Is there a way to enable ssl pinning in nativescript Http module?
I have done this approach (https://discourse.nativescript.org/t/how-to-ignore-invalid-ssl-certificate-in-nativescript/1924/2) to bypass ssl for my development server.
But for production server, i want to trust a specific cert chain.
In nativescript-https plugin (https://www.npmjs.com/package/nativescript-https), there鈥檚 a way to enble ssl pinning. But the plugin seems not active anymore? Coz, don鈥檛 see any recent update
Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.
@smartsanja2013 check this thread for a possible solution using native implementation
Thanks for the reply, but this is not what i am asking. I have already implemented the mentioned solution. Its ok for development environment, what it does is trust all ssl certs.
But it is not the solution i want for production environment. In a secure prod environment, i want to store the sever side certs in the app bundle and pinning the certs when connecting to server.
This is a much needed feature I guess. In native ios or android codes we can do this easily.
@smartsanja2013 It might be a little late but please check this and let me know if this was what you were looking for?
https://github.com/sai-gmbh/nativescript-ssl-pinning
Most helpful comment
Thanks for the reply, but this is not what i am asking. I have already implemented the mentioned solution. Its ok for development environment, what it does is trust all ssl certs.
But it is not the solution i want for production environment. In a secure prod environment, i want to store the sever side certs in the app bundle and pinning the certs when connecting to server.
This is a much needed feature I guess. In native ios or android codes we can do this easily.