Dynamic SSL Pinning
for iOS & macOS

Copy the config template

cp App/Config.xcconfig.example App/Config.xcconfig

Fill in your values

SLASH                    = /
SSL_PINNING_ENDPOINT     = https:$(SLASH)$(SLASH)ssl-pinning.example.com/api/v1/google.com.json
SSL_PINNING_SIGNING_KEY_B64 = <base64 of pub.pem>

Open and run

Open SslPinning.xcworkspace in Xcode, select the App scheme, and run on a simulator or device.

Add via Xcode

File → Add Package Dependencies and enter the repository URL, or add to your Package.swift:

dependencies: [
    .package(url: "https://github.com/ssl-pinning/apple-sdk.git", from: "1.1.0"),
],
targets: [
    .target(name: "YourTarget", dependencies: ["SslPinning"]),
]

Get the public signing key

Obtain the base64-encoded RSA public key from the server operator and store it in your app's configuration. For the sample app, put it in App/Config.xcconfig.

# encode pub.pem to a single-line base64 string
base64 -i pub.pem | tr -d '\n'

Initialize the SDK

import SslPinning

let config = SslPinningConfig(
    endpointUrl:    "https://ssl-pinning.example.com/api/v1/google.com.json",
    signingKeyBase64: "<base64 of pub.pem>"
)

let result = await SslPinningClient.initialize(config: config)

switch result {
case .success(let client):
    let pinnedSession = client.createPinnedSession() // use for all HTTPS requests
    let plainSession  = client.createPlainSession()  // use only for non-pinned requests
case .failure(let error):
    // initialization failed — do not proceed with network requests
}