ssl pinning in Swift AlamoFire

Question

Im a newb here but I have an app that is subject to MITM attacks.

After I bit of research it sounds like I need to do SSL Pining, i.e keep a copy of my servers public key/certificate so the can determine if the response came from it.

I have no idea how to do this, I am using AlamoFire in Swift to handle the networking.

score 17 · Answer 1 · edited Dec 08 '15 at 17:42

17

Alamofire now implemented the certificate pinning. The documentation you need is in the Readme.md

https://github.com/Alamofire/Alamofire

See their example implementation:

let serverTrustPolicies: [String: ServerTrustPolicy] = [
    "test.example.com": .PinCertificates(
        certificates: ServerTrustPolicy.certificatesInBundle(),
        validateCertificateChain: true,
        validateHost: true
    ),
    "insecure.expired-apis.com": .DisableEvaluation
]

let manager = Manager(
    serverTrustPolicyManager: ServerTrustPolicyManager(policies: serverTrustPolicies)
)

edited Dec 08 '15 at 17:42

Stefan

5,203
8
27
51

answered Dec 08 '15 at 15:50

Antzi

12,831
7
48
74

4

Enum type 'ServerTrustPolicy' has no case 'PinCertificates'; did you mean 'pinCertificates' – Can Aksoy Feb 22 '18 at 14:52

score 11 · Answer 2 · answered Sep 24 '19 at 06:31

11

Alamofire 5.0 is now released. And ssl pinnig is changed. Look at the below code snipped.

let configuration = URLSessionConfiguration.default
        configuration.timeoutIntervalForRequest = timeoutIntervalForRequest
        let trustManager = ServerTrustManager(evaluators: [
                     "prod.ehliyetcepte.com": PublicKeysTrustEvaluator(),
                     "dev.ehliyetcepte.com": DisabledEvaluator()])


        self.session = Session(startRequestsImmediately: true,
                               configuration: configuration,
                               delegate: self,
                               serverTrustManager: trustManager)

answered Sep 24 '19 at 06:31

Emre Gürses

1,992
1
23
28

how it will load our certificate ?, I have .cert file and a p12 file. how can I use it – Sultan Ali Jul 13 '21 at 12:46
insert .cert certificate to root directory of your project. – Emre Gürses Jul 13 '21 at 13:10
Basically, I don't have project I am making a swift package – Sultan Ali Jul 14 '21 at 06:18

score 0 · Answer 3 · answered Mar 11 '15 at 20:52

As indicated here : https://github.com/Alamofire/Alamofire/issues/366

It is certainly something that the community is looking to support, but there's not a solid time frame around it yet. I'd say for the time being, you'll want to continue with AFNetworking, and keep a close eye on the Alamofire project for new features coming in.

ssl pinning in Swift AlamoFire

3 Answers3