Turn off or bypass SSL Certificate Verification in Swift iOS

Question

I have my server certificates expired.

I want to bypass or turn off certs verification from my swift iOS app so i can test app features.

I need this just for testing, not for production of live app. so none concerned for security.

How can i achieve this in Swift iOS.

I am using Alamofire library for network requests.

How to achieve this.

for urlsession answer, [link] https://stackoverflow.com/a/59484010/6844940 — Vivek, Jul 12 '22 at 10:07

score 2 · Answer 1 · answered Feb 04 '20 at 10:02

2

Put the below cod into info.plist file.

<key>NSAppTransportSecurity</key>
<dict>
<key>NSAllowsArbitraryLoads</key>
<true/>
</dict>

answered Feb 04 '20 at 10:02

sanjeev

150
3

thanks @sanjeev. But this is already in my info.plist. It's not helping, i have tried again. – Sajid Zeb Feb 04 '20 at 10:11
1

This is actually to allow app to call non-https services not to ignore self signed certificates. – BlaShadow Jun 19 '23 at 01:00
This doesn't work for signed certs from a generated CA either. – Joe Jul 22 '23 at 15:13

Serhii Didanov · Answer 2 · 2020-02-04T10:30:52.660

0

Try something like:

import Foundation
import Alamofire

class NetworkManager {

    static let shared = NetworkManager()

    var unsecure: SessionManager!
    var serverTrustPolicies: [String: ServerTrustPolicy] = ["unsecureSslHostname":.disableEvaluation]

    private init () {
        self.unsecure = { () -> SessionManager in
            let configuration = URLSessionConfiguration.default
            configuration.httpAdditionalHeaders = SessionManager.defaultHTTPHeaders
            return SessionManager(
                configuration: configuration,
                serverTrustPolicyManager: ServerTrustPolicyManager(policies: self.serverTrustPolicies)
            )
        }()
    }
}

After that NetworkManager.shared.unsecure will return Alamofire SessionManager which can be used for send request to hosts with unsecured SSL certificates.

edited Feb 04 '20 at 10:30

answered Feb 04 '20 at 10:23

Serhii Didanov

2,200
1
16
31

Thanks @Sergey Di for this. I am getting "Use of undeclared type" for "SessionManager" and "ServerTrustPolicy" using this code. I am using "Alamofire/Alamofire" "5.0.0-beta.2" through Carthage. – Sajid Zeb Feb 04 '20 at 10:58
@SajidZeb do you try to use 4.x version? – Serhii Didanov Feb 04 '20 at 11:21
@SajidZeb Are you sure you don't forgot to add import Alamofire? – Serhii Didanov Feb 04 '20 at 11:26
no i don't want to degrade version. i am using 5. Also yes this line is at top. import Alamofire – Sajid Zeb Feb 04 '20 at 11:28
@SajidZeb I think issue happens because of Alamofire 5. SessionManager was renamed to Session with some other changes. Sorry I can't test on Alamofire 5 now. – Serhii Didanov Feb 04 '20 at 14:50

score 0 · Answer 3 · answered May 08 '22 at 12:40

use this for your session configuration:

let serverTrustPolicies: [String: ServerTrustPolicy] = ["untrustedServer.com": .disableEvaluation]
let servertrustManager = ServerTrustPolicyManager(policies: serverTrustPolicies)
sessionManager = SessionManager(configuration: configuration,serverTrustPolicyManager: servertrustManager)

Turn off or bypass SSL Certificate Verification in Swift iOS

3 Answers3