iOS和Erlang - SSL握手失敗，自簽名證書

我想創建一個通過TCP/IP從iOS到一個Erlang服務器的SSL連接。服務器使用自簽名證書（Erlang OTP附帶的默認證書）。iOS和Erlang - SSL握手失敗，自簽名證書

每次，SSL握手失敗： - CFNetwork的SSLHandshake失敗（-9824 - > -9829） - CFNetwork的SSLHandshake失敗（-9807）

這是一個方法，我用：

CFReadStreamRef readStream; 
CFWriteStreamRef writeStream; 

CFStreamCreatePairWithSocketToHost(NULL, (CFStringRef)@"my-server-name", 1234, &readStream, &writeStream); 

//------------------------------------------------------ 
// Set props. 
// 
CFReadStreamSetProperty(readStream, kCFStreamPropertySocketSecurityLevel, kCFStreamSocketSecurityLevelNegotiatedSSL); 
CFReadStreamSetProperty(readStream, kCFStreamSSLAllowsExpiredCertificates, kCFBooleanTrue); 
CFReadStreamSetProperty(readStream, kCFStreamSSLAllowsExpiredRoots, kCFBooleanTrue); 
CFReadStreamSetProperty(readStream, kCFStreamSSLAllowsAnyRoot, kCFBooleanTrue); 
CFReadStreamSetProperty(readStream, kCFStreamSSLValidatesCertificateChain, kCFBooleanFalse); 
CFReadStreamSetProperty(readStream, kCFStreamSSLPeerName, kCFNull); 

CFWriteStreamSetProperty(writeStream, kCFStreamPropertySocketSecurityLevel, kCFStreamSocketSecurityLevelNegotiatedSSL); 
CFWriteStreamSetProperty(writeStream, kCFStreamSSLAllowsExpiredCertificates, kCFBooleanTrue); 
CFWriteStreamSetProperty(writeStream, kCFStreamSSLAllowsExpiredRoots, kCFBooleanTrue); 
CFWriteStreamSetProperty(writeStream, kCFStreamSSLAllowsAnyRoot, kCFBooleanTrue); 
CFWriteStreamSetProperty(writeStream, kCFStreamSSLValidatesCertificateChain, kCFBooleanFalse); 
CFWriteStreamSetProperty(writeStream, kCFStreamSSLPeerName, kCFNull); 

//------------------------------------------------------ 
// Open streams. 
// 
if(!CFReadStreamOpen(readStream)) 
{ 
    NSLog(@"CFReadStreamOpen Failed!"); 
    return 0; 
} 

if(!CFWriteStreamOpen(writeStream)) 
{ 
    NSLog(@"CFWriteStreamOpen Failed!"); 
    CFReadStreamClose(readStream); 
    return 0; 
} 

//------------------------------------------------------ 
// Send some data. 
// 
UInt8 data[20] = {0}; 

*(ushort*)data = 18; 
for(int i = 2; i < 20; i++) 
{ 
    data[i] = 'A' + i; 
} 

NSLog(@"Sending some data..."); 

CFIndex bytesSent = CFWriteStreamWrite(writeStream, data, 20); 
NSLog(@"Bytes Sent: %d", (int)bytesSent); 

//------------------------------------------------------ 
// Close streams. 
// 
CFReadStreamClose(readStream); 
CFWriteStreamClose(writeStream);

我也試圖與SecureTransport（SSLCreateContext，SSLSetConnection，SSLHandshake它是相同的 - 。SSL握手失敗

任何建議非常讚賞

。

來源

2015-02-06 Codrin

錯誤有很多可能的原因。您可能應該先在Mac上使用curl命令來訪問Erlang服務器。捲曲會給你更多的描述性錯誤。您需要通過-k標誌來告訴它忽略證書錯誤。

一些快速的可能性：您的Objective-C代碼是否設置爲允許無效的證書？它是否設置爲驗證域名，並且您的開發設置不會執行反向DNS？

來源

2015-02-07 03:16:08

如果問題與AppTransport相關，您可以通過在MacOS 10.11上運行/usr/bin/nscurl --ats-diagnostics --verbose yourdomain.com來找到需要哪個例外。

來源

2015-10-04 10:41:21

iOS和Erlang - SSL握手失敗，自簽名證書

回答

相關問題