ad mTLS support for Android - #236
Conversation
|
I'd like to keep the |
|
@Maschga Yeah, that's probably true. I also don't really feel comfortable adding all the code to the app myself, since that's also may be a bit confusing. If I have time at some point, I might try to create a fork of |
|
I suggest you try it out locally with your fork first, and if everything works, a fork can be created at the evcc level. It would probably be best if you got the feature working on Android first and then added tests using Caddy. These tests can then also be used to test the feature on iOS. |
|
Since |
fixes #39 (#35)
Adds support for mTLS (Mutual TLS) client certificate authentication on Android. This allows users to connect to evcc instances that are secured behind a reverse proxy requiring client certificates.
client-cert) to store and provide PKCS#12 client certificates (IMHO using android system keystore would be more complicated and not ideal regarding an future iOS implementation) .react-native-webviewon Android to interceptonReceivedClientCertRequestand inject the stored certificate..p12/.pfxfile and provide its password.I think there's currently no other option than to patch
react-native-webview, since the maintainer there isn't currently planning to implement it as a feature and instead refers to this example: https://github.com/diebietse/mtls-android/tree/master/app/src/main/java/com/diebietse/mtlsandroidexample, which also helped me a bit with this PR (see react-native-webview/react-native-webview#2857)