[aerogear-dev] iOS Passphrases for UPS

Matthias Wessendorf matzew at apache.org
Mon Mar 10 17:01:24 EDT 2014


Ahoy!


On Mon, Mar 10, 2014 at 9:49 PM, Bruno Oliveira <abstractj at redhat.com>wrote:

> Good morning guys, for this issue
> https://issues.jboss.org/browse/AGPUSH-358. I was revisiting the whole
> UPS code and thinking about include two fields for iOSVariant class: skey
> (secret key) and pKey (public key). What's the idea?
>
> 1. Each application has its own key pair
>

each of the PushApplication constructs/objects on the UPS ?


> 2. Before the addition of the iOS variant, the client sends a request
> asking for the public keys
>

"the client" ? Is that the AdminUI (or the relevant HTTP Rest code), when
someone clicks "Add new Variant" ?



> 3. The server sends an HTTP response with the public key for encryption
> 4. The client make use of the public key to encrypt the certificate + the
> passphrase
> 5. Server stores it encrypted
> 6. When necessary to send push messages, the server make use of the
> private key to decrypt that data and send fancy messages.
>

Now, when a (JavaEE) application is sending a request for push messages to
the UPS (which than internally makes use of the private key to decrypt that
data and send fancy messages to Apple), the HTTP RestEndpoint requires a
new argument (the public key) to be allowed to submit these "requests" ?


>
> Does it make sense to you?
>

Somewhat - not sure I fully understood :)


>
> --
> abstractj
>
> JBoss, a division of Red Hat
>
>
>
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev




-- 
Matthias Wessendorf

blog: http://matthiaswessendorf.wordpress.com/
sessions: http://www.slideshare.net/mwessendorf
twitter: http://twitter.com/mwessendorf
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/aerogear-dev/attachments/20140310/e30bffa3/attachment.html 


More information about the aerogear-dev mailing list