> On Jun 26, 2016, at 11:30 PM, Gerriet M. Denkmann <gerr...@mdenkmann.de> > wrote: > > Could it, instead of getting the SecIdentityRef from the keychain, just use > MyServerCertificate.cer instead?
Nope. The server has to have a SecIdentityRef, because its side of the SSL handshake requires using the private key to sign data. > And then the client would compare the certificate it receives with > MyServerCertificate.cer and notice that these are different, thus closing the > connection. (Correct ?) If you’ve programmed the client to do that, yes. —Jens _______________________________________________ Cocoa-dev mailing list (Cocoa-dev@lists.apple.com) Please do not post admin requests or moderator comments to the list. Contact the moderators at cocoa-dev-admins(at)lists.apple.com Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com