ktor-client-darwin/io.ktor.client.engine.darwin.certificates

Package-level declarations

Types

Link copied to clipboard
data class CertificatePinner(pinnedCertificates: Set<PinnedCertificate>, validateTrust: Boolean) : Function4<session: NSURLSession, task: NSURLSessionTask, challenge: NSURLAuthenticationChallenge, completionHandler: (NSURLSessionAuthChallengeDisposition, NSURLCredential?) -> Unit, Unit>

Constrains which certificates are trusted. Pinning certificates defends against attacks on certificate authorities. It also prevents connections through man-in-the-middle certificate authorities either known or unknown to the application's user. This class currently pins a certificate's Subject Public Key Info as described on Adam Langley's Weblog. Pins are either base64 SHA-256 hashes as in HTTP Public Key Pinning (HPKP) or SHA-1 base64 hashes as in Chromium's static certificates.

Link copied to clipboard
data class PinnedCertificate(pattern: String, val hashAlgorithm: String, val hash: String)

Represents a pinned certificate. Recommended using Builder.add to construct CertificatePinner