Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Read SSL Certificate Details on WP8

I want to read certificate details (e.g. expiration date or CN) for security reasons.

Usually there are some properties in network classes available, that allow to check the certificate. This is missing in WP8 implementations.

Also I tried to create an SslStream but also there is no way to get any certificate detail like the RemoteCertificate on .net 4.5.

var sslStream = new SslStream(new NetworkStream(e.ConnectSocket));

The SslStream is missing everything relating security. So it looks like also BountyCastle and other libraries cannot be able to get the certificate, because the underlying framework doesn't support it.

So my questions are:

  1. Can I read the CN or other Certificate details on WP8 using other approaches.?
  2. If not, how can you create then seriously secure apps (line banking) on WP8 using techniques like SSL Pinning or client side certificate validation and is there any reason why this is not supported in WP8?

Regards Holger

like image 486
dixus Avatar asked Jul 19 '13 08:07

dixus


1 Answers

I issued a user voice request to Microsoft .NET team asking them to provide a solution for reading server SSL certificate details from portable class libraries (targeting also WP8). You can vote it here: http://visualstudio.uservoice.com/forums/121579-visual-studio/suggestions/4784983-support-server-ssl-certificate-chain-inspection-in

like image 153
lirkki Avatar answered Oct 04 '22 06:10

lirkki