Home of the Squeezebox™ & Transporter® network music players.
Results 1 to 9 of 9

Hybrid View

  1. #1
    Junior Member
    Join Date
    Oct 2014
    Location
    Minnesota, USA
    Posts
    28

    Apple will require HTTPS connections for iOS apps by the end of 2016

    Apple announced in June that they will require of all iOS app store to support HTTPS in 2017.

    Will this be a issue for 3rd party iOS that access LMS? As far as I know LMS does not support streaming over HTTPS.

    If this is a issue, how should we as 3rd party developers handle it?

    Thanks
    Louis
    SlimDevices SqueezeBox V3
    SqueezeBox Boom
    SqueezeBox Touch

  2. #2
    Senior Member pippin's Avatar
    Join Date
    Oct 2007
    Location
    Berlin
    Posts
    14,790
    I honestly don't know.
    Apple will allow exceptions on a case-by-case basis, I hope we qualify and can convince them about this, otherwise 3rd Party Apps will no longer see updates from that point on.
    It's not so much a question of streaming, the whole access to LMS is without http support and - what's more important - principally can't be (you can't have a certificate for a home server on a private IP address). So I really can't see them enforcing this. But hey, it's Apple, you never know...
    ---
    learn more about iPeng, the iPhone and iPad remote for the Squeezebox and
    Logitech UE Smart Radio as well as iPeng Party, the free Party-App,
    at penguinlovesmusic.com
    New: iPeng 9, the Universal App for iPhone, iPad and Apple Watch

  3. #3
    Senior Member
    Join Date
    Feb 2011
    Location
    Cheshire, UK
    Posts
    6,234
    You can install a cert on an internal server that is sufficient to be accepted by a modern browser.
    Free Certs are available from Let's Encrypt and there are scripts that will auto renew for you.
    That said I hope you are correct Pippin otherwise we may have a problem
    Jim
    https://jukeradio.double6.net


    VB2.4 storage QNAP TS419p (NFS)
    Living Room Joggler & Pi4/Khadas -> Onkyo TXNR686 -> Celestion F20s
    Office Joggler & Pi3 -> Denon RCD N8 -> Celestion F10s
    Dining Room SB Radio
    Bedroom (Bedside) Pi Zero+DAC ->ToppingTP21 ->AKG Headphones
    Bedroom (TV) & Bathroom SB Touch ->Denon AVR ->Mordaunt Short M10s + Kef ceiling speakers
    Guest Room Joggler > Topping Amp -> Wharfedale Modus Cubes

  4. #4
    Senior Member pippin's Avatar
    Join Date
    Oct 2007
    Location
    Berlin
    Posts
    14,790
    You can get a cert without a DNS address? At least you'd need a fixed ID or something, don't you?
    Logitech might want to prep up MySqueezebox.com, though, I think it still doesn't support SSL, doesn't it?
    ---
    learn more about iPeng, the iPhone and iPad remote for the Squeezebox and
    Logitech UE Smart Radio as well as iPeng Party, the free Party-App,
    at penguinlovesmusic.com
    New: iPeng 9, the Universal App for iPhone, iPad and Apple Watch

  5. #5
    Senior Member
    Join Date
    Feb 2011
    Location
    Cheshire, UK
    Posts
    6,234
    Quote Originally Posted by pippin View Post
    You can get a cert without a DNS address? At least you'd need a fixed ID or something, don't you?
    Logitech might want to prep up MySqueezebox.com, though, I think it still doesn't support SSL, doesn't it?
    Let me check. A colleague installed Let's Encrypt on an SME (Linux distribution) server recently but I am not sure whether it has a publicly accessible IP and associated DNS or not.
    Jim
    https://jukeradio.double6.net


    VB2.4 storage QNAP TS419p (NFS)
    Living Room Joggler & Pi4/Khadas -> Onkyo TXNR686 -> Celestion F20s
    Office Joggler & Pi3 -> Denon RCD N8 -> Celestion F10s
    Dining Room SB Radio
    Bedroom (Bedside) Pi Zero+DAC ->ToppingTP21 ->AKG Headphones
    Bedroom (TV) & Bathroom SB Touch ->Denon AVR ->Mordaunt Short M10s + Kef ceiling speakers
    Guest Room Joggler > Topping Amp -> Wharfedale Modus Cubes

  6. #6
    Junior Member
    Join Date
    Oct 2014
    Location
    Minnesota, USA
    Posts
    28
    After some more research, it appears we will be fine.

    https://developer.apple.com/library/...CocoaKeys.html

    Apple has introduced a new key "NSAllowsLocalNetworking to allow loading of local resources without disabling ATS for the rest of your app".

    An optional Boolean value that, when set to YES, removes App Transport Security protections for connections to unqualified domains and to .local domains, without disabling ATS for the rest of your app.
    If you set this keyĺs value to YES, then App Transport Security ignores the value of the NSAllowsArbitraryLoads key in iOS 10 and later and in macOS 10.12 and later. This behavior supports adoption of App Transport Security protections while allowing embedded browsers to continue working in iOS 9 and earlier and in OS X v10.11 and earlier. (To obtain this behavior, set the value of this key to YES and set the value of the NSAllowsArbitraryLoads key to YES as well.)
    Default value is NO.
    Available starting in iOS 10.0 and macOS 10.12.
    SlimDevices SqueezeBox V3
    SqueezeBox Boom
    SqueezeBox Touch

  7. #7
    Senior Member pippin's Avatar
    Join Date
    Oct 2007
    Location
    Berlin
    Posts
    14,790
    Not enough to be fine.
    Would still kill MySB and remote use
    ---
    learn more about iPeng, the iPhone and iPad remote for the Squeezebox and
    Logitech UE Smart Radio as well as iPeng Party, the free Party-App,
    at penguinlovesmusic.com
    New: iPeng 9, the Universal App for iPhone, iPad and Apple Watch

  8. #8
    Senior Member pippin's Avatar
    Join Date
    Oct 2007
    Location
    Berlin
    Posts
    14,790
    Also, this would kill all backwards compatibility for iOS 8/9
    ---
    learn more about iPeng, the iPhone and iPad remote for the Squeezebox and
    Logitech UE Smart Radio as well as iPeng Party, the free Party-App,
    at penguinlovesmusic.com
    New: iPeng 9, the Universal App for iPhone, iPad and Apple Watch

  9. #9
    Senior Member pippin's Avatar
    Join Date
    Oct 2007
    Location
    Berlin
    Posts
    14,790
    OK, I tested it. Works fine for iOS 10 for local and with an exception for MySB.
    That said: it's not backwards compatible to iOS 8/9 and won't work for remote access.

    I'd probably give trying to convince the App Review a try. I could live with the "no remote access part" since I plan to include a VPN client anyway (which would probably include it into "local") and this would be a good excuse to finally do that.
    But I'm not yet willing to give up on iOS 8/9 compatibility just yet.
    ---
    learn more about iPeng, the iPhone and iPad remote for the Squeezebox and
    Logitech UE Smart Radio as well as iPeng Party, the free Party-App,
    at penguinlovesmusic.com
    New: iPeng 9, the Universal App for iPhone, iPad and Apple Watch

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •