# Use Client Certificate in Android/iOS Client

**URL:** <https://forums.rocket.chat/t/use-client-certificate-in-android-ios-client/2460>\
**Category:** Feature Requests (historic archive)\
**Created:** [November 14, 2018, 9:11am UTC](https://forums.rocket.chat/t/use-client-certificate-in-android-ios-client/2460 "2018-11-14T09:11:57Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![pombaer](https://avatars.discourse-cdn.com/v4/letter/p/d26b3c/32.png) [@pombaer](https://forums.rocket.chat/u/pombaer)\
**Post date:** [November 14, 2018, 9:11am UTC](https://forums.rocket.chat/t/use-client-certificate-in-android-ios-client/2460/1 "2018-11-14T09:11:57Z")

</div>

Hallo!

We are using Client Certificates as a sort of two factor authentication on published webservers which should only be accessable for internal users. So we enroll certificates on the Client devices.  
For RocketChat we use a reverse proxy with NGINX wich "client Certs enabled:  
ssl\_client\_certificate /etc/nginx/ssl/private\_ca.cert;  
ssl\_verify\_client on;  
This works with the Mobile Webapp version in Chrome, Firefox and so on, but does not work with the Android / iOS App.  
Please implement Client Certificates in the Apps to make more secure communication available.

---

<div class="post-metadata">

**Author:** ![Ivy](https://avatars.discourse-cdn.com/v4/letter/i/bc8723/32.png) [@Ivy](https://forums.rocket.chat/u/Ivy)\
**Post date:** [November 14, 2018, 11:33am UTC](https://forums.rocket.chat/t/use-client-certificate-in-android-ios-client/2460/2 "2018-11-14T11:33:29Z")

</div>

Yes, this provides so much security for something that looks quite trivial reading other implementations in other applications assuming you are more experienced of app development than me…

---

<div class="post-metadata">

**Author:** ![kain](https://avatars.discourse-cdn.com/v4/letter/k/76d3ee/32.png) [@kain](https://forums.rocket.chat/u/kain)\
**Post date:** [February 20, 2019, 7:47pm UTC](https://forums.rocket.chat/t/use-client-certificate-in-android-ios-client/2460/3 "2019-02-20T19:47:54Z")

</div>

I’ve dove into the code for this a little, this requires fixes/feature supported to be added into http client libraries underlying react native and other assorted frameworks. Pretty much the whole family of frameworks depends on okhttp, which lost some of the TLS client cert features between okhttp2 and okhttp3 so that needs to be re-implemented for that library, then you need to add hooks for that into react native. Finally you can then add support for that to apps like rocket.chat once all the above is done.

---

<div class="post-metadata">

**Author:** ![rafael.kellermann](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/rafael.kellermann/32/783_2.png) [@rafael.kellermann](https://forums.rocket.chat/u/rafael.kellermann)\
**Post date:** [February 25, 2019, 5:57am UTC](https://forums.rocket.chat/t/use-client-certificate-in-android-ios-client/2460/4 "2019-02-25T05:57:21Z")

</div>

The implementation of client certificates to two-way SSL authentication is already in progress. It’s completed on [iOS](https://github.com/RocketChat/Rocket.Chat.iOS/pull/2555) and will be started on Android soon.

---

<div class="post-metadata">

**Author:** ![Ivy](https://avatars.discourse-cdn.com/v4/letter/i/bc8723/32.png) [@Ivy](https://forums.rocket.chat/u/Ivy)\
**Post date:** [October 28, 2019, 2:32pm UTC](https://forums.rocket.chat/t/use-client-certificate-in-android-ios-client/2460/5 "2019-10-28T14:32:16Z")

</div>

Any news on the Android version ?