SSL "untrusted" certificates

No new information on this. 

Rob

Bump. I very much need to be able to work with servers containing self-signed certificates.

Do you guys have an ETA for completion?

Thanks

BUMP

Any news on this?

No new information on this. 

Rob

A big bump. Same here. Would be good to have a boolean to accept un-trusted / self-signed SSL certs. 

You can generate a free SSL certificate from http://startssl.com, and it’s fairly simple.  There is a tutorial outling the process of getting the cert in the Coronium Cloud docs.

http://docs.coronium.io/ssl-https/

It works fine with Corona SDK.

Cheers.

It is not an option.

As I wrote earlier - we are developing application for controlling some server software, that software provides API through HTTPS requests.

Application users should be able to use their _own deployed server instances_, and, usually most of them do not buy SSL certificates for it and uses self-signed.

So, I can’t force users to buy/generate certificates to use our software.

 

I do not understand - is it so problem to add option like “ignore untrusted certificates”?

This thread has been going on for a year (since September 2013). It really would be useful to have an estimated completion date…

Bump. I very much need to be able to work with servers containing self-signed certificates.

Do you guys have an ETA for completion?

Thanks

Can’t you do your own SSL handshake?

http://notebook.kulchenko.com/programming/https-ssl-calls-with-lua-and-luasec

https://github.com/coronalabs/plugins-sample-openssl/blob/master/luasec/main.lua

A big bump. Same here. Would be good to have a boolean to accept un-trusted / self-signed SSL certs. 

You can generate a free SSL certificate from http://startssl.com, and it’s fairly simple.  There is a tutorial outling the process of getting the cert in the Coronium Cloud docs.

http://docs.coronium.io/ssl-https/

It works fine with Corona SDK.

Cheers.

It is not an option.

As I wrote earlier - we are developing application for controlling some server software, that software provides API through HTTPS requests.

Application users should be able to use their _own deployed server instances_, and, usually most of them do not buy SSL certificates for it and uses self-signed.

So, I can’t force users to buy/generate certificates to use our software.

 

I do not understand - is it so problem to add option like “ignore untrusted certificates”?

This thread has been going on for a year (since September 2013). It really would be useful to have an estimated completion date…

Can’t you do your own SSL handshake?

http://notebook.kulchenko.com/programming/https-ssl-calls-with-lua-and-luasec

https://github.com/coronalabs/plugins-sample-openssl/blob/master/luasec/main.lua