parse-community / parse-community/parse-server
Replace mock Game Center Certificate with updated Digicert certificate URL
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 21.4k
- Forks
- 4.8k
- Avg merge
- 7h 45m
- Merged PRs (30d)
- 11
Description
New Issue Checklist
- I am not disclosing a vulnerability.
- I am not just asking a question.
- I have searched through existing issues.
- I can reproduce the issue with the latest version of Parse Server.
Issue Description
Game Center Certificates =< 4 (e.g https://static.gc.apple.com/public-key/gc-prod-4.cer) were signed by Symantec. Apple have been phasing out their support for Symantec issued certs, and they are now completely untrusted. This explains why they are no longer serving https://static.gc.apple.com/public-key/gc-prod-4.cer. Previously, we resolved this issue by mocking the response from the apple server.
The problem here though is that all the existing Game Center test cases use a Symantec issued certificate. Test cases seem to be generated thanks to cloud.xtralife.gamecenterauth, however they haven't updated their code to use a valid Digicert certificate.
Steps to reproduce
Update test cases to use updated Game Center certificate (https://developer.apple.com/forums/thread/686122)
Actual Outcome
Signing failed
Expected Outcome
Tests should be updated with Digicert signed certificate. Test signature, salt and bundle ID will need to be valid in order for the signing to work (hence why we are using cloud.xtralife.gamecenterauth)
Environment
Server
- Parse Server version: alpha
- Operating system: macos
- Local or remote host (AWS, Azure, Google Cloud, Heroku, Digital Ocean, etc): remote
Logs
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Locate the existing Game Center test cases and review the referenced cloud.xtralife.gamecenterauth test_gamecenter.js data, then compare the certificate URL with Apple's developer guidance. Update the tests to use a valid Digicert certificate and matching signature inputs, and run the Game Center tests to confirm signing succeeds.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, node.js
- Domain
- backend, testing-qa
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100