MYNetwork icon indicating copy to clipboard operation
MYNetwork copied to clipboard

_kCFStreamPropertySSLClientSideAuthentication causes rejection for MAS app

Open ghmrs356 opened this issue 10 years ago • 3 comments

The declaration of _kCFStreamPropertySSLClientSideAuthentication in TCPStream.m causes a review rejection for my Mac app. Has not been a problem for at least 5 months, but now it is. Grrrr

#if !TARGET_OS_IPHONE
// You can't do client-side SSL auth using CFStream without this constant,
// but it was accidentally not declared in a public header.
// Unfortunately you can't use this on iPhone without Apple rejecting your app
// for using "private API". :-(
extern const CFStringRef _kCFStreamPropertySSLClientSideAuthentication; // in CFNetwork
#endif

ghmrs356 avatar Apr 10 '14 06:04 ghmrs356

Sorry :cry: I haven't tried doing client-side cert stuff in several years (though I may need to soon), so I'm not sure if there's newer public API that makes this hack unnecessary. If you find out, I'd love to know. (Got any spare DTS request tickets?)

snej avatar Apr 10 '14 14:04 snej

You could also try asking on Apple's macnetworkprog mailing list. DTS guru Quinn is very responsive to questions there.

snej avatar Apr 10 '14 14:04 snej

I don't use SSL, so just removing it works for me.

ghmrs356 avatar Apr 10 '14 17:04 ghmrs356