IBM Support

PI69917: CERTIFICATE PINNING NOT ALWAYS ENFORCED IN IOS

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as documentation error.

Error description

  • If a request is made to a server using a non-mfp API, then the
    certificate may be cached and certificate pinning won't work as
    expected.
    

Local fix

  • Avoid any request that are not made with MFP APIs (this includes
    importing external resources). Also, make sure the pinning
    happens before any request.
    

Problem summary

  • ****************************************************************
    

Problem conclusion

  • Make sure to only use MobileFirst Foundation APIs for allcommuni
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI69917

  • Reported component name

    MOBILE1ST PLATF

  • Reported component ID

    5725I4301

  • Reported release

    710

  • Status

    CLOSED DOC

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-09-29

  • Closed date

    2016-10-06

  • Last modified date

    2016-10-06

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSZH4A","label":"IBM Worklight"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"710","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
06 October 2016