iOS13 TLS证书问题-连接错误

21

自从发布iOS 13以来,我在我的iOS应用程序中遇到了一个奇怪的问题,由于与后端的TLS连接错误。如果我尝试通过模拟器(iOS 13)连接到后端,它可以正常工作,但如果我将应用程序安装到物理设备上(iOS 13.1),由于以下原因就无法连接:

2019-10-01 13:24:12.862510+0200 CopApp[1830:506662] [] tcp_input [C1.1:3] flags=[R.] seq=2608024828, ack=2612553500, win=28408 state=ESTABLISHED rcv_nxt=2608024828, snd_una=2612553500
2019-10-01 13:24:12.869115+0200 CopApp[1830:506662] Connection 1: received failure notification
2019-10-01 13:24:12.869360+0200 CopApp[1830:506662] Connection 1: received ECONNRESET with incomplete TLS handshake - generating errSSLClosedNoNotify
2019-10-01 13:24:12.869526+0200 CopApp[1830:506662] Connection 1: failed to connect 3:-9816, reason -1
2019-10-01 13:24:12.869684+0200 CopApp[1830:506662] Connection 1: encountered error(3:-9816)
2019-10-01 13:24:28.124012+0200 CopApp[1830:506782] [] tcp_input [C2.1:3] flags=[R.] seq=3652579464, ack=755757394, win=28408 state=ESTABLISHED rcv_nxt=3652579464, snd_una=755757394
2019-10-01 13:24:28.128402+0200 CopApp[1830:506782] Connection 2: received failure notification
2019-10-01 13:24:28.128627+0200 CopApp[1830:506782] Connection 2: received ECONNRESET with incomplete TLS handshake - generating errSSLClosedNoNotify
2019-10-01 13:24:28.128793+0200 CopApp[1830:506782] Connection 2: failed to connect 3:-9816, reason -1
2019-10-01 13:24:28.128949+0200 CopApp[1830:506782] Connection 2: encountered error(3:-9816)
2019-10-01 13:24:43.584026+0200 CopApp[1830:506831] [] tcp_input [C3.1:3] flags=[R.] seq=984907791, ack=487743401, win=28408 state=ESTABLISHED rcv_nxt=984907791, snd_una=487743401
2019-10-01 13:24:43.587452+0200 CopApp[1830:506831] Connection 3: received failure notification
2019-10-01 13:24:43.587674+0200 CopApp[1830:506831] Connection 3: received ECONNRESET with incomplete TLS handshake - generating errSSLClosedNoNotify
2019-10-01 13:24:43.587839+0200 CopApp[1830:506831] Connection 3: failed to connect 3:-9816, reason -1
2019-10-01 13:24:43.588047+0200 CopApp[1830:506831] Connection 3: encountered error(3:-9816)
2019-10-01 13:24:43.594292+0200 CopApp[1830:506831] Task <DAEFF7C7-DF2E-4DCB-9BF9-2A7825D56AF2>.<1> HTTP load failed, 0/0 bytes (error code: -1200 [3:-9816])
Si è verificato un errore SSL ed è impossibile effettuare una connessione sicura con il server.

显然后端是相同的,由AWS证书管理器创建的aws证书覆盖了它。我认为问题不在于证书,因为我认为它符合新的苹果证书政策,但我无法理解问题出在哪里。

你能帮帮我吗?

谢谢


你最终解决了这个问题吗? - Nick Zinger
1
这是一个 AWS 错误,他们已经修复了。 - Giamma
这是什么类型的错误? - Hammer
一个包含无效数据的证书 - Giamma
@Giamma 你解决了这个问题吗? - Gunjan Dave
我也在寻找解决方案。 - Jonathan Eustace
1个回答

1
请记住,自iOS 13以来,对受信任证书有了新的要求。确保SSL证书符合这些要求,否则连接将无法建立。
您可以在官方苹果笔记中找到这些要求 - iOS 13和macOS 10.15中受信任证书的要求
您可以使用OpenSSL等工具检查证书:
openssl s_client -showcerts -connect yourServer:serverPort

网页内容由stack overflow 提供, 点击上面的
可以查看英文原文,
原文链接