SSL 证书放在哪里
我正在尝试加密 iPhone 游戏的流量，但遇到了问题。我有一个 keystore.p12 文件，我想对其进行设置，以便私钥位于服务器上，公钥位于客户端上，因此我从 .p12 文件中导出 .cer，但我不确定是什么设置套接字时放置 SecIdentityRef。
我想确认一下。我不想将密钥库 .p12 文件放在客户端上，可以吗？这难道不会违背使用 SSL 的初衷吗？
I'm attempting to encrypt the traffic for my iphone game, and I'm running into a problem. I have a keystore.p12 file, and I want to set it up so the private key is on the server with the public key on the client, so I export the .cer from the .p12 file, but I'm not sure what to put for SecIdentityRef when setting up the sockets.
I want to confirm. I don't want to put the keystore .p12 file on the client do I? Wouldn't that defeat the purpose of using SSL in the first place?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
使用客户端 ssl 是最强大的单一身份验证形式之一。不幸的是，你想要完成的事情基本上是不可能的。 iPhone 用户可以越狱设备，并比您拥有对设备更多的控制权。
真正保护该系统安全的唯一方法是重新设计您的应用程序，并且仅公开可供攻击者安全使用的服务器端功能。如果这是不可能的，那么您最好的希望就是混淆并希望没有人花时间查看您的应用程序。这是错误的方法，因为它违反了通过模糊实现安全性。
Using client side-ssl is one of the strongest single forms of authentication. Unfortunately, what you are trying to accomplish is fundamentally impossible. A iPhone user can jailbreak the device and have more control over the device than you do.
The only method of truly secure this system is to redesign your application and only expose server-side functionally that safe for an attacker to use. If this is impossible then your best hope is obfuscation and hoping that no one spends the time to look at your application. This is the wrong approach as it violates Security Through Obscurity.
您确实确定要使用客户端 SSL 证书吗？仅在服务器上使用官方购买的 SSL 证书或禁用设备上的官方证书检查还不够吗？
Are you really sure you want to use client side SSL certificates? Is it not enough to simply use either an official purchased SSL certificate on your server or disable the check for official certificates on the device?