来自Flex/AIRiPad应用程序的双向SSL-Two-waySSLfromanFlex/AIRiPadapp

I have been developing an app that uses a web service created by another party. Currently that service sits on a VPN but they now want to move it to an external server and use two-way SSL for security instead. They have set up the service on the new server and set up the SSL authentication. We have tested over https but without the need for a client certificate and it all works fine. But now they have activated the need for the client cert and I am unable to work out how to connect.

我一直在开发一个使用由另一方创建的Web服务的应用程序。目前该服务位于VPN上,但他们现在希望将其移至外部服务器并使用双向SSL来代替安全性。他们在新服务器上设置了服务并设置了SSL身份验证。我们已经通过https进行了测试,但不需要客户端证书,而且一切正常。但现在他们已经激活了对客户端证书的需求,我无法弄清楚如何连接。

I have installed the certificate on my PC, onto Flash builder using the Java keytool to install to certca and I have installed onto the iPad - in none of these places am I able to access the service.asmx file from a browser (I was able to before the client requirement was activated), is that a sign that something is wrong? Or just normal?

我已经在我的PC上安装了证书,使用Java keytool安装到了certca,然后我安装到了iPad上 - 在这些地方我都无法从浏览器访问service.asmx文件(我能够在客户要求被激活之前),是否表明出现了问题?还是正常?

So now I am trying to get the app to connect. I have tried just connecting normally (from all locations) but it fails. I have also tried using the SecureSocket class in my code to set up a connection but it always fails with an IO Error (I am using AIR 21 so should be fine on iOS - isSupported returns true).

所以现在我想让应用程序连接。我尝试过正常连接(从所有位置),但它失败了。我也尝试在我的代码中使用SecureSocket类来建立连接,但它总是因IO错误而失败(我使用的是AIR 21,因此在iOS上应该没问题 - isSupported返回true)。

I have been told that C# has a method for finding a certificate from the local store and adding it to an HTTPrequest and that I need to find out how to do the equivalent for AS3/AIR/Flex. Is this possible? I have not been able to find a way.

有人告诉我,C#有一种从本地商店查找证书并将其添加到HTTPrequest的方法,我需要找到如何为AS3 / AIR / Flex执行等效操作。这可能吗?我找不到办法。

Any thoughts/input would be hugely appreciated. Thank you.

任何想法/意见将非常感激。谢谢。

Jamie

1 个解决方案

NSAppTransportSecurity
    
    NSExceptionDomains
        
        yourdomain.com
            
                NSIncludesSubdomains
                         
                NSThirdPartyExceptionRequiresForwardSecrecy