_kCFStreamPropertySSLClientSideAuthentication causes rejection for MAS app

[ghmrs356]

The declaration of _kCFStreamPropertySSLClientSideAuthentication in TCPStream.m causes a review rejection for my Mac app. Has not been a problem for at least 5 months, but now it is. Grrrr

#if !TARGET_OS_IPHONE
// You can't do client-side SSL auth using CFStream without this constant,
// but it was accidentally not declared in a public header.
// Unfortunately you can't use this on iPhone without Apple rejecting your app
// for using "private API". :-(
extern const CFStringRef _kCFStreamPropertySSLClientSideAuthentication; // in CFNetwork
#endif

[snej]

Sorry 😢 I haven't tried doing client-side cert stuff in several years (though I may need to soon), so I'm not sure if there's newer public API that makes this hack unnecessary. If you find out, I'd love to know. (Got any spare DTS request tickets?)

[snej]

You could also try asking on Apple's macnetworkprog mailing list. DTS guru Quinn is very responsive to questions there.

[ghmrs356]

I don't use SSL, so just removing it works for me.