RNPinnedCertValidator - GitLite

KO | EN

gitlite — search

#javascript #react #go #android #rust #linux #cli #awesome-list #vue #security #pytorch #ios #openai #open-source

RNPinnedCertValidator

(★ 163)

Simplifies validating pinned SSL certificates

파일 탐색기

최종 버전 다운로드 (.zip)

- - Main.storyboard
- - InfoPlist.strings
- main.m
- PinnedCertExample-Info.plist
- PinnedCertExample-Prefix.pch
- RNAppDelegate.h
- RNAppDelegate.m
- RNViewController.h
- RNViewController.m
- www.example.com.cer
- www.google.com.cer
- RNPinnedCertValidator-Prefix.pch
- RNPinnedCertValidator.h
- RNPinnedCertValidator.m
- - contents.xcworkspacedata
- project.pbxproj
- - InfoPlist.strings
- CA.cer
- RNPinnedCertValidatorTests-Info.plist
- RNPinnedCertValidatorTests.m
- www.example.com-CA.cer
- www.example.com-Expired.cer
- www.example.com.cer
- www.google.com.cer
.gitignore
Changelog.md
LICENSE
README.md
RNPinnedCertValidator.podspec

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# RNPinnedCertValidator

RNPinnedCertValidator simplifies validating ["pinned" SSL certificates](https://www.owasp.org/index.php/Certificate_and_Public_Key_Pinning). A pinned certificate means that your app only trusts a specific list of certificates rather than the entire trusted root store for the device. This improves security by limiting the number of trusted certificates, and frustrates attacks that modify the trusted root store.

## Usage

1. Put your trusted certificate in your bundle.
2. Create a validator with `-initWithCertificatePath:`.
3. Create an `NSURLConnection` with your object as a delegate.
4. In `-connection:willSendRequestForAuthenticationChallenge:`, call `[validator validateChallenge:challenge]`.

```objc
- (void)connection:(NSURLConnection *)connection 
willSendRequestForAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge {
  RNPinnedCertValidator *validator = [[RNPinnedCertValidator alloc] initWithCertificatePath:kPathToCerFile];
  [validator validateChallenge:challenge];
}
```

If you don't have your certificate in a handy file, pull it from your server:

``` 
openssl s_client -connect myserver:443 </dev/null 2>/dev/null | openssl x509 -outform DER > myserver.cer
```

See the `PinnedCertExample` project for an example that includes a `UIWebView`.