diff options
| author | Andrej Mihajlov <and@mullvad.net> | 2021-05-13 11:01:04 +0200 |
|---|---|---|
| committer | Andrej Mihajlov <and@mullvad.net> | 2021-05-18 10:51:40 +0200 |
| commit | 1364ed1ea6b6897509e7f9ae792fbcf8312f141f (patch) | |
| tree | f3406a8f60a0dbdabc448c9b3b2ca769c1bf9bfc /ios/BuildInstructions.md | |
| parent | 5bdce484c807042d1319ca11b123c220795e134c (diff) | |
| download | mullvadvpn-1364ed1ea6b6897509e7f9ae792fbcf8312f141f.tar.xz mullvadvpn-1364ed1ea6b6897509e7f9ae792fbcf8312f141f.zip | |
Add SSL pinning
Diffstat (limited to 'ios/BuildInstructions.md')
| -rw-r--r-- | ios/BuildInstructions.md | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/ios/BuildInstructions.md b/ios/BuildInstructions.md index 13f84867ce..4c73601ee3 100644 --- a/ios/BuildInstructions.md +++ b/ios/BuildInstructions.md @@ -173,3 +173,12 @@ where `<KEYCHAIN>` is the name of the target Keychain where the signing credenti This guide does not use a separate Keychain store, so use `login.keychain-db` then. Reference: https://docs.travis-ci.com/user/common-build-problems/#mac-macos-sierra-1012-code-signing-errors + +# SSL pinning + +The iOS app utilizes SSL pinning. Root certificates can be updated by using the source certificates shipped along with `mullvad-rpc`: + +``` +openssl x509 -in ../mullvad-rpc/new_le_root_cert.pem -outform der -out Assets/new_le_root_cert.cer +openssl x509 -in ../mullvad-rpc/old_le_root_cert.pem -outform der -out Assets/old_le_root_cert.cer +``` |