GCDAsyncSocket Client Public Key

Question

I made a simple TLS Server with GCDAsyncSocket and want to get the clients public key. I tried using this:

- (void)socket:(GCDAsyncSocket *)sock didReadData:(NSData *)data withTag:(long)tag
{
    SSLContextRef ref = [sock sslContext];
    SecTrustRef trust;
    SSLCopyPeerTrust(ref, &trust);

    SecKeyRef key = SecTrustCopyPublicKey(trust);
    NSLog(@"%@",key);
}

but i get a exc_bad_access in the SecTrustCopyPublicKey method. How can i get the public key as a NSString/NSData?

score 0 · Answer 1 · answered Dec 02 '14 at 11:44

Are you sure there's an SSL connection? Does your didSecure delegate method invoked?
Check your trust reference is not NULL after the SSLCopyPeerTrust function performed.
There's a discussion about the SecTrustCopyPublicKey on the Certificate, Key, and Trust Services Reference provided by the Apple.

You must call the SecTrustEvaluate function before calling this function. When you call this function, it attempts to return the public key of the leaf certificate, even if the trust evaluation was unsuccessful. Even if the trust evaluation was successful, this function might still return NULL—for example, if the leaf certificate’s key can’t be extracted for some reason.

GCDAsyncSocket Client Public Key

1 Answers1