Certificates in smartphones' application

Question

Currently, I'm developing a mobile app which communicate directly with my server.

First of all, my app must operate on iOS, Android, Windows Phone and BlackBarry OS, but this is not the subject of this topic.

The problem is that before communicate with my server, this app need to authenticate its self to my server with a key pair (public/private).

How should it work? I read somewhere that each app has its own "ressources" folder, maybe a .P12 file could be save there? Would it work on each mobile OS? What are security constraints?

Thank you guys.

Answer 1

Yes, you can use certificates in your apps. I use the same client certificate for Android and iOS.

For iOS, you need to import your .p12 file. Check here

For Android, I used a library named BouncyCastle, so you can import .bks (keystores) and use them. Check this site.