Jump to content

50 posts in this topic

Recommended Posts

Updated (edited)

This needs to be done BEFORE the certificate gets revoked.

- Go to Settings > Cellular (wait for the Cellular Data section to load) > Scroll to the bottom and turn off WiFi Assist. If you’re device is WiFi only, you can skip this step. 
- Create a text file (must be in txt format) that contains ocsp.apple.com
- Save the text file in your iCloud Files or Dropbox (you'll have to connect your Dropbox account to iCloud Files with this option)
- Download the DNSCrypt app from the AppStore https://itunes.apple.com/us/app/dnscloak-secure-dns-client/id1452162351?mt=8
- Click the three dash lines in the top left and select the following settings

General Options:

  • Connect On Demand (ON)
  • Cache Responses (ON)

https://imgur.com/lwVCsTn

 

Resolvers usage rules:

  • Leave as default

https://imgur.com/XO6xjkU

 

Blacklists & Whitelists:

  • Enable Blacklist (ON)
  • Select the text file you created earlier

https://imgur.com/KunvVEI

 

Advanced Options:

  • Skip accessibility check (ON)
  • Strict mode (ON)
  • Network Connectivity (Set to IPv4 and IPv6)
  • Everything else off

https://imgur.com/uxOLUIg
https://imgur.com/ZPRLD3H

 

To test download iNetTools https://itunes.apple.com/us/app/inettools-ping-dns-port-scan/id561659975?mt=8 and ping ocsp.apple.com. It should come back as invalid hostname.

Updated by AdamTheGreat
Punctuation
  • Like 7
  • Winner 1
  • Thanks 2
Posted

Nice topic! Does this somehow prevent app verifications too?

Posted (edited)
11 minutes ago, DiDA said:

Nice topic! Does this somehow prevent app verifications too?

What this will do is make it where the apps still work if Apple revokes the certificate. On this last revoke I never knew because my apps still work. It stops the device from verifying with Apple that the certificate is still good. 

 Check my screenshot..

https://imgur.com/Wd2hw4E

Updated by AdamTheGreat
Posted
8 minutes ago, AdamTheGreat said:

What this will do is make it where the apps still work if Apple revokes the certificate. On this last revoke I never knew because my apps still work. It stops the device from verifying with Apple that the certificate is still good. 

 Check my screenshot..

https://imgur.com/Wd2hw4E

Will wait for a few testers and replies from other users. If this works, then we can think of pinning it somewhere for users to see.

  • Like 3
Posted
1 minute ago, DiDA said:

Will wait for a few testers and replies from other users. If this works, then we can think of pinning it somewhere for users to see.

As long as the steps are all followed it should work great. WiFi Assist has to be turned off for it to work correctly. :)

Posted
On 3/5/2019 at 10:23 PM, RainyLunar said:

I don’t have cellular on my iPad so I can’t turn of wifi assist

That’s fine. It should still work for you. The WiFi Assist is for cellular enabled devices only. 

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines