openssl s_client equivalent using CommonCrypto

Privacy & Security General
cheizer OP
Created Sep ’15
Replies 2
Boosts 0
Views 764
Participants 2

Hello,

I have a couple of Webservices which are using TLS 1.2 and not allowing weaker/broken TLS1 etc. The problem I have is the openssl software included with 10.9 and above include an outdated version of OpenSSL. I currently use openssl s_client to download the cert from the server to trust it but I can no longer do this using the version of openssl which is included with the OS.


Is there a way using CommonCrypto and NSSocket or something to connect and download the cert?


Thanks,

Charles

Replies  2
Boosts  0
Views  764
Participants  2
DTS Engineer OP
Apple
Sep ’15

The droid you’re looking for is the TLSTool sample code, recently updated with a bunch of ATS-related goodies.

Share and Enjoy
—
Quinn "The Eskimo!"
Apple Developer Relations, Developer Technical Support, Core OS/Hardware 

let myEmail = "eskimo" + "1" + "@apple.com"
0
cheizer OP
Sep ’15

Sweet, thanks! I knew there had to be something. I will dive in to it now.

0
openssl s_client equivalent using CommonCrypto
First post date Last post date
 
 
Q