ios - 如何在 Objective-C 中硬编码 .cer 证书？

Question

我一直在尝试使用为所需功能构建 native 代码的插件为混合应用程序实现 SSL Pinning。

在生成的 native 项目中，Objective-C 代码包含以下函数，用于从 www/certificates 位置读取证书文件 (X.509 DER .cer) .

// AFSecurityPolicy.m    
+ (NSSet *)certificatesInBundle:(NSBundle *)bundle {
        NSArray *paths = [bundle pathsForResourcesOfType:@"cer" inDirectory:@"www/certificates"];
        NSMutableSet *certificates = [NSMutableSet setWithCapacity:[paths count]];

        for (NSString *path in paths) {
            NSData *certificateData = [NSData dataWithContentsOfFile:path];
            [certificates addObject:certificateData];
        }

        return [NSSet setWithSet:certificates];
    }

但由于插件中的一个已知错误，此位置不会自动创建(理想情况下应该自动创建)。作为解决方法，我想将 .cer 证书内容硬编码到上述函数中。

我该怎么做？

(以上代码的修改版本会很有帮助)

可以找到样本证书here在 Github 上。

披露:我是移动编程的新手，非常感谢这方面的任何帮助。

Answer 1

您可以使用字符串来存储证书的 base64 表示形式(也称为 PEM 格式)并将其转换为 NSData:

NSString *originalString = [NSString stringWithFormat:@"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"]; 
NSData *data = [NSData dataFromBase64String:originalString];