Cordova plugin that excepts access to S3 from App Transport Security (iOS9)
iOS9 introduced strict transport security rules (ATS) which rejects the current AWS S3 certificates. This blocks all access to AWS S3 from Cordova based apps built with the iOS9 SDK (Xcode 7). For example the following image won't load:
<img src="https://xxx.s3.amazonaws.com/my-image.png" />AWS recommends to except the S3 domain via the -Info.plist (link):
Recent changes, per Apple's App Transport Security Technote, states using NSURLConnection, CFURL, or NSURLSession require TLS 1.2 and SHA256 (or > better) signed hash algorithms. S3 currently supports TLS 1.2. S3 endpoint certificates will continue to be based on SHA-1 until September 30th. We recommend specifying exceptions to the default ATS behavior by modifying the Info.plist file during the transition period. Later this year, when S3 SHA-256 certificates are deployed, we recommend testing and confirming your application works properly with the enabled ATS security settings.
All current apps will continue to function just fine. This applies specifically to those that are compiled with the new SDK, Xcode 7.
This plugin adds the required entry to -Info.plist.
This software is licensed under the Apache 2 license, quoted below.
Copyright 2011-2015 Collaborne B.V. <http://github.com/Collaborne/>
Licensed under the Apache License, Version 2.0 (the "License"); you may not
use this file except in compliance with the License. You may obtain a copy of
the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
License for the specific language governing permissions and limitations under
the License.