Is there a way to change the certificate for the Xcode Server API?

I have created my own certificate authority which I distribute to my devices. I use this to sign SSL certificates for local servers so that my devices will trust the certificates on the servers they connect to.



(https://www.dropbox.com/s/8bidhsfbw1d7s4q/Xcode%20Server%20Cetificates%201.png?dl=0)


As shown above, I have set up OS X Server with one such certificate and the Xcode bots page shows the correct certificate being used, as shown in this screenshot:


(https://www.dropbox.com/s/2vzd285p814lg2v/Xcode%20Server%20Cetificates%202.png?dl=0)


When I access the Xcode Server API though, it is using a certificate signed by Xcode Server Root Certificate Authority. (The Chronos.local name was the hostname of this machine until recently, so I presume this is an existing certificate.)


(https://www.dropbox.com/s/feual17pgtocn1t/Xcode%20Server%20Cetificates%203.png?dl=0)


While in a browser, I can allow the certificate, my problem is that I'm trying to use the API in an iOS app and connections keep failing because the device doesn't trust the certificate. How can I get the API to use the certificate (uranus.local) I've created?


As an aside, using the Server app to connect remotely to my server throws up a warning about using another self-signed certificate. From the simple certificates interface in the Server app, I would assume that the Server would use my certificate for all communications. If there's a way of doing this for remote access, I would love to know. 🙂

Did you find any way to resolve this?

Apple Bugreporter has told me something that partially solves your issue - was mine, too.


Open your Keychain.app and make shure you have the System keychain selected and from there the all objects.

Double click on the item with the icon in front that looks like a VC

From the drop down list choose the certificate you want the servermanager-daemon to use.

Open Terminal

sudo killall servermgrd or

sudo killall servermgrd-listener


Found it also here


Cheers

Is there a way to change the certificate for the Xcode Server API?
 
 
Q