Myujth

I need to reach an API which has a invalid certificate and a basic Auth. As I searched, I needed to write custom SessionManager and add an value to plist file. After days of search and lots of posts, I can't still reach the API.

struct CustomManagerClass{

static let instance = CustomManagerClass()
var sessionManager : SessionManager = 

 let serverTrustPolicies: [String: ServerTrustPolicy] = [
 "baseurl.com:8443": .disableEvaluation
 ]

 // Create custom manager
 let configuration = URLSessionConfiguration.default
 configuration.httpAdditionalHeaders = Alamofire.SessionManager.defaultHTTPHeaders
 let manager = Alamofire.SessionManager(
 configuration: configuration,
 serverTrustPolicyManager: ServerTrustPolicyManager(policies: serverTrustPolicies)
 )

 return manager
()

Plist File:

<key>NSAppTransportSecurity</key>
<dict>
 <key>NSAllowsArbitraryLoads</key>
 <true/>
 <key>baseurl.com</key>
 <dict>
 <key>NSTemporaryExceptionMinimumTLSVersion</key>
 <string>TLSv1.2</string>
 <key>NSIncludesSubdomains</key>
 <true/>
 <key>NSExceptionRequiresForwardSecrecy</key>
 <false/>
 <key>NSExceptionAllowsInsecureHTTPLoads</key>
 <true/>
 </dict>
</dict>

How I call it:

CustomManagerClass.instance.sessionManager.request(route).responseJSON(completionHandler: (result) in
 completion(result)
 ) //Route in here is a ServiceConfiguration class which defines http method, parameters and basic auth.

It still returns;

Task <4CE5991B-2650-471C-AB77-69D54B8E36F3>.<1> finished with error - code: -1202
The certificate for this server is invalid. You might be connecting to a server that is pretending to be “baseurl.com” which could put your confidential information at risk.

Posts I got help:
Certificate Invalid Issue with Alamofire 4.0

How to use Alamofires ServerTrustPolicy.disableEvaluation in swift 3

EDIT: I add below code to trust certificate. Now It returns HTTP 500

 CustomManagerClass.instance.sessionManager.delegate.sessionDidReceiveChallenge = session, challenge in
 var disposition: URLSession.AuthChallengeDisposition = .performDefaultHandling
 var credential: URLCredential?

 print("received challenge")

 if challenge.protectionSpace.authenticationMethod == NSURLAuthenticationMethodServerTrust 
 disposition = URLSession.AuthChallengeDisposition.useCredential
 credential = URLCredential(trust: challenge.protectionSpace.serverTrust!)
 else 
 if challenge.previousFailureCount > 0 
 disposition = .cancelAuthenticationChallenge
 else 
 credential = CustomManagerClass.instance.sessionManager.session.configuration.urlCredentialStorage?.defaultCredential(for: challenge.protectionSpace)

 if credential != nil 
 disposition = .useCredential
 
 
 

 return (disposition, credential)
 

I'd suggest to add this handler for the sessionDidReceiveChallenge event on the SessionManager delegate.

let challengeHandler: ((URLSession, URLAuthenticationChallenge) -> (URLSession.AuthChallengeDisposition, URLCredential?))? = result, challenge in
 return (.useCredential, URLCredential(trust: challenge.protectionSpace.serverTrust!))

And then assign the closure when you're initializing the manager object in this way.

manager.delegate.sessionDidReceiveChallenge = challengeHandler

Also, the serverTrustPolicies can be empty since the handler is going to ignore all the trust challenges it will receive.