Introduction
Apple is updating the certification authority (CA) for the Apple Push Notification service (APNs), with new certificates being rolled out in sandbox (January 21, 2025) and production (February 24, 2025). If your iOS app relies on OneSignal for push notifications, this change could impact your service if necessary updates are not implemented.
This article provides a detailed guide on what OneSignal users need to do to ensure a smooth transition and uninterrupted push notification delivery.
Understanding the APNs Certificate Update
Apple is switching to a new SHA-2 Root: USERTrust RSA Certification Authority certificate for APNs. This means that applications communicating with APNs must include this new root certificate in their Trust Store before the deadline.
Key Dates to Remember
- January 21, 2025 – APNs sandbox environment updated with new certificates.
- February 24, 2025 – APNs production environment switches to new certificates.
Do OneSignal Users Need to Take Action?
OneSignal, as a third-party push notification service, manages the APNs connection on behalf of its users. This means that OneSignal is responsible for ensuring their infrastructure is updated to trust the new USERTrust RSA Certification Authority certificate.
Steps to Ensure a Smooth Transition
1. Check OneSignal’s Official Status and Updates
OneSignal typically announces major changes on its status page and blog. Check their updates to confirm they are handling the transition properly.
2. Ensure Your iOS App Trusts the New Certificate
While OneSignal handles APNs communication, your app might still require updates if:
- You have implemented certificate pinning for APNs connections.
- You use custom Trust Stores in your app that validate certificates.
- Your backend communicates directly with APNs.
If any of the above apply, ensure that the SHA-2 USERTrust RSA certificate is trusted in your app’s configuration.
3. Test Push Notifications Before the Deadline
Before the February 24, 2025, deadline:
- Send test notifications through OneSignal’s dashboard to confirm successful delivery.
- Verify push notification behavior in both sandbox and production environments.
- Check for any error logs that might indicate trust issues with the new certificate.
4. No Action Needed for APNs SSL Provider Certificates
Apple has confirmed that developers do not need to update their APNs SSL provider certificates issued by Apple. OneSignal will continue using their own certificates to authenticate with APNs.
Conclusion
If your Swift iOS app uses OneSignal for push notifications, the APNs certificate update should not require any major changes on your end. However, it’s essential to verify that OneSignal has implemented the update and test push notifications before the deadline to avoid service disruptions.
By proactively checking OneSignal’s status page and ensuring your app is prepared, you can seamlessly transition to the new APNs certificates and maintain uninterrupted push notification delivery.
For the latest updates, check Apple’s official documentation and OneSignal’s support pages.
