owncloud / owncloud/ios-sdk

TLS client certificate support

Open
#11 5 comments 3 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Objective-C
Stars
11
Forks
11
Avg merge
1d 6h
Merged PRs (30d)
1

Description

Currently, the only thing keeping me from using SSLVerifyClient require on my private ownCloud instance for "enhanced security" is the limited mobile clients support.

This was a long-requested desktop client feature that got in (not that long ago) our 2.3 version: https://github.com/owncloud/client/issues/69. There's a screenshot of how the dialog prompted on handshake looks on https://github.com/owncloud/client/issues/6128#issuecomment-339915027

I'm not sure if this could be done in a "sandboxed" iOS application nowadays - i.e. provide access to the certificate living on the device keychain only to the ownCloud app - and additionally request its password. Feel free to close if there are technical limitations for this.

(FR coming from https://github.com/owncloud/ios/issues/222)

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the iOS SDK issue and the referenced ownCloud client issues, especially the desktop certificate-handshake dialog and the related iOS request. Determine whether iOS can provide an app-scoped client certificate from the device keychain and prompt for its password; done means a clear feasibility decision and, if feasible, a defined implementation scope.

Written by the indexing model from the issue text.

Assessment

Tech stack
ios, objective-c
Domain
mobile-dev, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.