I have installed my SSL CA & Webserver certificate (IMG: http://cl.ly/image/22280V173K3Y)

Within the WordPress App, I can see my posts (in a funny order), comments & pages.... I can even post.

However when I click on "Dashboard" I get an SSL Error - Certificate is invalid (IMG: http://cl.ly/image/0H2t2W3B1c1I).

Opening my https site in safari works fine. Any Ideas?

Thanks in advance,
Nick

I've got the latest app and the latest version of WP, and I have the same problem.

However, I found a workaround. I don't know if this will work for others.

Edit your webserver config to redirect http requests to https. Then enter the plaintext http information (ie http://www.example.com instead of httpS://www.example.com) into the Wordpress settings for the site.

The plaintext site loads first and after that it seems to work fine over https.

if you've set password authentication, the webserver will redirect and ask for your password before the Wordpress authentication occurs. The https authentication establishes the connection, and then the Wordpress authentication happens. Enter the info, and then the https site will load.

Summary: leave the plaintext "http" settings in your Wordpress settings, and let the webserver handle SSL via redirect.

Hope this helps - feedback appreciated.

I operate a website which cannot afford paying for trusted security certificates... Nor can use startcom because I goofed and cannot pay for a revoke. So I use self-signed.

Is there any way that I can use the app still... Instead of not syncing at all... Giving a warning about certificate but giving option to continue... Like in Safari?

This app is useless for me if this condition remains in the app and will not change.

I appreciate feedback.

I was using [1] gnutls to support multiple SSL certs on a single IP. It worked fine with the Safari browser on iOS, but would not work with the iOS app.

When I switched to using the more supported, but only supporting a single site, modssl, I can now use the iOS app.

the logs on the iPad report Connection reset by peer NSUnderlyingError=0x285550

This site https://dave.sni.velox.ch/ provides test that your browser can support the shared SSL approach, would be great if the iOS client could do it also.

Also, despite the edit url being explicitly defined as HTTPS in the blog headers, the client was ignoring that and failing back to HTTP...

[1] http://www.howtoforge.com/hosting-multiple-ssl-web-sites-on-one-ip-address-with-apache-2.2-and-gnutls-debian-lenny

I have the same problem.

I have a self-signed SSL certificate and force logins to SSL. The Wordpress app fails to add my blog and I'm stuck.

Regards,
Mana

If I grabbed the code from SVN and worked on this myself, how do I go about submitting a patch for possible use in the official app?

The iPhone Mail application also prompts to say there's a potential bad cert, but allows the user to choose "Continue" and then doesn't ask again - it just silently accepts the certificate and continues.

The WordPress app should be more lenient when dealing with certificate errors - certainly warn the user, but do give them the option to continue.

Right now, the WordPress app will not connect to my blog and so cannot be used, which is a shame :(

This is an acceptable workaround, although you can't edit the blog settings without disabling ssl.

1. Enable xml-rpc by going to Settings->Writing and checked the XML-RPC enable box.
2. My blog is at http://cyrozap.blogdns.com, so in the spot to write your blog address in WP2 for iPhone, I put cyrozap.blogdns.com/wordpress/xmlrpc.php

It worked like a charm, but I don't know whether it is actually going over ssl or not. Oh, well, it works, and I'm happy with it.

I had the same problem, but I solved it this way:
At first I deactivated the force SSL-option in the wp-config.php. Then I configured my blog with the WordPress 2 app which worked well. After this step I actived SSL again. Even now I can use WordPress 2 on the iPhone for my blog.

If this could be bumped to version 2.0.1 that would just be awesome.

Best regards,
Stephan.

Can you file a ticket for this at https://iphone.trac.wordpress.org/ and we'll see if some of the app devs know why this isn't working.

After the ticket is created please post a link back to it on this thread so others can easily follow along.

The blog lives inside a VPN; access with mobile Safari does work.

Best regards,
Stephan.

What's the URL for your blog?

My (self-hosted) blog is HTTPS-only. I tried different entries in the 'Blog URL' section but neither https://x.y.z nor x.y.z:443 does work.
What would be the correct entry to set up the blog?

Thanks & best regards,
Stephan.

There are two constants that deal with this: FORCE_SSL_ADMIN and FORCE_SSL_LOGIN.

Thanks for the info. Could you expand a little more on what RSD is? Is there something I have to config or change? Your help would be appreciated!

Thanks,

AK

I access the Admin panel on my blogs using SSL (https) and I was hoping the newer version of the iPhone WordPress app will support SSL admin page login and access. This would be really great for the advanced WordPress users!

Thanks,

AK

Something like:

define('FORCE_SSL_XML-RPC', true);

Alex

"Q: Can I use SSL to encrypt the App communication?
A: Yes. On WordPress.com blogs, all communication (done over XML-RPC) is by default going to use an encrypted connection via SSL. For self-hosted WordPress, if you have SSL enabled, WordPress 2.6.1 or later supports pointing the RSD information at the “https” version of xmlrpc.php which creates an encrypted communication link with the App."

I run a self-hosted Wordpress installation. Can someone further explain to me how to point the RSD information to the https version of xmlrpc.php, and how to test/see if this is working? I don't know where to start on this.

Thanks!