ASIHTTPRequest 使用HTTPS

 
 

  
  转自：https://github.com/pokeb/asi-http-request/blob/master/Classes/Tests/ClientCertificateTests.m

 
 
 
 

  
  

 
 
 
 

  
  //
 
 
 
 

  
  //  ClientCertificateTests.m
 
 
 
 

  
  //  Part of ASIHTTPRequest -> http://allseeing-i.com/ASIHTTPRequest
 
 
 
 

  
  //
 
 
 
 

  
  //  Created by Ben Copsey on 18/08/2010.
 
 
 
 

  
  //  Copyright 2010 All-Seeing Interactive. All rights reserved.
 
 
 
 

  
  //
 
 
 
 

  
  

 
 
 
 

  
  #import "ClientCertificateTests.h"
 
 
 
 

  
  #import "ASIHTTPRequest.h"
 
 
 
 

  
  

 
 
 
 

  
  @implementation 
  
  ClientCertificateTests
 
 
 
 

  
  

 
 
 
 

  
  - 
  
  (
  
  void
  
  )
  
  testClientCertificate
 
 
 
 

  
  {
 
 
 
 
	
  
  // This test will fail the second time it is run, I presume the certificate is being cached somewhere
 
 
 
 

  
  

 
 
 
 
	
  
  // This url requires we present a client certificate to connect to it
 
 
 
 
	
  
  NSURL 
  
  *
  
  url 
  
  = 
  
  [
  
  NSURL 
  
  URLWithString
  
  :
  
  @"https://clientcertificate.allseeing-i.com:8080/ASIHTTPRequest/tests/first"
  
  ];
 
 
 
 

  
  

 
 
 
 
	
  
  // First, let's attempt to connect to the url without supplying a certificate
 
 
 
 
	
  
  ASIHTTPRequest 
  
  *
  
  request 
  
  = 
  
  [
  
  ASIHTTPRequest 
  
  requestWithURL
  
  :
  
  url
  
  ];
 
 
 
 

  
  

 
 
 
 
	
  
  // We have to turn off validation for these tests, as the server has a self-signed certificate
 
 
 
 
	
  
  [
  
  request 
  
  setValidatesSecureCertificate
  
  :
  
  NO
  
  ];
 
 
 
 
	
  
  [
  
  request 
  
  startSynchronous
  
  ];
 
 
 
 

  
  

 
 
 
 
	
  
  GHAssertNotNil
  
  ([
  
  request 
  
  error
  
  ],
  
  @"Request succeeded even though we presented no certificate, cannot proceed with test"
  
  );
 
 
 
 

  
  

 
 
 
 
	
  
  // Now, let's grab the certificate (included in the resources of the test app)
 
 
 
 
	
  
  SecIdentityRef 
  
  identity 
  
  = 
  
  NULL
  
  ;
 
 
 
 
	
  
  SecTrustRef 
  
  trust 
  
  = 
  
  NULL
  
  ;
 
 
 
 
	
  
  NSData 
  
  *
  
  PKCS12Data 
  
  = 
  
  [
  
  NSData 
  
  dataWithContentsOfFile
  
  :
  
  [[
  
  NSBundle 
  
  mainBundle
  
  ] 
  
  pathForResource
  
  :
  
  @"client" 
  
  ofType
  
  :
  
  @"p12"
  
  ]];
 
 
 
 
	
  
  [
  
  ClientCertificateTests 
  
  extractIdentity
  
  :&
  
  identity 
  
  andTrust
  
  :&
  
  trust 
  
  fromPKCS12Data
  
  :
  
  PKCS12Data
  
  ];
 
 
 
 

  
  

 
 
 
 
	
  
  request 
  
  = 
  
  [
  
  ASIHTTPRequest 
  
  requestWithURL
  
  :
  
  [
  
  NSURL 
  
  URLWithString
  
  :
  
  @"https://clientcertificate.allseeing-i.com:8080/ASIHTTPRequest/tests/first"
  
  ]];
 
 
 
 

  
  

 
 
 
 
	
  
  // In this case, we have no need to add extra certificates, just the one inside the indentity will be used
 
 
 
 
	
  
  [
  
  request 
  
  setClientCertificateIdentity
  
  :
  
  identity
  
  ];
 
 
 
 
	
  
  [
  
  request 
  
  setValidatesSecureCertificate
  
  :
  
  NO
  
  ];
 
 
 
 
	
  
  [
  
  request 
  
  startSynchronous
  
  ];
 
 
 
 

  
  

 
 
 
 
	
  
  // Make sure the request got the correct content
 
 
 
 
	
  
  GHAssertNil
  
  ([
  
  request 
  
  error
  
  ],
  
  @"Request failed with error %@"
  
  ,[
  
  request 
  
  error
  
  ]);
 
 
 
 
	
  
  BOOL 
  
  success 
  
  = 
  
  [[
  
  request 
  
  responseString
  
  ] 
  
  isEqualToString
  
  :
  
  @"This is the expected content for the first string"
  
  ];
 
 
 
 
	
  
  GHAssertTrue
  
  (
  
  success
  
  ,
  
  @"Request failed to download the correct content"
  
  );
 
 
 
 

  
  }
 
 
 
 

  
  

 
 
 
 

  
  // Based on code from http://developer.apple.com/mac/library/documentation/Security/Conceptual/CertKeyTrustProgGuide/iPhone_Tasks/iPhone_Tasks.html
 
 
 
 

  
  

 
 
 
 

  
  + 
  
  (
  
  BOOL
  
  )
  
  extractIdentity:
  
  (
  
  SecIdentityRef 
  
  *
  
  )
  
  outIdentity 
  
  andTrust:
  
  (
  
  SecTrustRef
  
  *
  
  )
  
  outTrust 
  
  fromPKCS12Data:
  
  (
  
  NSData 
  
  *
  
  )
  
  inPKCS12Data
 
 
 
 

  
  {
 
 
 
 
	
  
  OSStatus 
  
  securityError 
  
  = 
  
  errSecSuccess
  
  ;
 
 
 
 

  
  

 
 
 
 
	
  
  NSDictionary 
  
  *
  
  optionsDictionary 
  
  = 
  
  [
  
  NSDictionary 
  
  dictionaryWithObject
  
  :
  
  @"" 
  
  forKey
  
  :
  
  (
  
  id
  
  )
  
  kSecImportExportPassphrase
  
  ];
 
 
 
 

  
  

 
 
 
 
	
  
  CFArrayRef 
  
  items 
  
  = 
  
  CFArrayCreate
  
  (
  
  NULL
  
  , 
  
  0
  
  , 
  
  0
  
  , 
  
  NULL
  
  );
 
 
 
 
	
  
  securityError 
  
  = 
  
  SecPKCS12Import
  
  ((
  
  CFDataRef
  
  )
  
  inPKCS12Data
  
  ,(
  
  CFDictionaryRef
  
  )
  
  optionsDictionary
  
  ,
  
  &
  
  items
  
  );
 
 
 
 

  
  

 
 
 
 
	
  
  if 
  
  (
  
  securityError 
  
  == 
  
  0
  
  ) 
  
  { 
 
 
 
 
		
  
  CFDictionaryRef 
  
  myIdentityAndTrust 
  
  = 
  
  CFArrayGetValueAtIndex 
  
  (
  
  items
  
  , 
  
  0
  
  );
 
 
 
 
		
  
  const 
  
  void 
  
  *
  
  tempIdentity 
  
  = 
  
  NULL
  
  ;
 
 
 
 
		
  
  tempIdentity 
  
  = 
  
  CFDictionaryGetValue 
  
  (
  
  myIdentityAndTrust
  
  , 
  
  kSecImportItemIdentity
  
  );
 
 
 
 
		
  
  *
  
  outIdentity 
  
  = 
  
  (
  
  SecIdentityRef
  
  )
  
  tempIdentity
  
  ;
 
 
 
 
		
  
  const 
  
  void 
  
  *
  
  tempTrust 
  
  = 
  
  NULL
  
  ;
 
 
 
 
		
  
  tempTrust 
  
  = 
  
  CFDictionaryGetValue 
  
  (
  
  myIdentityAndTrust
  
  , 
  
  kSecImportItemTrust
  
  );
 
 
 
 
		
  
  *
  
  outTrust 
  
  = 
  
  (
  
  SecTrustRef
  
  )
  
  tempTrust
  
  ;
 
 
 
 
	
  
  } 
  
  else 
  
  {
 
 
 
 
		
  
  NSLog
  
  (
  
  @"Failed with error code %d"
  
  ,(
  
  int
  
  )
  
  securityError
  
  );
 
 
 
 
		
  
  return 
  
  NO
  
  ;
 
 
 
 
	
  
  }
 
 
 
 
	
  
  return 
  
  YES
  
  ;
 
 
 
 

  
  }
 
 
 
 

  
  

 
 
 
 

  
  

 
 
 
 

  
  @end