反应与Heroku的本地公共密钥固定
我阅读了有关SSL固定在React Native中的所有帖子和文章。 但是,所有这些都是关于我们生成证书的私有域。
但是,如果我的API托管在Heroku上,我该如何管理SSL固定?
理想情况下,我想将其固定在Hashed公钥上,因此在不必发布新版本的情况下管理旋转更容易。 但是我不知道如何与Heroku打交道,例如,我的API在MyApp.herokyapp.com上托管。
另外,如果我突然为Heroku添加SSL固定,它是否会影响当前移动版本中目前正在使用同一API的所有用户? 我不希望现有用户的所有请求失败。
任何帮助将不胜感激,谢谢!
I read all kind of posts and articles about ssl pinning in react native.
However all of those are about a privately owned domain for which we generate the certificate.
But if my API is hosted on Heroku, how can I manage SSL pinning?
Ideally, I would like to pin on hashed public key so it's easier to manage the rotation without having to release a new version.
But I have no clue how to deal with this with Heroku, with my api being hosted at myapp.herokyapp.com for example.
Also, if I suddenly add SSL pinning for my heroku, will it affect all my previous users in the current mobile version that are currently hitting on this same API?
I wouldn't want existing users to have all their requests failing.
Any help would be appreciated, thank you!
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论