iOS - How to check wheather pem file is valid or not?

Question

I have created development and production pem files. I have followed this steps:

1) developer.apple.com : AppIDs section check Bundle id supports Development SSL Certificate if no then create that certificate (which supports APNS)

2) open key chain

3) right click on our certificate and export certificate.

4) you will get .p12 file from here : like : hope_APNS.p12

5) open console(terminal) and run following command (use created .p12 file here as input) openssl pkcs12 -in apns-dev-cert.p12 -out apns-dev-cert.pem -nodes -clcerts

6) you will get .pem file for the same. (like hope_APNS.pem)

Developement pem file is working fine. But there is some in production pem file. When i set production pem file and send push notification from console. I won't get push on my device.

there is no any way to test pem file if want to test.just only way sending the pushnotifiction while getting response and check error try to solve — Nimit Parekh, May 14 '15 at 08:29
have you follow all the steps properly then there is no any mistake happen for refer all step from that answer http://stackoverflow.com/questions/21250510/generate-pem-file-used-to-setup-apple-push-notification — Nimit Parekh, May 14 '15 at 08:32
for developement the push token is different compared to Production.Are u using the same token? — Mukesh, May 14 '15 at 08:34
@muku i have used different token, I know push token for dev and production is different. — Kirti Parghi, May 15 '15 at 16:53
@Nimit Parekh i have followed this steps. In my case dev pem file is working perfectly. but in production pem file, it will create some issue. It is possible to check whether pem file is correct or not through commands on terminal. I have checked it on terminal also. — Kirti Parghi, May 15 '15 at 16:56

score 34 · Answer 1 · answered Sep 11 '16 at 20:59

That's an old thread but I was looking for the same answer and hope this solution help someone... worked for me.

You can test your PEM key using the following command, which should hang if successful until you press enter:

openssl s_client -connect gateway.sandbox.push.apple.com:2195 -cert pnpush.pem -key pnpush.pem

The above tests the PEM Key in sandbox mode. For production mode, use the following command:

openssl s_client -connect gateway.push.apple.com:2195 -cert pnpush.pem -key pnpush.pem

Thanks to Craig at https://www.pubnub.com/knowledge-base/discussion/234/how-do-i-test-my-pem-key

This should be the answer. – Bryan Norden Oct 23 '17 at 16:33 — Bryan Norden, Oct 23 '17 at 16:33

score 1 · Answer 2 · edited May 23 '17 at 12:03

There are many reasons why you may not be getting push notifications via a production .pem certificate on your device. Besides making sure you generated the distinct production certificate correctly, here are few things to check:

You have an Ad-Hoc or Distribution build running on your test device when testing a production certificate
You have successfully collected the production push token of said device (which will always be different from the development push token)
You are able to connect to Apple Push Notification PRODUCTION servers (gateway.push.apple.com, port 2195) with the new certificate (ie/ you're able to open a socket connection and it does not close immediately)
You have checked that your certificate is not expired

Failing all that, you really need to check what is going on at the network level when you send something via that certificate. If it's invalid, it won't connect at all to Apple. If it's valid but the push token you're sending is not recognized by Apple, an error code will be returned (if you are using the binary interface) or the connection will be severed. You may also want to look into the APNS Feedback API to gain more insight on what is going wrong.

You may want to check out this answer and this other answer for more tips.

I have revoke production pem file and created new one. It solved my issue. — Kirti Parghi, May 15 '15 at 17:05

score 0 · Answer 3 · edited Sep 21 '18 at 10:53

0

It's very easy to check both PEM files (Development as well as Distribution ) by using this tool:

Supports Both APNS & GCM Click to check PEM File is valid or not

edited Sep 21 '18 at 10:53

Lukas Würzburger

6,207
7
35
68

answered Apr 05 '18 at 10:29

Kiran Patil

312
4
13

Link does not work, and sharing PEM files seems like risky advice? – bunkerdive Dec 03 '20 at 18:59

score 0 · Answer 4 · answered May 08 '21 at 18:24

Verify .pem file First, open the .pem in a text editor to view its content. The certificate content should be in format as shown below. Make sure the pem file contains both Certificate content(from BEGIN CERTIFICATE to END CERTIFICATE) as well as Certificate Private Key (from BEGIN PRIVATE KEY to END PRIVATE KEY):

> Bag Attributes
>     friendlyName: Apple Push Services:<Bundle ID>
>     localKeyID: <> subject=<>
> -----BEGIN CERTIFICATE-----
> 
> <Certificate Content>
> 
> -----END CERTIFICATE----- Bag Attributes
>     friendlyName: <>
>     localKeyID: <> Key Attributes: <No Attributes>
> -----BEGIN PRIVATE KEY-----
> 
> <Certificate Private Key>
> 
> -----END PRIVATE KEY-----

Also, you check the validity of the certificate by going to SSLShopper Certificate Decoder and paste the Certificate Content (from BEGIN CERTIFICATE to END CERTIFICATE) to get all the info about the certificate as shown below:

iOS - How to check wheather pem file is valid or not?

4 Answers4