Enable SSL certificate pinning in nativescript angular app · NativeScript/NativeScript#5819

(3 留言) (2 反應) (0 負責人)TypeScript (23,592 star) (1,634 fork)batch import

featurehelp wanted

描述

Is there a way to enable ssl pinning in nativescript Http module?

I have done this approach (https://discourse.nativescript.org/t/how-to-ignore-invalid-ssl-certificate-in-nativescript/1924/2) to bypass ssl for my development server.

But for production server, i want to trust a specific cert chain.

In nativescript-https plugin (https://www.npmjs.com/package/nativescript-https), there’s a way to enble ssl pinning. But the plugin seems not active anymore? Coz, don’t see any recent update

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

貢獻者指南

技術棧: typescriptjavascriptangularandroidios
領域: mobilesecurity
議題類型: feature
難度: 4
預計時間: 3-5 days
活動狀態: stale
清晰度: mostly clear
前置要求: NativeScript development environmentknowledge of HTTP moduleiOS/Android SSL certificate handlingTypeScript/JavaScript
新手友善度: 20
研究方向: Investigate how SSL pinning is implemented in the nativescript https plugin (nativescript https npm package) and how to integrate similar functionality into the core NativeScript HTTP module. Review the current HTTP module source code in the NativeScript repository (likely in src/Http or similar) to understand the architecture. Consider using native platform APIs for certificate pinning (e.g., NSURLSession delegate for iOS, OkHttp for Android). Engage with the issue commenters for additional context.