ASIHTTPRequest: https with SSL

Question

How to implement a https connection with SSL and ASIHTTPRequest? Are there some special steps to do? Can it be that this has nothing to do with ASIHTTPRequest? It has to do only with the server-side I think. Can someone post a link or describe the process of how a https connection can be established?

This is what I found out so far:

I read somewhere that you need a "real" SSL certificate and not a self signed one. There are also not all provider of SSL certificates supported I think (read this).

You also have to run through the U.S. Government requirement for a CCATS review and approval. (see here).

Answer 1

So you've got a few questions here:

1. To do ssl with ASIHTTPRequest, you just need to pass a https url instead of a http one.

2. you don't need an real SSL certificate, you can disable validation using: [request setValidatesSecureCertificate:NO];

3. Yes, you're limited by what certificate signing authorities are supported by the iphone. So long as you stick the big names it shouldn't really be an issue. (And as per 1. you can use a self signed certificate anyway.)

4. It seems CCATS is necessary - see http://stackoverflow.com/questions/2135081/does-my-application-contain-encryption and http://blog.theanimail.com/iphone-encryption-export-compliance-for-apps-0 (thanks to tc. for that!)