Skip to content

Certificate Pinning #218

@kingmatusevich

Description

@kingmatusevich

The SDKs should be compatible with pinned certificates for connecting to the Parse Servers, allowing for faster, safer deployment, particularly in small or internal deployments.

Activity

davidtavarez

davidtavarez commented on Nov 28, 2017

@davidtavarez

@montymxb @kingmatusevich is this issue closed?

montymxb

montymxb commented on Nov 29, 2017

@montymxb
Contributor

@davidtavarez Nope, it is still open and still something we are happy to implement in the future; but no work has started on this yet.

dplewis

dplewis commented on Jul 19, 2019

@dplewis
Member

Doesn't ParseClient::setCAFile already kinda does this? I can add a valid test for this.

What other types of SSL/TLS check would be needed? (That would support both cURL and stream_context).

dplewis

dplewis commented on May 11, 2023

@dplewis
Member

This can be achieved by creating your own HTTP client and pass in your SSL/TLS options

ParseClient::setHttpClient(new CustomHTTPClient());

https://github.com/parse-community/parse-php-sdk#http-clients

We could add ParseClient::setOptions() to support certificate pinning out of the box for both cURL and stream clients. This would also support any of the many other features for cURL and stream context.

dplewis

dplewis commented on May 13, 2023

@dplewis
Member

For those interested I added an example for public key pinning, cert fingerprint checking, peer verification in PHP and JavaScript (not really a thing in javascript but useful) using self signed certs #513

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Participants

      @davidtavarez@kingmatusevich@montymxb@mtrezza@dplewis

      Issue actions

        Certificate Pinning · Issue #218 · parse-community/parse-php-sdk