Lists

Open Menu Close Menu

Terms and Conditions
Lists hosted on this site
Email the Postmaster
Tips for posting to public mailing lists

Re: Custom SSL trust settings

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Custom SSL trust settings

Subject: Re: Custom SSL trust settings
From: Quinn <email@hidden>
Date: Mon, 2 Feb 2009 10:12:48 +0000

At 7:54 -0800 28/1/09, Jens Alfke wrote:

I ran into this last year. IIRC, there is no really fine-grained way to control certificate checking at this high level. You'd have to drop down to the low-level SSL APIs and run the TCP connection yourself, doing your own HTTP parsing. Yuck.

Really? I admit that NSURLConnection doesn't provide anything useful <rdar://problem/6496396>, but I've had good success with CFHTTPStream. Just disable SSL verification and then grab the peer certificate and do all of the trust evaluation yourself.

S+E
--
Quinn "The Eskimo!"                    <http://www.apple.com/developer/>
Apple Developer Relations, Developer Technical Support, Core OS/Hardware
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden



Prev by Date:
Re: network traffic statistics

Next by Date:
Re: Web Services zombie?

Previous by thread:
Re: network traffic statistics

Next by thread:
Re: Web Services zombie?

Index(es):

Date
Thread