Starscream: SSL pinning documentation is not done

[marta-leveris]

Hi guys,

Could you add the documentation related to SSL Pinning, please? I'm trying to implement it on my project and it's really hard to figure out how I should do it without a proper documentation.

Thanks so much.

[cyberclectic]

+1 - Just ran into this today myself.

[q240252859]

+1-今天我自己遇到了这个问题。

[bobbywestman]

+1 @daltoniam any way you can address this please? Pinning was pretty straightforward in 3.x, having trouble figuring out how to do it in 4.x

[marta-leveris]

@daltoniam could you take a look at this issue, please? Thanks so much.

[cyberclectic]

Bump...

[fic219]

+1 - I would like to upgrade to 4.0 from 3.x, but I did not found a way to add my client certificate. (In 3.x, I just had to set WebSocket.sslClientCertificate). Thanks in advance

[yapiskan]

i am unsure this will work out for you since i wasn't able to make it work fully but the error we receive is related to setting ssl context.

sharing this just in case this might just help you to move forward a bit.

public class CustomCertificatePinner {
    private var trustAnchors: [SecCertificate]?
    private var defaultPinner: FoundationSecurity

    init(trustAnchors: [SecCertificate]? = nil, allowSelfSigned: Bool = false) {
        self.trustAnchors = trustAnchors
        defaultPinner = FoundationSecurity(allowSelfSigned: allowSelfSigned)
    }

    private func injectTrustAnchors(trust: SecTrust) {
        //  If there are anchors provided, add them to the trust then re-enable
        //  the system trusted certificates as well.
        if let anchors = trustAnchors {
            SecTrustSetAnchorCertificates(trust, anchors as CFArray)
            SecTrustSetAnchorCertificatesOnly(trust, false)
        }
    }

}

extension CustomCertificatePinner: CertificatePinning {
    public func evaluateTrust(trust: SecTrust, domain: String?, completion: ((PinningState) -> ())) {
        //  Inject any trust anchors, then pass through to the FoundationSecurity
        //  implementation to do the validateion. Do NOT do domain validation.
        injectTrustAnchors(trust: trust)
        defaultPinner.evaluateTrust(trust: trust, domain: nil) { pinningState in
            completion(pinningState)
        }
    }
}

then when creating the websocket session:

        var anchors: [SecCertificate]? = nil
        if let root = getSecRoot() {
            anchors = [root]
        }

        let customCertPinner = CustomCertificatePinner(trustAnchors: anchors)
        let socket = WebSocket(request: req, certPinner: customCertPinner)

[p3r15]

Does someone implement ssl pinning with starscream ? I need to add ssl pinning on my implementation and a how to or example code will be really useful.

[p3r15]

Basically is this library still alive ?