All geek questions in one place

How to disable sslv3 for NSURLconnection or NSURLSession

Regarding a recent security risk using SSLV3, https://isc.sans.edu/forums/diary/OpenSSL+SSLv3+POODLE+Vulnerability+Official+Release/18827

How can I protect NSURLconnection from this threat?

Is it possible to disable sslv3 programmatical in iOS?

Is there any way in iOS with which I can get a list of supported security protocols from the server url?

+6
source share
2 answers

I figured out how to install it in NSURLSession, but still struggling with NSURLConnection.

NSURLSessionConfiguration *config = [NSURLSessionConfiguration defaultSessionConfiguration]; config.TLSMaximumSupportedProtocol = kTLSProtocol12; config.TLSMinimumSupportedProtocol = kTLSProtocol12 NSURLSession *session = [NSURLSession sessionWithConfiguration:sessionConfig];
+2
source

Depending on how you connect, try using kCFStreamSocketSecurityLevelTLSv1 instead of kCFStreamSocketSecurityLevelNegotiatedSSL.

+1
source

Source: https://habr.com/ru/post/977468/

More articles:


All Articles