Procházet zdrojové kódy

Switched server trust host validation over to use SSL policy evaluation.

Christian Noon před 10 roky
rodič
revize
001c03dd55
1 změnil soubory, kde provedl 3 přidání a 3 odebrání
  1. 3 3
      Source/ServerTrustPolicy.swift

+ 3 - 3
Source/ServerTrustPolicy.swift

@@ -163,13 +163,13 @@ public enum ServerTrustPolicy {
 
         switch self {
         case let .PerformDefaultEvaluation(validateHost):
-            let policy = validateHost ? SecPolicyCreateSSL(true, host as CFString) : SecPolicyCreateBasicX509()
+            let policy = SecPolicyCreateSSL(true, validateHost ? host as CFString : nil)
             SecTrustSetPolicies(serverTrust, [policy])
 
             serverTrustIsValid = trustIsValid(serverTrust)
         case let .PinCertificates(pinnedCertificates, validateCertificateChain, validateHost):
             if validateCertificateChain {
-                let policy = validateHost ? SecPolicyCreateSSL(true, host as CFString) : SecPolicyCreateBasicX509()
+                let policy = SecPolicyCreateSSL(true, validateHost ? host as CFString : nil)
                 SecTrustSetPolicies(serverTrust, [policy])
 
                 SecTrustSetAnchorCertificates(serverTrust, pinnedCertificates)
@@ -200,7 +200,7 @@ public enum ServerTrustPolicy {
             var certificateChainEvaluationPassed = true
 
             if validateCertificateChain {
-                let policy = validateHost ? SecPolicyCreateSSL(true, host as CFString) : SecPolicyCreateBasicX509()
+                let policy = SecPolicyCreateSSL(true, validateHost ? host as CFString : nil)
                 SecTrustSetPolicies(serverTrust, [policy])
 
                 certificateChainEvaluationPassed = trustIsValid(serverTrust)