You are disconnected error while local connect if https with remote certificate is used in HA

[benchdoos]

iOS device model, version and app version

Model Name: iPhone 14 Pro
Software Version: 18.6.2
App version: 2025.11.1 (2025.1534)

Home Assistant Core Version

2025.11.3 (homeassistant/home-assistant:2025.11.3)

Describe the bug
When HA is up with valid certificate for remote address, it boots up with https protocol only. If you connect it locally, browsers usually warns that cert for remote address is used, but not for local address (192.168.*.*).
So if the ios app is configured to use both addresses (1 for local connections, another for remote), it will not connect through the local address - seems that it caused by the problem described upwords.
So the only way to connect is to use remote address ONLY (or disable https).

To Reproduce

1. Configure HA to use cert with chain:

• remote address cert
• CA

2. Set up 2 addresses in ios app:

• local
• remote

3. Try to connect.

Expected behavior
One of two ways are expected:

1. HA boots up with 2 kind of connections on 2 ports: http, https. IOS app does not check chain for http. (preffered)
2. IOS app has an opportunity to disable cert chain check for local connection.

Screenshots

Additional context

Sorry if it is an duplicate issue, I tried my best to find any solution, but failed

[bgoncal]

Not sure if I understand correctly, but you want to use your local IP as internal URL and Home Assistant Cloud (or cloudflare or any valid remote connection) as external?

You just need to set the internal and external URL in the app settings, then to use the internal you need to define your home wifi network name, allow location permission (required by Apple so we can check the SSID), and finally set the "connection security level" to "Most secure."

[benchdoos]

Not sure if I understand correctly, but you want to use your local IP as internal URL and Home Assistant Cloud (or cloudflare or any valid remote connection) as external?

You just need to set the internal and external URL in the app settings, then to use the internal you need to define your home wifi network name, allow location permission (required by Apple so we can check the SSID), and finally set the "connection security level" to "Most secure."

Hello, @bgoncal!

No, I've set up 2 urls:

• local - https://192.168.\*.\*
• remote - https://***

It is expected, when IOS app is connected to local network (with chosen SSID), it will use the local address (and it does).
And when you're not connected to local network - it uses remote address to access HA.

But. As far as HA boots up with https port:

http:
  ssl_certificate: /.../cert.crt
  ssl_key: /.../key.pem

there is no way to connect to HA with IOS app to local address, cause the certificate is made for remote address.

So if I connect locally - it does not work (as on screenshot in the issue description), otherwise if I connect outside of SSID - it uses remote address, the certificate matches and everything works fine.

[bgoncal]

Your internal URL mentions "https", it should use "http" otherwise the certificate will be invalid indeed.

When you open yout internal URL on a browser like iOS Safari, doesn't it give you a certificate issue warning?

[benchdoos]

Your internal URL mentions "https", it should use "http" otherwise the certificate will be invalid indeed.

When you open yout internal URL on a browser like iOS Safari, doesn't it give you a certificate issue warning?

Yes, it does!
But HA does not boot up with http connection, it just breaks the connection if I try to connect within http instead of https. So only https is available, but as you correctly noticed - browsers are arguing at certificate provided, while using local address. But in browsers you can just ignore the warn. IOS HA app does not give that option, that's the point.

[bgoncal]

Yeah but App is not the browser, it requires a correct network setup to work. In this case the issue is related to your setup. The App can't make exceptions for invalid certificates.

Unfortunately I will have to close this issue because of that, if you believe your setup is correct, please bring the discussion in Home Assistant Core repo, since it is the proper place to discuss setups.