We would like to notify you about upcoming changes in our Mobile Token SDK. We are planning to release a new version of Mobile Core library on March 12th for both Android and iOS. We will only update the certificate used for certificate pinning, so all you need to do is release your application with the new version.
The library communicates with our backend servers known as MDS. During the TLS handshake, a certificate pinning is performed as an additional security measure to protect from malicious attacks. The certificate used in the pinning process will expire on April 24th. In order to avoid negative customer impact we will update the certificate with this release.
We are planning to renew our MDS certificate on April 19th. Once the certificate is renewed, the customers with the old library version will have the following impact:
New users provisioning/registration will not be possible
Certificate renewal on your MASS servers will not be possible for existing users
Timeline of Events:
March 12th - New version of Mobile Core library with new certificate will be released for both Android and iOS.
April 19th - Certificate will be changed to the new one on the MDS service. By this time you should release a new application version and make it available to your customers.
April 24th - Old certificate expires.