我有iOS 10 TSL问题（“安全错误：-9801”）。怎么修？ [英] I have iOS 10 TSL issue ("Security Error: -9801"). How to fix?

问题描述

我有连接到SSL SOAP服务的应用程序。对于iOS 9.3.5的应用程序工作正常。从iOS 10我有代码 -9801 的错误。我想这是连接到苹果ATS。网站证书配置为 TLS 1.0 （但我无法管理证书配置）。

I have App which connects to SSL SOAP service. For iOS 9.3.5 the App works fine. From iOS 10 I have error with code -9801. I suppose this is connected to Apple ATS. The site certificate is configured for TLS 1.0 (but I can not manage certificate configuration).

如何修复这个？我想我必须将它添加为 .plist 文件中的例外。

How can I fix this? I suppose I have to add it as an exception in .plist file.

我也检查了 www.ssllabs.com 和 Apple ATS 9 / iOS 9 R 它提供错误：

I also made check with www.ssllabs.com and for section Apple ATS 9 / iOS 9 R it gives error:

协议或密码套件不匹配

Protocol or cipher suite mismatch

但在iOS 9上可以正常工作。

but on iOS 9 it works.

编辑：

我将域添加到ATS异常（在 info.plist 中），但错误仍然存​​在

I add the domain to ATS exceptions (in info.plist) but the error persists

推荐答案

NSAppTransportSecurity

NSAllowsArbitraryLoads

NSAppTransportSecurity NSAllowsArbitraryLoads

添加此键 - 您的 info.plist ，这意味着它将允许所有类型的加载。如果您有特定域，那么您应该在 info.plist 中添加该特定域。

add this key - values in your info.plist, this means it will allow all kind of load. If you have specific domain then you should add that specific domain in info.plist.

如果您需要安全连接，那么您应该管理 info.plist >

If you need secure connection then you should manage your info.plist like,

     <key>NSAppTransportSecurity</key>
<dict>
    <key>NSExceptionDomains</key>
<dict>
    <key>yourdomain.com</key>
    <dict>
        <!--Include to allow subdomains-->
        <key>NSIncludesSubdomains</key>
        <true/>
        <!--Include to allow HTTP requests-->
        <key>NSTemporaryExceptionAllowsInsecureHTTPLoads</key>
        <true/>
        <!--Include to specify minimum TLS version-->
        <key>NSTemporaryExceptionMinimumTLSVersion</key>
        <string>TLSv1.1</string>
    </dict>
</dict>

有 ssl 整合！

这篇关于我有iOS 10 TSL问题（“安全错误：-9801”）。怎么修？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！