views:

117

answers:

1

Hello,

I would like my app to connect to an https site, without user input required. So, I would like to send the app a certificate that the app will install in the keychain, and allow it to connect to the https site without the user getting involved.

How can I do this?

Thanks!

A: 

Applications are not able to install certificates to the keychain for security reasons.

Otherwise malicious programmers could install a certificate that authenticates phishing sites.

Ben S
In theory, applications should be able to install certificates that apply for UIWebViews and NSURLConnections inside the app only, but I'm not sure there's a public API for that.
rpetrich
From my understanding of the public API, in order to do that you also have to implement your own certificate validation in a subclass of `NSURLConnection` since none of the TLS connection classes are public.
Ben S