iOS - Simple SSL socket connection

Question

What is the correct way to create a SSL socket connection in iOS?

I've implemented a SSL server in Java by:

creating a SSL certificate with a store password
loading it by setting the system properties "javax.net.ssl.keyStore" and "javax.net.ssl.keyStorePassword"
creating a SSLServerSocket with the SSLServerSocket factory

Now I want to create a client app which opens a socket connection in a thread and communicates over that. What is the proper way to create such a connection and do the communication with my servers certificate?

Community · Accepted Answer · 2017-05-23 10:25:00Z

2

You can use NSInputStream and NSOutputStream to connect using TLS as per the answer to this question.

EDIT: Rather than use the SSL settings in that answer, I would suggest this:

NSDictionary *settings = @{ 
    (__bridge NSString *)kCFStreamPropertySocketSecurityLevel:(__bridge NSString *)kCFStreamSocketSecurityLevelNegotiatedSSL 
};

This uses the following defaults:

kCFStreamSSLAllowsExpiredCertificates:  NO
kCFStreamSSLAllowsAnyRoot: NO
kCFStreamSSLValidatesCertificateChain: YES

If you want to set the security level to use a particular version of SSL or TLS, take a look at the values in CFSocketStream.h.

edited May 23, 2017 at 10:25

CommunityBot

11 silver badge

answered Dec 8, 2013 at 21:07

neilco

8,0022 gold badges39 silver badges41 bronze badges

Sign up to request clarification or add additional context in comments.

5 Comments

maxdev Over a year ago

Thanks, but is it safe to use kCFStreamSSLAllowsAnyRoot?

neilco Over a year ago

Safe, yes because it's a valid option. Is it secure? No.

maxdev Over a year ago

So then.. what would be the right way to create a secure connection? ;)

maxdev Over a year ago

Okay, so far so good, but as my streams do not allow "any root" anymore, how do I make my servers SSL certificate to be allowed?

neilco Over a year ago

If you need to allow any root, then apply that setting. If you want to use a custom root certificate, ensure it's in the keychain on your device.

gdm · Accepted Answer · 2013-12-08 21:04:33Z

-1

There is no need to create a certificate if you are making a client app not a server one. To do it in iOS, there are a number of ways, the simplest is to use AFNetworking library. Just put the url (https) inside one of its methods, and you are ready. I used it many times. Just spend 5 mins to read the doc.

answered Dec 8, 2013 at 21:04

gdm

8,0464 gold badges46 silver badges74 bronze badges

2 Comments

neilco Over a year ago

SSLServerSocket is, as one would imagine, a socket server and not a web server.

maxdev Over a year ago

@guiseppe I don't want to create just a client that opens some kind of HTTPS connection. I want to create a SSL socket connection to my own Java server where I cant send plain bytes...

Collectives™ on Stack Overflow

iOS - Simple SSL socket connection

2 Answers 2

5 Comments

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

5 Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related