Uploaded image for project: 'AeroGear'
  1. AeroGear
  2. AEROGEAR-2221

Update the mobile-cli to generate the hash value of the certificates as part of mobile-services.json file.

    XMLWordPrintable

Details

    • Task
    • Resolution: Done
    • Major
    • None
    • None
    • None

    Description

      Why

      We need the certificate hash in order to perform certificate pinning

      What

      When using the mobile-cli to generate the mobile-services.json file, it should check the certificate of each services that use https and generate the hash value automatically.

      Suggested approach

      Aiden has done a Poc: https://github.com/aerogear/mobile-cli/pull/71.

      In order to make it easier to get all the hash values of the certs, we should consider group all the hashes together into one object, something like this:

      ```
      {
      "https": [

      { "host": "", "certificateHash": "" }

      ]
      }
      ```

      Trello link

      Attachments

        Issue Links

          Activity

            People

              akeating-1 Aiden Keating (Inactive)
              lfitzger@redhat.com Laura Fitzgerald (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: