Sdk: Add a `data` getter to X509Certificate

[zanderso]

Add a data getter to X509Certificate that returns the DER encoded bytes of the certificate from i2d_X509() as an UnmodifiableUint8List.

This is to enable SSL pinning.

/cc @mit-mit @a-siva

[mit-mit]

Related Flutter bug: https://github.com/flutter/flutter/issues/16066

[zanderso]

https://dart-review.googlesource.com/c/sdk/+/55505

I'll land after adding a getter for the sha1, which is what I think you mean by fingerprint.

[zanderso]

It should make it in the next roll into Flutter top-of-tree. I'll link the pull request to follow when it shows up.

[linuxjet]

Is this available in the beta release of Flutter yet? or where can I pull this source?

[zanderso]

Sorry for not updating. This is now available in Flutter.

[linuxjet]

I'm pretty new to flutter. Can someone point me towards a tutorial or a doc that describes how to use this.

[zoechi]

@linuxjet did you check the test https://github.com/dart-lang/sdk/blob/e7495e427c2b0ce76546c946da5f5b9f6f580214/tests/standalone_2/io/secure_client_server_test.dart#L44-L73 (can't help more)

[linuxjet]

HA!.. no I didn't. because I didn't see it. thx

[qwilbird]

Hi,
what about public key pinning (HPKP). Can the SecurityContext validate a public key instead of a certificate? This is more future proof as certificate pinning comes with issues of certificate expiry
Cheers

[daadu]

any update on SSL pinning with public key?

[a-siva]

Can we file a new feature request for SLL pinning with public key, this issue was opened for adding 'data' getter which is done and the issue closed.

[sandeepcmsm]

issue opened for ssl public key pinning support. https://github.com/dart-lang/sdk/issues/35981