ios - NSURLConnection: Use all CA certificates installed on device -


i want access web ressources using https in custom ios 6 app. target servers using certificate signed ca not default included in ios, manually added keychain of device. therefore urls can opened in safari without warning or error.

what want achieve same behavior safari: want load websites if safari have trusted them, or deny load them in case of error. installed certificates can change case case not want manually include certificates in application ressources, many questions here @ about.

my problem not sectrustevaluate return ksectrustresultproceed. have idea can do?

if canauthenticateagainstprotectionspace returns no, ios handles server certificate check on itself, not seem check additionally installed certificates (as safari does).

here code try , understand got far:

- (void)viewdidload {     [super viewdidload];     [self loadurlwithstring:@"https://myserver.com"]; }  + (bool) ischallenge: (nsurlauthenticationchallenge*) challenge validforconnection: (nsurlconnection*)conn{     sectrustref servertrust=[[challenge protectionspace] servertrust];      //some magic here?      // check server certificate     sectrustresulttype evalresult;     if(sectrustevaluate(servertrust,&evalresult) != errsecsuccess){         nslog(@"call sectrustevaluate failed");         return no;     }     if(evalresult != ksectrustresultproceed){         nslog(@"server certificate invalid");         return no;     }     nslog(@"server certificate valid");     return yes; }  - (void)loadurlwithstring: (nsstring*)str{     nsurlconnection *conn =         [nsurlconnection connectionwithrequest:[nsurlrequest requestwithurl:[nsurl urlwithstring:str]] delegate:self];     [conn start]; }   - (void)connection:(nsurlconnection *)connection didreceiveauthenticationchallenge:(nsurlauthenticationchallenge *)challenge{     if([[self class] ischallenge:challenge validforconnection:connection])         [challenge.sender continuewithoutcredentialforauthenticationchallenge:challenge];     else         [challenge.sender cancelauthenticationchallenge:challenge]; }  - (bool)connection:(nsurlconnection *)connection canauthenticateagainstprotectionspace:(nsurlprotectionspace *)protectionspace{     return [protectionspace.authenticationmethod isequaltostring:nsurlauthenticationmethodservertrust]; }  - (void)connection:(nsurlconnection *)connection didfailwitherror:(nserror *)error{     nslog(@"failed error: %@",error); }  - (void)connectiondidfinishloading:(nsurlconnection *)connection{     nslog(@"loading complete"); }  - (void)connection:(nsurlconnection *)connection didreceiveresponse:(nsurlresponse *)response{  }   - (void)connection:(nsurlconnection *)connection didreceivedata:(nsdata *)data{  }

what you're trying not permitted. more info, see thread in apple developer forums:

https://devforums.apple.com/message/660579#660579


Comments

Post a Comment

Popular posts from this blog

image - ClassNotFoundException when add a prebuilt apk into system.img in android -

i'm in trouble add prebuilt apk system.img based taiwan mtk android phone platform, when push apk onto device,after reboot phone,the apk can installed succecessfully,but if add apk alps/out/target/product/$prj/system/app or vendor/mediatek/$prj/artifacts/out/target/product/$prj/system/app ,and produce system.img,the apk can't installed normally,the logcat say: a.lang.runtimeexception: unable instantiate activity componentinfo{com.sec.android.widgetapp.ap.hero.accuweather.widget/com.sec.android.widgetapp.ap.hero.accuweather.widget.weatherclock}: java.lang.classnotfoundexception: com.sec.android.widgetapp.ap.hero.accuweather.widget.weatherclock. can tell me what's problem ? when package manager installs apps part of system partition different installing apps on data partition. looks app using libraries somewhere else. when install on data lib directory created in apps data directory , symlinked /data/app-lib/. when apps installed on system it's expecte...
Read more

I need to import mysql 5.1 to 5.5? -

i have mysql 5.1 database , need import localhost running 5.5. how import 5.5 or downgrade mysql? install phpmyadmin 5.1 os: http://www.wikihow.com/install-phpmyadmin-on-your-windows-pc or https://www.digitalocean.com/community/articles/how-to-install-and-secure-phpmyadmin-on-ubuntu-12-04 then login, click on database, hit export, , export in sql format (quick fine). import .sql file 5.5 server (after installing phpmyadmin) logging in clicking database , hit import. hope helps!
Read more

Java, Hibernate, MySQL - store UTC date-time -

i saw here on few related questions (like this one , of course, this one )... essentially, want store date-time utc, , let application user choose time zone wants display date-time in. since seems date-time fields affected underlying jdbc driver, wonder if acceptable way go storing utc date-time: set both mysql , application server machine utc time zone (no need separate) both mysql , jvm should pick underlying system time settings (if not instructed otherwise) use datetime table columns on mysql side use java.util.date corresponding mapping on hibernate side (i guess java.sql.timestamp used too) let application worry interpreting date-time fields - i.e. let user choose preferred time zone is ok? edit clarify - here meant refer timestamps created strictly on server (e.g.date-time of record creation). application server instantiates date objects (new date() equals current date-time on server, , time zone agnostic). if client user wants supply date searching/filte...
Read more