Certificate Pinning in IOS to avoid man in middle attack

Question

Is there a best way to do certificate pinning in iOS to avoid Man in middle attack. Or is there any substitute approach that apple provides to make a secure connection?

Currently I'm using A certificate pining approach where either I've to store the .der file in my app to compare with Server Certificate or as option2 to do SHA1 or MD5 validation. But in this case app need regular updates with change in those certificates.

Is there any other concrete approach that apple provides for SSL /TLS validation. Any demo code sample will be helpful

Thanks in advance

Answer 1

OWASP provides good information about this topic, including sample code for various OS, including iOS.

Answer 2

AFNetworking provides AFSecurityPolicy class to deal with certificate and public key pinning.