WSS/TLS websocket connection with Swift iOS

ios ssl swift websocket wss
Ch4vi picture Ch4vi · Dec 16, 2014 · Viewed 9.9k times · Source

SOLVED (following answer)

I am using Starscream library to create a safe websocket wss in the test server we have a self-signed certificate and I find it impossible to make the connection.

var socket = WebSocket(url: NSURL(scheme: "wss", host: "selfsignedserver.com", path: "/")!)

Log

2014-12-16 10:38:10.260 pruebasignin[2135:363455] CFNetwork SSLHandshake failed (-9807)
websocket is disconnected: The operation couldn’t be completed. (OSStatus error -9807.)

and when I try to connect to a server certificate valid also fails to connect SOLVED

var socket = WebSocket(url: NSURL(scheme: "wss", host: "production.com", path: "/")!)

Log

websocket is disconnected: Invalid HTTP upgrade

Answer

Bart van Kuik picture Bart van Kuik · Apr 19, 2016

Starscream now supports a flag so you can use self-signed certificates: https://github.com/daltoniam/Starscream/blob/bf0146db269249d200bb3bc4185cb5724cfa2ae8/README.md#self-signed-ssl-and-voip

(Edited for posterity; links to the README that was published as of April 2016)

Related questions

iOS certificate pinning with Swift and NSURLSession

Howto add certificate pinning to a NSURLSession in Swift? The OWASP website contains only an example for Objective-C and NSURLConnection.

Read More
How do I accept a self-signed SSL certificate using iOS 7's NSURLSession

I have the following code (swift implementation): func connection(connection: NSURLConnection, canAuthenticateAgainstProtectionSpace protectionSpace: NSURLProtectionSpace) -> Bool { return protectionSpace.authenticationMethod == NSURLAuthenticationMethodServerTrust } func connection(connection: NSURLConnection, didReceiveAuthenticationChallenge challenge: NSURLAuthenticationChallenge) { if challenge.protectionSpace.authenticationMethod == NSURLAuthenticationMethodServerTrust { if challenge.protectionSpace.host == "myDomain" { let credentials = …

Read More
Swift iOS Client Certificate Authentication

The web service I want to consume requires a client certificate. How can I send my certificate to it? To further elaborate I don't understand how to create the SecIdentityRef. In my NSURLConnection didReceiveAuthenticationChallenge I've got this conditional after ServerTrust: …

Read More