just tried on on another iPhone, to make sure it was my device or not, and that too won’t connect. Making this a more generic certificate/iOS issue ?

@Mariusthvdb

thing is I have 3 instances, 2 of which can connect on my iPhone, it’s only the 1 instance. I’ve tried it all now network only, mobile only, IP address duckdns address. And it has been flawless for over 2 years…

even downgraded just now, but that didnt help, so I am back on 2021.7.4
what else can I try?
dont suppose it is the aeotec zwave stick attached to the RPi…? how could that only cause issues on iDevices…

@Mariusthvdb

I am not even using the app on this instance, only regular browser windows. I use the app for my production system.

next to that have always had 3 dedicated browser windows saved on desktop for my instances. 1 of those now won’t connect anymore

relevant config:

homeassistant:
  auth_providers:
   - type: homeassistant

and the http settings used:

ssl_certificate: /ssl/fullchain.pem
ssl_key: /ssl/privkey.pem
ip_ban_enabled: true
login_attempts_threshold: 10

as said, have been like this for ages, (and no reason to change this is there? given the trusted_proxies mentioned in the breaking changes are only for reversed proxies, and not for duckdns.org) Added to that, my issue started after 2021.7.4, and this setting was for 2021.7 which worked perfectly up to now.

Would seriously appreciate any help here, I am completely lost…
thanks if you would have a look!

[Mariusthvdb (Marius)]

For reference, I was able to solve this using the next couple of steps, discussed with @cogneato on Discord Thank you very very much!

• deleted the keys (fullchain.pem and privkey.pem) from the /ssl folder.

• Once again deleted the certificate form keychain Mac os.

• Uninstalled Duckdns. (myDesktop instance was still live while doing all of this).

• re-installed Duckdns letting it re-create the keys.

• After that, I could log back in without an issue.

Note to self:
certificates are stored in iCloud for all logged in iOS devices (never realized that, believed they were in HA somewhere…, or in the individual browser device settings)

PS
of course the question remains why this happened in the first place, and why only on iOS devices, and not everywhere this false certificate was used…
o well. guess I got to count my blessings and not push my luck