iOS9 PayPal SDK-“发生SSL错误...." [英] iOS9 PayPal SDK - "An SSL error has occurred...."
问题描述
I'm getting the same error as reported in this question iOS9 getting error "an ssl error has occurred and a secure connection to the server cannot be made"
我已经通过使用PayPal URL https://mobileclient.paypal.com 的SSL实验室进行了检查，并且它告诉我，它仅支持以下密码...
I've checked with SSL labs using the PayPal URL https://mobileclient.paypal.com and it tells me that the it only supports the following ciphers...
TLS_RSA_WITH_RC4_128_SHA
TLS_RSA_WITH_RC4_128_MD5
TLS_RSA_WITH_AES_256_CBC_SHA
TLS_RSA_WITH_AES_128_CBC_SHA
TLS_RSA_WITH_3DES_EDE_CBC_SHA
与Apple文档 https://developer.apple.com/library/prerelease/ios/technotes/App-Transport-Security-Technote/
我想问的是，密码问题不完全相同吗?我当然不希望就PayPal绕过ATS，对吗?
I wanted to ask is it the fact the ciphers aren't exactly the same the issue? I certainly don't want to bypass ATS as far as PayPal is concerned, do I?
推荐答案
我进一步阅读了文档，这是我提出问题之前应做的事情！但是要允许列出的密码，我需要从文档中关闭该URL的NSExceptionRequireForwardSecrecy ...
I read the documentation further which is what I should of done before asking the question! But to allow the ciphers that are listed I need to turn off NSExceptionRequireForwardSecrecy for that URL, from the docs...
NSExceptionRequiresForwardSecrecy一个布尔值，用于覆盖要求域使用密码进行前向保密的要求.
NSExceptionRequiresForwardSecrecy A Boolean value for overriding the requirement that the domain support forward secrecy using ciphers.
YES是默认值，并将密码限制为默认行为"中显示的密码.
YES is the default value and limits the ciphers to those shown in Default Behavior.
将该值设置为NO会添加以下可接受的密码列表:
Setting the value to NO adds the following the list of accepted ciphers:
- TLS_RSA_WITH_AES_256_GCM_SHA384
- TLS_RSA_WITH_AES_128_GCM_SHA256
- TLS_RSA_WITH_AES_256_CBC_SHA256
- TLS_RSA_WITH_AES_256_CBC_SHA
- TLS_RSA_WITH_AES_128_CBC_SHA256
- TLS_RSA_WITH_AES_128_CBC_SHA
这篇关于iOS9 PayPal SDK-“发生SSL错误...."的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
