Mixing
Figuring out to set up HTTPS
I'm a relatively new programmer to backend security so very much in the dark about how to set up HTTPS. I'm currently writing an IOS app that is sending http requests to my public EC2 backend domain, however I'm trying to transition this to HTTPS. Right now the backend is running on the developmental Flask server using HTTPS with a self signed certificate. However the problem is that on the IOS app side, it rejects this as invalid so I'm unable to test HTTPS dependant features. I tried to use the domain exception with the infoplist and ip.xip.io but it still complains that someone could be pretending to be this address. Could someone list in a very systematic way how I should approach building this out,i.e are there any free CA's, do I need a cert from a CA, and how to go about properly connecting the app and backend with HTTPS using my ec2 public ip.
ios flask amazon-ec2 https alamofire
edited Jan 2 at 5:34
rmaddy
245k27324388
asked Jan 2 at 5:14
Arjun MishraArjun Mishra
23
add a comment |
I'm a relatively new programmer to backend security so very much in the dark about how to set up HTTPS. I'm currently writing an IOS app that is sending http requests to my public EC2 backend domain, however I'm trying to transition this to HTTPS. Right now the backend is running on the developmental Flask server using HTTPS with a self signed certificate. However the problem is that on the IOS app side, it rejects this as invalid so I'm unable to test HTTPS dependant features. I tried to use the domain exception with the infoplist and ip.xip.io but it still complains that someone could be pretending to be this address. Could someone list in a very systematic way how I should approach building this out,i.e are there any free CA's, do I need a cert from a CA, and how to go about properly connecting the app and backend with HTTPS using my ec2 public ip.
ios flask amazon-ec2 https alamofire
edited Jan 2 at 5:34
rmaddy
245k27324388
asked Jan 2 at 5:14
Arjun MishraArjun Mishra
23
Hope these help: stackoverflow.com/questions/34073822/… medium.com/swift-programming/…
– prekshya basnet
Jan 2 at 5:20
add a comment |
I'm a relatively new programmer to backend security so very much in the dark about how to set up HTTPS. I'm currently writing an IOS app that is sending http requests to my public EC2 backend domain, however I'm trying to transition this to HTTPS. Right now the backend is running on the developmental Flask server using HTTPS with a self signed certificate. However the problem is that on the IOS app side, it rejects this as invalid so I'm unable to test HTTPS dependant features. I tried to use the domain exception with the infoplist and ip.xip.io but it still complains that someone could be pretending to be this address. Could someone list in a very systematic way how I should approach building this out,i.e are there any free CA's, do I need a cert from a CA, and how to go about properly connecting the app and backend with HTTPS using my ec2 public ip.
ios flask amazon-ec2 https alamofire
edited Jan 2 at 5:34
rmaddy
245k27324388
asked Jan 2 at 5:14
Arjun MishraArjun Mishra
23
I'm a relatively new programmer to backend security so very much in the dark about how to set up HTTPS. I'm currently writing an IOS app that is sending http requests to my public EC2 backend domain, however I'm trying to transition this to HTTPS. Right now the backend is running on the developmental Flask server using HTTPS with a self signed certificate. However the problem is that on the IOS app side, it rejects this as invalid so I'm unable to test HTTPS dependant features. I tried to use the domain exception with the infoplist and ip.xip.io but it still complains that someone could be pretending to be this address. Could someone list in a very systematic way how I should approach building this out,i.e are there any free CA's, do I need a cert from a CA, and how to go about properly connecting the app and backend with HTTPS using my ec2 public ip.
ios flask amazon-ec2 https alamofire
ios flask amazon-ec2 https alamofire
edited Jan 2 at 5:34
rmaddy
245k27324388
asked Jan 2 at 5:14
Arjun MishraArjun Mishra
23
edited Jan 2 at 5:34
rmaddy
245k27324388
asked Jan 2 at 5:14
Arjun MishraArjun Mishra
23
edited Jan 2 at 5:34
rmaddy
245k27324388
edited Jan 2 at 5:34
rmaddy
245k27324388
edited Jan 2 at 5:34
rmaddy
245k27324388
245k27324388
asked Jan 2 at 5:14
Arjun MishraArjun Mishra
23
asked Jan 2 at 5:14
Arjun MishraArjun Mishra
23
asked Jan 2 at 5:14
Arjun MishraArjun Mishra
23
23
Hope these help: stackoverflow.com/questions/34073822/… medium.com/swift-programming/…
– prekshya basnet
Jan 2 at 5:20
add a comment |
Hope these help: stackoverflow.com/questions/34073822/… medium.com/swift-programming/…
– prekshya basnet
Jan 2 at 5:20
Hope these help: stackoverflow.com/questions/34073822/… medium.com/swift-programming/…
– prekshya basnet
Jan 2 at 5:20
Hope these help: stackoverflow.com/questions/34073822/… medium.com/swift-programming/…
– prekshya basnet
Jan 2 at 5:20
add a comment |
2 Answers
2
active
oldest
votes
Perhaps the iOS app will authenticate properly using a free community certificate. Investigate free certificate authorities, like letsencrypt. There are several. These work like the commercial CAs such as GoDaddy.
answered Jan 2 at 5:22
MophillyMophilly
1208
add a comment |
Actually the easiest solution was to just use Ngrok
answered Jan 3 at 17:22
Arjun MishraArjun Mishra
23
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f54001522%2ffiguring-out-to-set-up-https%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
Perhaps the iOS app will authenticate properly using a free community certificate. Investigate free certificate authorities, like letsencrypt. There are several. These work like the commercial CAs such as GoDaddy.
answered Jan 2 at 5:22
MophillyMophilly
1208
add a comment |
Perhaps the iOS app will authenticate properly using a free community certificate. Investigate free certificate authorities, like letsencrypt. There are several. These work like the commercial CAs such as GoDaddy.
answered Jan 2 at 5:22
MophillyMophilly
1208
add a comment |
Perhaps the iOS app will authenticate properly using a free community certificate. Investigate free certificate authorities, like letsencrypt. There are several. These work like the commercial CAs such as GoDaddy.
answered Jan 2 at 5:22
MophillyMophilly
1208
Perhaps the iOS app will authenticate properly using a free community certificate. Investigate free certificate authorities, like letsencrypt. There are several. These work like the commercial CAs such as GoDaddy.
answered Jan 2 at 5:22
MophillyMophilly
1208
answered Jan 2 at 5:22
MophillyMophilly
1208
answered Jan 2 at 5:22
MophillyMophilly
1208
answered Jan 2 at 5:22
MophillyMophilly
1208
1208
add a comment |
add a comment |
Actually the easiest solution was to just use Ngrok
answered Jan 3 at 17:22
Arjun MishraArjun Mishra
23
add a comment |
Actually the easiest solution was to just use Ngrok
answered Jan 3 at 17:22
Arjun MishraArjun Mishra
23
add a comment |
Actually the easiest solution was to just use Ngrok
answered Jan 3 at 17:22
Arjun MishraArjun Mishra
23
Actually the easiest solution was to just use Ngrok
answered Jan 3 at 17:22
Arjun MishraArjun Mishra
23
answered Jan 3 at 17:22
Arjun MishraArjun Mishra
23
answered Jan 3 at 17:22
Arjun MishraArjun Mishra
23
answered Jan 3 at 17:22
Arjun MishraArjun Mishra
23
23
add a comment |
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f54001522%2ffiguring-out-to-set-up-https%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Hope these help: stackoverflow.com/questions/34073822/… medium.com/swift-programming/…
– prekshya basnet
Jan 2 at 5:20