Repository navigation
SSL Support #111
Description
Activity
👍 thanks for this report !
I am going to add OpenSSL soon.
Best
Super! Please let me know if you need QA/Testing
Thank you for all your hard work into this lib :)
Any update on this? This library is very easy to use, but I need to run my local server in https in production.
I love the library, but I need to use https in production (and we are moving to production very soon).
Please give an ETA on this.
Thanks!
Reacted by Kostia KimWe really want to use this in production but can't yet because https isn't there. Any update on when it might be ready?
Thanks!Hi all, any reason why you could not stick
nginxin front of your swifter servers?Reacted by Sean Robertson, Kekoa Vincent and Ilias Karim@julien-c: I have never used nginx, but adding proxies to the mix adds additional points of failure & maintenance, especially when you are dealing with ~100 tablets spread out over several locations with no IT staff on-site. Further, would not the traffic between the nginx server and the tablets still be over HTTP?
If you use nginx as a reverse proxy just for SSL termination, the maintenance overhead will be minimal. This is literally 4 lines of nginx configuration.
@julien-c: we would still need to install an nginx server at each location and then keep it updated and secure (sensitive data) and if it breaks it affects all tablets at the location. Further, the connection between the proxy and each tablet would still not be secure. In our scenario we are required to use SSL all the way to each tablet.
Hi all,
I was not able to find another Swift iOS web server and need only part of the traffic encrypted, so I used this this library: https://github.com/TakeScoop/SwiftyRSA to accomplish this. In brief, here is what I did:
- Created a key pair (RSA 2048 bit) on the Linux server that is interacting with the iPads
- Created a web service method to send the public key to the iPads and store it in the key chain.
- When sensitive data needs to be sent from the iPads to the server, I use the public key to encrypt it (so that it gets sent as a Base64 encoded encrypted data)
- The server decodes the Base64 and then uses the private key to decrypt the data
This seems to work very well and was easy to implement, so I figured I share it here in case somebody else is in a similar situation.
Note: RSA 2048 can only encrypt up to 245 bytes, so if you need to encrypt more data you can use the RSA keys to exchange a symmetric key to do the encryption of larger amount of data with (the same as TLS does).
Reacted by Damian Kołakowski and nibabSSL support would be great. Apple is making it harder and harder to do regular HTTP requests.
In my case I would like a few iPads to securely communicate with each other. Unfortunately iOS, nor any third party project that I could find, offers a server with HTTPS support.
No SSL support? what is this @glock45 1999? #justkidding
@krzyzanowskim There is some work here https://github.com/httpswift/swifter/tree/master/Sources/TLS 👍
Reacted by Laban1 and Justin Kaufmanreally need
Any plans to resume work on SSL support?
I'd also love this - the library looks and feels great but not having SSL is an issue :/
Yesterday I've open-sourced our web server Telegraph:
https://github.com/Building42/TelegraphIt has SSL support if you guys are still looking for it.
Reacted by mgfeldman, Damian Kołakowski, Nick Hayward and Justin KaufmanReacted by Robin Kochauf and Nick Haywardvery nice. thanks
No problem, if you have any feedback, let me know.
I should also mention https://github.com/BiAtoms/Http.swift which has SSL/TLS support.
@krzyzanowskim There is some work here https://github.com/httpswift/swifter/tree/master/Sources/TLS 👍
how to use this?
https://github.com/PerfectlySoft/Perfect allows the ability to start the server with a cert+key. Since HTTPS is now recommended everywhere, along with initiatives like https://letsencrypt.org, what do you think?