Re: NSURLConnection and self-signed certs?
Re: NSURLConnection and self-signed certs?
- Subject: Re: NSURLConnection and self-signed certs?
- From: Wade Tregaskis <email@hidden>
- Date: Sun, 13 Jun 2004 12:14:25 +1000
Can I use NSURLConnection to get data from an HTTPS server with a
self-signed/unknown certificate?
If NSURLConnection uses SecureTransport, which from memory it does,
then it's simply a matter of whether NSURLConnection gives you an
appropriate interface to SecureTransport's manually authentication
methods. If not, you'll have to drop down to the SecureTransport
level.
Technically speaking it largely defeats the purpose of web-based
SSL/TLS to accept self-signed certificates, in most scenario's at
least. So the default behaviour is to never accept them (unless
they're in the list of trusted roots, of course). As I alluded,
SecureTransport does allow you to turn off the automatic authentication
and use your own code to authenticate.
Wade Tregaskis (aim: wadetregaskis)
-- Sed quis custodiet ipsos custodes?
_______________________________________________
macnetworkprog mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/macnetworkprog
Do not post admin requests to the list. They will be ignored.