views:

335

answers:

3

Hello, I'm new here and I'm facing a problem. I need to know if it is possible to implement the WS-Security protocol with X.509 certificates on a native iPhone application. I haven't found much information on the web, except this information from Apple about security services.

I just want to ask, is it possible? has it been made before?. If it is posbile, can you point me in the right direction?.

Thanks in advance.

A: 

You should be able to implement this using OpenSSL.

There is a tutorial on The Rare AiR on how you can compile the library for iPhone.

Hope this helps, Claus

Claus Broch
Thanks, it seems that I can create encrypted connections with Apple's CFNetwork API. I think the complicated part of this will be creating the soap headers that WS-Security requires.
emmanuel.aquino
You could also have a look at the Security.framework. It should offer you some options for doing X.509 certificates as well in addition to a few types of encryption, but nowhere nearly as full fledged as OpenSSL
Claus Broch
Thank you very much, I haven't found answers anywhere else. I will probably give OpenSSL a try.
emmanuel.aquino
A: 

Hello Emmanuel,

  Can you please let me know whether you are abale to implement X.509 secuirty for iPad webservices.

  If it is not possible, can you please let me know which security we can implement for iPad webservices.

Thanks in advance, Sunil Kalahasti

Sunil
You can handle x.509 certificates using NSURLConnection and the methods described in the "Certificates, key, and Trust Services Reference" http://developer.apple.com/iphone/library/documentation/Security/Reference/certifkeytrustservices/Reference/reference.htmlusing both NSURLConnection an these methods you will be able to manage client and server certificates on the iphone and I guess on the ipad as well. Check this sample code http://developer.apple.com/iphone/library/samplecode/AdvancedURLConnections/Introduction/Intro.html#//apple_ref/doc/uid/DTS40009558
emmanuel.aquino
A: 

did you get any of the xmlenc and xmldsig working?

Justin