3 ms·
I updated an SSL certificate on a server used by a travel organisation. A few hours later we got an urgent call from the company saying their iOS app was failin
by rikroots 5y ago
I updated an SSL certificate on a server used by a travel organisation. A few hours later we got an urgent call from the company saying their iOS app was failing in embarrassing ways. After investigations involving numerous parties all blaming each other it turned out that the iOS app developers, for reasons known only to themselves, had hard-coded the old certificate's serial number into their verification code. We fixed the immediate problem by reverting back to the old certificate which, luckily, was still valid for a few more weeks.
- steelbrain 5y agoit seems like you are describing Certificate pinning which was a recommended security practice. Although from your situation it sounds like the company had bigger issues like communication gap.
- rikroots 5y agoAh - then it makes sense why everybody was blaming each other. We all thought we were doing what we were supposed to be doing. And yes, the communications between the various teams in the various companies for that project were terrible.