ios - Certificate Trust Verification in Mobile App -
when app connects account on server first time, server generates , returns pkcs12 file private key , self-signed certificate server.
the purpose of primary key a) decrypt data sent server, , b) sign requests server can verify identity of client.
is there point in sectrustevaluate in case? i'm not using certificate verify identity of server in way, decryption/signing of data. have:
sectrustresulttype trustresult; status = sectrustevaluate(mytrust, &trustresult); nsassert(status == errsecsuccess, @"sectrustevaluate failed."); this failing ksectrustresultrecoverabletrustfailure - due self-signed certificate.
if required (or highly suggested), can point me towards need resolve this?
sectrustevaluate(trust, &result); checking if system can trust connection.
your certificate has in chain trusted. first time using secure connection. in case, think have deliver general certificate can validate if server trustable.
depending on kind of connection using, have different options of checking this. using tcp connection via gcdayncsocket , there post bring on right way. objective-c: eveluate server certificate signed our own pki (root ca) on tls tcp connection
if using https connection, find lots of questions , answers here on stack.
Comments
Post a Comment