support HTTPS with self signed certificate

[imhoffd]

With the --ssl flag now an experimental feature of the Ionic CLI (ionic-team/ionic-cli#3305), devs are able to use livereload using an HTTPS server. This is mostly to test/develop features involving geolocation with livereload.

Right now, livereload with --ssl works on Android, but iOS doesn't accept the self-signed certificate, failing to load with the following error:

2018-11-15 15:32:09.330613-0600 MyApp[12366:179859] Failed to load webpage with error: The certificate for this server is invalid. You might be connecting to a server that is pretending to be "10.0.0.123" which could put your confidential information at risk.

[pliablepixels]

I'd like to voice my strong support for this. I have over 20,000 users for my mobile app and they all use self-signed certificates - most of them run VPN clients on their phone, and the server in question, ZoneMinder installs by default using self-signed certs. A lot of these users don't use (or want) DNS names so free solutions like LetsEncrypt don't apply.

I have currently forked this repo to add that support but would love it to be integrated. This is not just some development use-case for live-reload. For me, it is a primary deployment use.

[menglol]

hello , the same problem .have you resolved it ?

[pliablepixels]

@menglol Yes, someone else (Peter Stegnar) had implemented the fix and I just applied it. The forked repo is here. Specifically, this is the change that needs to be applied.

[menglol]

@pliablepixels thanks very much,and i've tried ,changed the CDVWKWebViewEngine.m the same with your file, but still not work ,so any other file need modify? like *.p-infolist or config.xml?

[pliablepixels]

@menglol yes, you also need the following:

• Add NSAllowsArbitraryLoads to your plist. I do it this way using this plugin, but cordova now has native support for custom configs - you may want to use its inbuilt feature. (For some reason, the native config-file approach was not working, so I went back to this plugin and did not investigate)
• You also need to provide an explanation to Apple in the app review notes to let them know why you need to enable this flag as per their documentation, a reason is required.

In my case,I just told them my app works with 3rd party self-installed servers, therefore no common domain or DNS , there is no central cloud version and it is impossible for me to dictate terms to them. Also told them the server in question is installed by default with self signed certificates. They had no problem in accepting it.

[menglol]

@pliablepixels thanks very much and appreciate your great help ,and i will check it as your say. best regards and merry chrismas

resolved,thank again for your help!

[ghenry22]

@pliablepixels have you managed to resolve the same issue on Android? Also one further question have you looked at all at playing audio/video with self signed ssl? The fix linked resolves the issue for general XHR calls and loading calls within the webview but the native avplayer avaudioplayer etc seem to have the same block built into them and I am struggling to find a way to bypass it.

[pliablepixels]

@ghenry22 no, I gave up on trying to make WkWebView work on Android for exactly the same reasons you sight (my install base uses self signed certificates and playing videos would not work in Android). I now have a build script that removes WKWebView in Android and puts it back for iOS. If you figure it out, please let me know.

[iget-master]

Hi guys,

Even on Android, the self signed certificate fails. Accessing the address from chrome, I have the option to "proceed anyway". But on webview (cordova) it doesn't proceed and doesn't show the option to proceed. I'm on Android 8. when not using SSL, it don't load saying that ssl is required :-(

[pliablepixels]

@iget-master if you read the comments above, there are suggested workarounds.

[iget-master]

@pliablepixels sorry, my problem is not with iOS, actually is with Android, the workarounds doesn't solve it.

[iget-master]

To help who is locked out with same problem then me:

Ionic cli have a command ssl that allows to generate a certificate:

$ ionic ssl g

This will write the certificates on .ionic/ssl directory and use from there.

Now you can go to your android device and trust the certificate (on settings, location depends on what flavor)