• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: SSL certificate validation
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SSL certificate validation


  • Subject: Re: SSL certificate validation
  • From: Jens Alfke <email@hidden>
  • Date: Fri, 6 Mar 2009 12:34:48 -0800


On Mar 6, 2009, at 2:11 AM, SridharRao M wrote:

I need to connect to a a service that uses certificate based authentication over SSL.
My client provided  a certificate that i need to validate with the  server certificate.
I found  a method "+ (BOOL)allowsAnyHTTPSCertificateForHost:(NSString*)host;" for NSURLRequest  to ignore ssl certificate errors.
But i can't find any method to validate My certificate .

I don't think you can do this with NSURLConnection, unfortunately.

If you drop down to CFStream, there are SSL-related properties you can set. The one you want, I think, is kCFStreamSSLCertificates. The value should be an array of SecIdentityRef. (You probably just need one item.)

—Jens

PS: You can find some of my code that uses this stuff here:
http://mooseyard.com/hg/hgwebdir.cgi/MYNetwork/file/tip/TCP/

Attachment: smime.p7s
Description: S/MIME cryptographic signature

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden

References: 
 >Fwd: SSL certificate validation (From: SridharRao M <email@hidden>)

  • Prev by Date: Re: Five Reasons Why Synchronous Networking Is Bad
  • Next by Date: Re: Can CFNetwork decode data transfered with chunked encoding automatically?
  • Previous by thread: Fwd: SSL certificate validation
  • Next by thread: How to broadcast to 255.255.255.255 on non-default interface
  • Index(es):
    • Date
    • Thread