[FIXED] Feature Request: Allow Invalid SSL Certificate

Forum to discuss the BlueSocket Authenticator for iPhone/iPod Touch

[FIXED] Feature Request: Allow Invalid SSL Certificate

Postby steve4 » Mon Nov 03, 2008 2:14 am

An option to allow an invalid SSL certificate would be great. It looks like the required information is right here:

http://blog.timac.org/?tag=nsurlconnection

The app could prompt the user who would then allow the invalid certificate.

I'm trying to have the SSL certificates at this university fixed, however I think this feature really is necessary for the survival of the product (e.g. it's present in similar apps).
steve4
 
Posts: 1
Joined: Mon Nov 03, 2008 2:08 am

Re: Feature Request: Allow Invalid SSL Certificate

Postby Melloware » Mon Nov 03, 2008 6:50 am

Steve you rock! I will implement this tonight. I sent you an email requesting your UDID so you can beta test it on your campus.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Melloware Inc.
http://www.melloware.com
=-=-=-=-=-=-=-=-=-=-=-=-=-=-
User avatar
Melloware
Site Admin
 
Posts: 11045
Joined: Thu Dec 01, 2005 10:24 pm
Location: Philadelphia, Pennsylvania USA

Re: [FIXED] Feature Request: Allow Invalid SSL Certificate

Postby Melloware » Thu Nov 06, 2008 11:16 pm

This has been added to version 1.3.

- Added two new settings for Ignoring Invalid SSL Certificates. SSl1 and SSl2. In the first SSL1 enter your universities Bluesocket site and in URL2 enter http://www.google.com like this if you are getting Invalid or Untrusted Certificate errors.

SSL URL 1: https://bluesocket.myschool.edu/
SSL URL 2: http://www.google.com/

=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Melloware Inc.
http://www.melloware.com
=-=-=-=-=-=-=-=-=-=-=-=-=-=-
User avatar
Melloware
Site Admin
 
Posts: 11045
Joined: Thu Dec 01, 2005 10:24 pm
Location: Philadelphia, Pennsylvania USA

Re: [FIXED] Feature Request: Allow Invalid SSL Certificate

Postby Melloware » Sun Nov 09, 2008 7:50 pm

Now in 1.4 http://www.google.com has been added as a default site to ignore certificates for so you don't have to enter it in SSL1 or SSL2.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Melloware Inc.
http://www.melloware.com
=-=-=-=-=-=-=-=-=-=-=-=-=-=-
User avatar
Melloware
Site Admin
 
Posts: 11045
Joined: Thu Dec 01, 2005 10:24 pm
Location: Philadelphia, Pennsylvania USA

Re: [FIXED] Feature Request: Allow Invalid SSL Certificate

Postby ninah567 » Mon Sep 14, 2009 11:48 pm

The app could prompt the user who would then allow the invalid certificate.

I'm trying to have the SSL certificates at this university fixed, however I think this feature really is necessary for the survival of the product (e.g. it's present in similar apps).
ninah567
 
Posts: 1
Joined: Mon Sep 14, 2009 11:42 pm

Re: [FIXED] Feature Request: Allow Invalid SSL Certificate

Postby Melloware » Tue Sep 15, 2009 6:05 am

ninah567 wrote:The app could prompt the user who would then allow the invalid certificate.

I'm trying to have the SSL certificates at this university fixed, however I think this feature really is necessary for the survival of the product (e.g. it's present in similar apps).


Yes but once you enter your university URL once in the settings this error is gone forever. I wanted the user to have to take action to make sure this works rather than just a simple prompt because many people do not understand the serious implications of going to a SSL site with an invalid cert. This way they would have to know what they are doing and take action by entering the URL to get around a bad SSL cert.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Melloware Inc.
http://www.melloware.com
=-=-=-=-=-=-=-=-=-=-=-=-=-=-
User avatar
Melloware
Site Admin
 
Posts: 11045
Joined: Thu Dec 01, 2005 10:24 pm
Location: Philadelphia, Pennsylvania USA


Return to BlueSocket Authenticator (closed)

Who is online

Users browsing this forum: No registered users and 1 guest