Titanium JIRA Archive
Titanium SDK/CLI (TIMOB)

[TIMOB-25335] Certificate Pinning - Support multiple certificates for a URL

GitHub Issuen/a
TypeImprovement
PriorityNone
StatusClosed
ResolutionDuplicate
Resolution Date2020-09-30T09:16:42.000+0000
Affected Version/sRelease 6.2.1
Fix Version/sn/a
Componentsn/a
Labelsn/a
ReporterBen Bahrenburg
AssigneeUnknown
Created2017-09-23T17:30:07.000+0000
Updated2020-09-30T09:16:42.000+0000

Description

Often when using certificate pinning you will need to ship multiple certificates for the same URLs. This is done so that you can ship your new certificate before the old one expires. To support this the below would need to be implemented.
securityManager = https.createX509CertificatePinningSecurityManager([
    {
        url: 'https://dashboard.appcelerator.com',
        serverCertificate: 'dashboard.appcelerator.com-new.der'
    },
    {
        url: 'https://dashboard.appcelerator.com',
        serverCertificate: 'dashboard.appcelerator.com-old.der'
    }
]);
Will send a PR for review

Comments

  1. Ewan Harris 2020-09-30

    Closing as a duplicate of MOD-2402 rather than moving this over to MOD

JSON Source