All geek questions in one place

"An SSL error has occurred and a secure connection to the server cannot be made" with a verified certificate

I get the following error message (which is identical to every attempt)

2016-07-20 20: 09: 28.013 MyApp [1140: 374263] Error CFNetwork SSLHandshake (-9806) 2016-07-20 20: 09: 28.014 MyApp [1140: 374263] Error loading NSURLSession / NSURLConnection HTTP (kCFStreamErrorDomainSSL, -9806 ) error = Optional (Error Domain = NSURLErrorDomain Code = -1200 "An SSL error occurred and could not create a secure connection to the server." UserInfo = {_ kCFStreamErrorCodeKey = -9806, NSLocalizedRecoverySuggestion = Would you like to connect to the server anyway ?, NSUnderlyingrror 0x154dda750 {domain error = kCFErrorDomainCFNetwork code = -1200 "(zero)" UserInfo = {_ kCFStreamPropertySSLClientCertificateState = 0, _kCFNetworkCFStreamSSLErrorOriginalValue = -9806, _kCFStreamErrecrremerremerremerrremerremerrremerrremerrremerrremerrremerremerrdreqrremerrremerremerrdremerrcremerreckrr1 = 1)NSLocalizedDescription = An SSL error has occurred and a secure connection to the server could not be completed., NSErrorFailingURLKey =https://example.com:8080/api/login , NSErrorFailingURLStringKey = https://example.com:8080/api/login , _kCFStreamErrorDomainKey = 3})

The certificate is verified provided by letencrypt. I tested my web server configuration again and again, and everything seems to be the case.

Running the command openssl s_client -connect example.com:8080/api/login -tls1_2gives all the expected results:

-It checks credentials like DST Root CA X3that which is included in the list of root CAs in apples

- Return is a code Verify return code: 0 (ok)

I also run several websites with ssl diagnostic tools such as digicert , which did not produce any results.

I can download the domain from Safari on my iOS device, as well as chrome from my computer without the need to accept “untrusted certificates”.

Any suggestions?

+4
1

, - - , . Let Encrypt (CA ) https- ( , , ). Apple iOS, ( , 9,5, ).

, Info.plist .

<key>NSAppTransportSecurity</key>
<dict>
  <key>NSExceptionDomains</key>
  <dict>
    <key>example.com</key>
    <dict>
      <key>NSTemporaryExceptionRequiresForwardSecrecy</key>
      <false/>
    </dict>
  </dict>
</dict>

- false. , , iOS 10.0 .

+1

Source: https://habr.com/ru/post/1648558/

More articles:


All Articles