In order to load a PEM certificate, you’d probably wanna grab the PEM itself from your backend, right?.
You can do so, by means of this command:
openssl s_client -showcerts -host host.com -port 443
Once you’ve got the certificate, you should get rid of the Begin/End Certificate substrings.
Cocoa Snippet itself is quite easy:
[cc lang=”objc”]
NSData *rawCertificate = [[NSData alloc] initWithBase64Encoding:PlaintextCertificateString];
SecCertificateRef parsedCertificate = SecCertificateCreateWithData(NULL, (__bridge CFDataRef)rawCertificate);
[/cc]
That’s it. Don’t forget about checking expiration dates. Unfortunately, Apple’s API to do so is private, and i personally refuse to build OpenSSL into my app, just to check that.