calling SSL REST services from expo based mobile app

Expo SDK
1

Hi All,

We have REST services hosted with SSL (DigiCert Certificate).
The Expo developers not able to invoke these services.
SSL services not supported in Expo?

Regards,

2

You should definitely be able to make use of a REST API hosted on a web server with an SSL certificate. Obviously if you were using a self-signed certificate or something there would be problems. Also, you will likely need to make sure you are correctly dealing with CORS.

You will need to provide more info than “not able to invoke these services” before we can provide more useful advice. Maybe try putting a proxy server between the device/simulator/emulator and the web server to see what’s going wrong.

3

Thanks Vodin.
We are not using self signed certificate.
We are using wildcard certificate from digicert.

4

Our mobile team developed mobile app using react native (expo platform), this mobile app is accessing Java REST APIs deployed on Weblogic server,

Client asked to apply client certificates on Weblogic to secure the apis, and we applied the certificates(DigiCert certificate), and when we open the APIs from browser we got a valid certificates and its working fine.

But when the mobile application trying to access the REST apis its failed with:

java.security.cert.certpathvalidatorexception trust anchor for certification path not found

We tried to access the APIs from postman, but we got same issue, but when we attach the certificate on postman its working fine, but the problem is with expo platform you cannot attach the certificate. mobile team tried to attach the certificate but this did not work.

Note: mobile team tried to access another APIs deployed on Sharepoint (IIS). same certificate type is applied there and it accessed successfully without attaching the certificate.

Note: We applied private and public certificate. but its the same with expo mobile platform.

Note: We tried to build app sample using native android and another sample using flutter. and both are working with attaching the certificate on the sample.

We need a solution to access the APIs without attaching the certificate because of expo platform limitation

6

[matson51] : This replay means you don’t have answer for this question

7

It looks like React Native (and therefore Expo) does not have built-in support for SSL client certificates. There is a feature request here: Support TLS client certificate authentication in fetch API implementation | Voters | React Native

In order to implement this, I think you would need to eject to the bare workflow, then write some native code to do your HTTPS requests using client certificates and call into that native code from your JavaScript code. I think that’s what is being suggested in this comment.

Also, matson51 seems to be a bot.

8

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.