> Quinn The Eskimo! <eski...@apple.com> 於 2015年12月2日 下午6:18 寫道:
> 
>> I’ve tried with no luck
> 
> What does "no luck" mean?  Were you unable to create the trust object?  Or 
> did its evaluation fail?

I mean the evaluation fail.
> 
>> here’s my code, any suggestion?
> 
> The first step is to /not/ ignore the errors you get back from Security 
> framework rotuines like SecTrustCreateWithCertificates and SecTrustEvaluate.
> 
> Next, if trust evaluation is failing, you can print the result of 
> SecTrustCopyProperties and SecTrustCopyResult to get an understanding as to 
> why it's failing.

After checked the result of SecTrustCopyProperties, it shows Root certificate 
is not trusted. Since it is a self-signed certificate, how can I change the 
SecPolicy’s ValidRoot to false in order to bypass the checking? or I need to 
use other approach?

Another issue is when debug the network extension, I can’t print message out to 
the Xcode console, the only way I can do is setup breakpoint and check the 
value of variables manually. any other good way to debug network extension code?


cheers,
Kevin

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list      (Macnetworkprog@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/macnetworkprog/archive%40mail-archive.com

This email sent to arch...@mail-archive.com

Reply via email to