SSL Handshake failed 9801 - TCP connection - Xcode 7

App & System Services Networking
saranya_siva OP
Created Aug ’15
Replies 2
Boosts 0
Views 4.2k
Participants 3

In the app , built on Xcode 7 (beta) , TCP socket connection (NSStream) fails with below error.

CFNetwork SSLHandshake failed (-9801)

Stream Error -9801: The operation couldn’t be completed. (OSStatus error -9801.)

In the Info.plist I have also included the ATS following related exceptions.


<key>NSAppTransportSecurity</key>

<dict>

<key>NSAllowsArbitraryLoads</key>

<true/>

<key>XXdomain</key>

<dict>
<key>NSExceptionAllowsInsecureHTTPLoads</key>
<true/>
<key>NSExceptionRequiresForwardSecrecy</key>
<false/>
</dict>
</dict>


But in the below delegate

- (void)stream:(NSStream *)stream handleEvent:(NSStreamEvent)eventCode

I got the event code as 8 indicating errorOccured. With the above mentioned description.


Logs

As per CFNetwork diagnostics logs, I didn't receive any error. But it is not proceeding after ServerHello.

Aug 11 17:43:21 YJFS[2618] <Notice>: CFNetwork Diagnostics [3:192] 17:43:21.191 {

ioLogger

logStruct: array [4] {

BEGIN SSL RECORD DECODE: SENT

decodeHandshake [0] @ 0x124f0d1f5, version 303, length 196 (0xc4)

ClientHello (1, 0x1), length 192 (0xc0)

END SSL RECORD DECODE: SENT

}

} [3:192]

Aug 11 17:43:21 YJFS[2618] <Notice>: CFNetwork Diagnostics [3:190] 17:43:21.187 {

~HTTPProtocol: nullptr request

Request: null

sent: 1161

received: 428

cell sent: 0

cell received: 0

} [3:190]

Aug 11 17:43:21 YJFS[2618] <Notice>: CFNetwork Diagnostics [3:193] 17:43:21.478 {

{ fd: 14, local 192.168.7.22:60703 => peer ***:12001 ***} RAW-READ 4096

RAW-READ (14) | < data [ 2048 ] bytes {

RAW-READ (14) | < 00000000: 1603 0000 5102 0000 4d03 0055 c9e6 9795 ....Q...M..U....

RAW-READ (14) | < 00000010: b1de 0feb a23f 98f1 b37c 62c1 96fe 0dcd .....?...|b...-.

RAW-READ (14) | < 00000020: cfbd 28e5 3d2a f645 22b1 fb20 652f 456e ..(.=*.E".. e/En

RAW-READ (14) | < 00000030: ff33 3c99 fc39 65ab f0ee ea41 43ae 6901 .3<..9e....AC.i.

RAW-READ (14) | < 00000040: 057e 7997 9bc3 e486 3a2d 6e4b 0035 0000 .~y.....:-nK.5..

RAW-READ (14) | < 00000050: 05ff 0100 0100 1603 0011 800b 0011 7c00 ..............|.

RAW-READ (14) | < 00000060: 1179 0005 1d30 8205 1930 8204 01a0 0302 .y...0...0......

RAW-READ (14) | < 00000070: 0102 0210 6df3 39d6 6518 aa3b 56f6 3131 ....m.9.e..;V.11

RAW-READ (14) | < 00000080: 955d 73eb 300d 0609 2a86 4886 f70d 0101 .]s.0-..*.H..-..

RAW-READ (14) | < 00000090: 0b05 0030 7e31 0b30 0906 0355 0406 1302 ...0~1.0...U....

RAW-READ (14) | < 000000a0: 5553 311d 301b 0603 5504 0a13 1453 796d US1.0...U.-..X

RAW-READ (14) | < 000000b0: 616e 7465 6320 436f 7270 6f72 6174 696f XX

RAW-READ (14) | < 000000c0: 6e31 1f30 1d06 0355 040b 1316 5379 6d61 n1.0...U....***

RAW-READ (14) | < 000000d0: 6e74 6563 2054 7275 7374 204e 6574 776f XX

RAW-READ (14) | < 000000e0: 726b 312f 302d 0603 5504 0313 2653 796d rk1/0-..U...&XX

RAW-READ (14) | < 000000f0: 616e 7465 6320 436c 6173 7320 3320 5365 CCCClass 3 Se

RAW-READ (14) | < 00000100: 6375 7265 2053 6572 7665 7220 4341 202d cure Server CA -

RAW-READ (14) | < 00000110: 2047 3430 1e17 0d31 3530 3330 3930 3030 G40..-150309000

RAW-READ (14) | < 00000120: 3030 305a 170d 3136 3033 3038 3233 3539 000Z.-1603082359

RAW-READ (14) | < 00000130: 3539 5a30 8197 310b 3009 0603 5504 0613 59Z0..1.0...U...

RAW-READ (14) | < 00000140: 0255 5331 1130 0f06 0355 0408 0c08 4e65 .US1.0...U....Ne

RAW-READ (14) | < 00000150: 7720 596f 726b 3111 300f 0603 5504 070c w York1.0...U...

RAW-READ (14) | < 00000160: 084e 6577 2059 6f72 6b31 2130 1f06 0355 .New York1!0...U

RAW-READ (14) | < 00000170: 040a 0c18 5374 6174 6520 5374 7265 6574 .-..State XX

RAW-READ (14) | < 00000180: 2043 6f72 706f 7261 7469 6f6e 3125 3023 XX%0#

RAW-READ (14) | < 00000190: 0603 5504 0b0c 1c53 7461 7465 2053 7472 ..U....SXXr

RAW-READ (14) | < 000001a0: 6565 7420 476c 6f62 616c 2045 7863 6861 eet XXExcha

RAW-READ (14) | < 000001b0: 6e67 6531 1830 1606 0355 0403 0c0f 7777 nge1.0...U....ww

RAW-READ (14) | < 000001c0: 772e 6678 646e 6c64 2e6d 6f62 6930 8201 XX..

RAW-READ (14) | < 000001d0: 2230 0d06 092a 8648 86f7 0d01 0101 0500 "0-..*.H..-.....

RAW-READ (14) | < 000001e0: 0382 010f 0030 8201 0a02 8201 0100 e760 .....0..-......`

RAW-READ (14) | < 000001f0: 7007 54d2 8a43 a33d 9e9d dc73 6c75 f59a p.T..C.=...slu..

RAW-READ (14) | < 00000200: 3364 3d5c 4097 6621 6607 70de d8a1 4bf9 3d=\@.f!f.p...K.

RAW-READ (14) | < 00000210: 0ec5 9472 3c71 0246 64ea d3fa 453a 9c08 ...r<q.Fd...E:..

RAW-READ (14) | < 00000220: 469b 26ca 13cd 69d8 2490 b08d 6949 9963 F.&...i.$...iI.c

RAW-READ (14) | < 00000230: 1d69 5bb2 5c62 7173 f45e 5826 ef9f 27d5 .i[.\bqs.^X&..'.

RAW-READ (14) | < 00000240: 2b25 aa8f f737 0b7b 62be 16f7 04eb a8e3 +%...7.{b.......

RAW-READ (14) | < 00000250: 4943 ee2b c53d 9461 7942 eea5 761f f945 IC.+.=.ayB..v..E

RAW-READ (14) | < 00000260: f17f 6581 5b37 40e9 0624 e462 e721 440d ..e.[7@..$.b.!D-

RAW-READ (14) | < 00000270: 605c 57e4 3925 e737 699d e587 7ac4 0d25 `\W.9%.7i...z.-%

RAW-READ (14) | < 00000280: 2f02 3e13 399d 5a79 6d86 ce69 aa8c 530e /.>.9.Zym..i..S.

RAW-READ (14) | < 00000290: 1d8c 6482 7999 cdeb ae50 3c00 8d54 022f ..d.y....P<..T./

RAW-READ (14) | < 000002a0: ffc9 9bb4 0e1f cf87 2a40 736b b57c f529 ........*@sk.|.)

RAW-READ (14) | < 000002b0: f52a ea2c 8e9f d1ea f2a1 26dc f56f 18ad .*.,......&..o..

RAW-READ (14) | < 000002c0: 02ad 5db2 4beb 9fa8 9a26 1542 bcac 99e1 ..].K....&.B....

RAW-READ (14) | < 000002d0: 10ba da4b 67a4 27bb be28 4c54 55f1 d054 ...Kg.'..(LTU..T

RAW-READ (14) | < 000002e0: 1783 9be2 e4a6 0f56 fa2e 8df2 3d27 0203 .......V....='..

RAW-READ (14) | < 000002f0: 0100 01a3 8201 7730 8201 7330 2906 0355 ......w0..s0)..U

RAW-READ (14) | < 00000300: 1d11 0422 3020 820d 2a2e 6678 646e 6c64 ..."0 .-*.***

RAW-READ (14) | < 00000310: 2e6d 6f62 6982 0f77 7777 2e66 7864 6e6c .mobi..***

RAW-READ (14) | < 00000320: 642e 6d6f 6269 3009 0603 551d 1304 0230 XX...U....0

RAW-READ (14) | < 00000330: 0030 0e06 0355 1d0f 0101 ff04 0403 0205 .0...U..........

RAW-READ (14) | < 00000340: a030 1d06 0355 1d25 0416 3014 0608 2b06 .0...U.%..0...+.

RAW-READ (14) | < 00000350: 0105 0507 0301 0608 2b06 0105 0507 0302 ........+.......

RAW-READ (14) | < 00000360: 3065 0603 551d 2004 5e30 5c30 5a06 0a60 0e..U. .^0\0Z.-`

RAW-READ (14) | < 00000370: 8648 0186 f845 0107 3630 4c30 2306 082b .H...E..60L0#..+

RAW-READ (14) | < 00000380: 0601 0505 0702 0116 1768 7474 7073 3a2f .........https:/

RAW-READ (14) | < 00000390: 2f64 2e73 796d 6362 2e63 6f6d 2f63 7073 /XX/cps

RAW-READ (14) | < 000003a0: 3025 0608 2b06 0105 0507 0202 3019 1a17 0%..+.......0...

RAW-READ (14) | < 000003b0: 6874 7470 733a 2f2f 642e 7379 6d63 622e XXXX

RAW-READ (14) | < 000003c0: 636f 6d2f 7270 6130 1f06 0355 1d23 0418 com/rpa0...U.#..

RAW-READ (14) | < 000003d0: 3016 8014 5f60 cf61 9055 df84 4314 8a60 0..._`.a.U..C..`

RAW-READ (14) | < 000003e0: 2ab2 f57a f443 18ef 302b 0603 551d 1f04 *..z.C..0+..U...

RAW-READ (14) | < 000003f0: 2430 2230 20a0 1ea0 1c86 1a68 7474 703a $0"0 ......http:

RAW-READ (14) | < 00000400: 2f2f 7373 2e73 796d 6362 2e63 6f6d 2f73 //XX/s

RAW-READ (14) | < 00000410: 732e 6372 6c30 5706 082b 0601 0505 0701 s.crl0W..+......

RAW-READ (14) | < 00000420: 0104 4b30 4930 1f06 082b 0601 0505 0730 ..K0I0...+.....0

RAW-READ (14) | < 00000430: 0186 1368 7474 703a 2f2f 7373 2e73 796d ...XXXXX

RAW-READ (14) | < 00000440: 6364 2e63 6f6d 3026 0608 2b06 0105 0507 cd.com0&..+.....

RAW-READ (14) | < 00000450: 3002 861a 6874 7470 3a2f 2f73 732e 7379 0...***

RAW-READ (14) | < 00000460: 6d63 622e 636f 6d2f 7373 2e63 7274 300d mcb.com/ss.crt0-

RAW-READ (14) | < 00000470: 0609 2a86 4886 f70d 0101 0b05 0003 8201 ..*.H..-........

RAW-READ (14) | < 00000480: 0100 71f5 6d19 1b6e 0227 f685 1501 c4e8 ..q.m..n.'......

RAW-READ (14) | < 00000490: 10de 4fa0 0252 7f21 7127 b415 9a87 0106 ..O..R.!q'......

RAW-READ (14) | < 000004a0: 713b fd89 30ca 843f cf0c 7fb3 d2cb 56a8 q;..0..?......V.

RAW-READ (14) | < 000004b0: c6e3 b041 5dbe a295 e7fe 1b70 d4a7 2e5e ...A]......p...^

RAW-READ (14) | < 000004c0: 85ae 1c0c 42f8 a1eb fe07 db97 1968 7325 ....B........hs%

RAW-READ (14) | < 000004d0: 78d2 7b75 ef47 8ac0 9783 1d53 3589 9fe9 x.{u.G.....S5...

RAW-READ (14) | < 000004e0: ffde eebc bf44 bae1 41b2 8ed1 bf94 3feb .....D..A.....?.

RAW-READ (14) | < 000004f0: 6edb 6385 f58a 5021 9c42 b925 970c b6ca n.c...P!.B.%....

RAW-READ (14) | < 00000500: 5daa ebf2 d89f 01f2 b407 3d9b 63ee 740f ].........=.c.t.

RAW-READ (14) | < 00000510: 0777 982b c57c 484c 7671 d957 4d20 50c9 .w.+.|HLvq.WM P.

RAW-READ (14) | < 00000520: bb62 402e 219e cdd0 57c7 8990 7460 dea9 .b@.!...W...t`..

RAW-READ (14) | < 00000530: a6aa cb04 5ba2 9f3f 5dde 949d fa3c 444c ....[..?]....<DL

RAW-READ (14) | < 00000540: 1915 3b49 f480 150d a89e 8311 2443 afd6 ..;I...-....$C..

RAW-READ (14) | < 00000550: 4da7 9b4b 9d47 efb4 34dd b735 23d6 23c3 M..K.G..4..5#.#.

RAW-READ (14) | < 00000560: 4a8f 49c0 1917 afb5 3030 e7e9 088e 221d J.I.....00....".

RAW-READ (14) | < 00000570: 22c2 bfa3 4c55 70dd 79a3 d958 7a7f 7130 "...LUp.y..Xz.q0

RAW-READ (14) | < 00000580: 2501 0005 3c30 8205 3830 8204 20a0 0302 %...<0..80.. ...

RAW-READ (14) | < 00000590: 0102 0210 513f b974 3870 b734 4041 8d30 ....Q?.t8p.4@A.0

RAW-READ (14) | < 000005a0: 9306 99ff 300d 0609 2a86 4886 f70d 0101 ....0-..*.H..-..

RAW-READ (14) | < 000005b0: 0b05 0030 81ca 310b 3009 0603 5504 0613 ...0..1.0...U...

RAW-READ (14) | < 000005c0: 0255 5331 1730 1506 0355 040a 130e 5665 .US1.0...U.-..XX

RAW-READ (14) | < 000005d0: 7269 5369 676e 2c20 496e 632e 311f 301d ***, Inc.1.0.

RAW-READ (14) | < 000005e0: 0603 5504 0b13 1656 6572 6953 6967 6e20 ..U....XX

RAW-READ (14) | < 000005f0: 5472 7573 7420 4e65 7477 6f72 6b31 3a30 XXNetwork1:0

RAW-READ (14) | < 00000600: 3806 0355 040b 1331 2863 2920 3230 3036 8..U...1(c) 2006

RAW-READ (14) | < 00000610: 2056 6572 6953 6967 6e2c 2049 6e63 2e20 ***, Inc.

RAW-READ (14) | < 00000620: 2d20 466f 7220 6175 7468 6f72 697a 6564 - For authorized

RAW-READ (14) | < 00000630: 2075 7365 206f 6e6c 7931 4530 4306 0355 use only1E0C..U

RAW-READ (14) | < 00000640: 0403 133c 5665 7269 5369 676e 2043 6c61 ...<VXXa

RAW-READ (14) | < 00000650: 7373 2033 2050 7562 6c69 6320 5072 696d ss 3 Public Prim

RAW-READ (14) | < 00000660: 6172 7920 4365 7274 6966 6963 6174 696f ary Certificatio

RAW-READ (14) | < 00000670: 6e20 4175 7468 6f72 6974 7920 2d20 4735 n Authority - G5

RAW-READ (14) | < 00000680: 301e 170d 3133 3130 3331 3030 3030 3030 0..-131031000000

RAW-READ (14) | < 00000690: 5a17 0d32 3331 3033 3032 3335 3935 395a Z.-231030235959Z

RAW-READ (14) | < 000006a0: 307e 310b 3009 0603 5504 0613 0255 5331 0~1.0...U....US1

RAW-READ (14) | < 000006b0: 1d30 1b06 0355 040a 1314 5379 6d61 6e74 .0...U.-..XX

RAW-READ (14) | < 000006c0: 6563 2043 6f72 706f 7261 7469 6f6e 311f ec XX.

RAW-READ (14) | < 000006d0: 301d 0603 5504 0b13 1653 796d 616e 7465 0...U....***

RAW-READ (14) | < 000006e0: 6320 5472 7573 7420 4e65 7477 6f72 6b31 c Trust Network1

RAW-READ (14) | < 000006f0: 2f30 2d06 0355 0403 1326 5379 6d61 6e74 /0-..U...&XX

RAW-READ (14) | < 00000700: 6563 2043 6c61 7373 2033 2053 6563 7572 XXClass 3 Secur

RAW-READ (14) | < 00000710: 6520 5365 7276 6572 2043 4120 2d20 4734 e Server CA - G4

RAW-READ (14) | < 00000720: 3082 0122 300d 0609 2a86 4886 f70d 0101 0.."0-..*.H..-..

RAW-READ (14) | < 00000730: 0105 0003 8201 0f00 3082 010a 0282 0101 ........0..-....

RAW-READ (14) | < 00000740: 00b2 d805 ca1c 742d b517 5639 c54a 5209 ......t-..V9.JR.

RAW-READ (14) | < 00000750: 96e8 4bd8 0cf1 689f 9a42 2862 c3a5 3053 ..K...h..B(b..0S

RAW-READ (14) | < 00000760: 7e55 1182 5b03 7a0d 2fe1 7904 c9b4 9677 ~U..[.z-/.y....w

RAW-READ (14) | < 00000770: 1981 0194 59f9 bcf7 7a99 2782 2db7 83dd ....Y...z.'.-...

RAW-READ (14) | < 00000780: 5a27 7fb2 037a 9c53 25e9 481f 464f c89d Z'...z.S%.H.FO..

RAW-READ (14) | < 00000790: 29f8 be79 56f6 f7fd d93a 68da 8b4b 8233 )..yV....:h..K.3

RAW-READ (14) | < 000007a0: 4112 c3c8 3ccc d696 7a84 211a 2204 0327 A...<...z.!."..'

RAW-READ (14) | < 000007b0: 178b 1c68 6193 0f0e 5180 331d b4b5 ceeb ...ha...Q.3.....

RAW-READ (14) | < 000007c0: 7ed0 62ac eeb3 7b01 74ef 6935 ebca d53d ~.b...{.t.i5...=

RAW-READ (14) | < 000007d0: a9ee 9798 ca8d aa44 0e25 994a 1596 a4ce .......D.%.J....

RAW-READ (14) | < 000007e0: 6d02 541f 2a6a 26e2 063a 6348 acb4 4cd1 m.T.*j&..:cH..L.

RAW-READ (14) | < 000007f0: 7593 50ff 132f d6da e1c6 18f5 9fc9 255d u.P../........%]

RAW-READ (14) | < }

} [3:193]

Aug 11 17:43:21 YJFS[2618] <Notice>: CFNetwork Diagnostics [3:194] 17:43:21.485 {

{ fd: 14, local 192.168.7.22:60703 => peer ***:12001 ***} RAW-READ continuation

RAW-READ (14) | < data [ 2048 ] bytes {

RAW-READ (14) | < 00000000: f300 3ade 264d b429 09cd 0f3d 236f 164a ..:.&M.)...=#o.J

RAW-READ (14) | < 00000010: 8116 fbf2 8310 c3b8 d6d8 5532 3df1 bd0f ..........U2=...

RAW-READ (14) | < 00000020: bd8c 5295 4a16 977a 5221 6375 2f16 f9c4 ..R.J..zR!cu/...

RAW-READ (14) | < 00000030: 66be f5b5 09d8 ff27 00cd 447c 6f4b 3fb0 f......'..D|oK?.

RAW-READ (14) | < 00000040: f702 0301 0001 a382 0163 3082 015f 3012 .........c0.._0.

RAW-READ (14) | < 00000050: 0603 551d 1301 01ff 0408 3006 0101 ff02 ..U.......0.....

RAW-READ (14) | < 00000060: 0100 3030 0603 551d 1f04 2930 2730 25a0 ..00..U...)0'0%.

RAW-READ (14) | < 00000070: 23a0 2186 1f68 7474 703a 2f2f 7331 2e73 #.!.***

RAW-READ (14) | < 00000080: 796d 6362 2e63 6f6d 2f70 6361 332d 6735 ymcb.com/pca3-g5

RAW-READ (14) | < 00000090: 2e63 726c 300e 0603 551d 0f01 01ff 0404 .crl0...U.......

RAW-READ (14) | < 000000a0: 0302 0106 302f 0608 2b06 0105 0507 0101 ....0/..+.......

RAW-READ (14) | < 000000b0: 0423 3021 301f 0608 2b06 0105 0507 3001 .#0!0...+.....0.

RAW-READ (14) | < 000000c0: 8613 6874 7470 3a2f 2f73 322e 7379 6d63 .***

RAW-READ (14) | < 000000d0: 622e 636f 6d30 6b06 0355 1d20 0464 3062 b.com0k..U. .d0b

RAW-READ (14) | < 000000e0: 3060 060a 6086 4801 86f8 4501 0736 3052 0`.-`.H...E..60R

RAW-READ (14) | < 000000f0: 3026 0608 2b06 0105 0507 0201 161a 6874 0&..+.........ht

RAW-READ (14) | < 00000100: 7470 3a2f 2f77 7777 2e73 796d 6175 7468 tp://***

RAW-READ (14) | < 00000110: 2e63 6f6d 2f63 7073 3028 0608 2b06 0105 .com/cps0(..+...

RAW-READ (14) | < 00000120: 0507 0202 301c 1a1a 6874 7470 3a2f 2f77 ....0..***

RAW-READ (14) | < 00000130: 7777 2e73 796d 6175 7468 2e63 6f6d 2f72 ***/r

RAW-READ (14) | < 00000140: 7061 3029 0603 551d 1104 2230 20a4 1e30 pa0)..U..."0 ..0

RAW-READ (14) | < 00000150: 1c31 1a30 1806 0355 0403 1311 5379 6d61 .1.0...U....XX

RAW-READ (14) | < 00000160: 6e74 6563 504b 492d 312d 3533 3430 1d06 XX-1-5340..

RAW-READ (14) | < 00000170: 0355 1d0e 0416 0414 5f60 cf61 9055 df84 .U......_`.a.U..

RAW-READ (14) | < 00000180: 4314 8a60 2ab2 f57a f443 18ef 301f 0603 C..`*..z.C..0...

RAW-READ (14) | < 00000190: 551d 2304 1830 1680 147f d365 a7c2 ddec U.#..0.....e....

RAW-READ (14) | < 000001a0: bbf0 3009 f343 39fa 02af 3331 3330 0d06 ..0..C9...3130-.

RAW-READ (14) | < 000001b0: 092a 8648 86f7 0d01 010b 0500 0382 0101 .*.H..-.........

RAW-READ (14) | < 000001c0: 005e 9456 49dd 8e2d 65f5 c136 51b6 03e3 .^.VI..-e..6Q...

RAW-READ (14) | < 000001d0: da9e 7319 f21f 59ab 587e 6c26 052c fa81 ..s...Y.X~l&.,..

RAW-READ (14) | < 000001e0: d75c 2317 222c 3793 f786 ec85 e6b0 a3fd .\#.",7.........

RAW-READ (14) | < 000001f0: 1fe2 32a8 456f e1d9 fbb9 afd2 70a0 3242 ..2.Eo......p.2B

RAW-READ (14) | < 00000200: 65bf 84fe 162a 8f3f c5a6 d6a3 937d 43e9 e....*.?.....}C.

RAW-READ (14) | < 00000210: 7421 9135 28f4 63e9 2eed f7f5 5c7f 4b9a t!.5(.c.....\.K.

RAW-READ (14) | < 00000220: b520 e90a bde0 4510 0c14 949a 5da5 e34b . .-..E.....]..K

RAW-READ (14) | < 00000230: 91e8 249b 4640 65f4 2272 cd99 f888 11f5 ..$.F@e."r......

RAW-READ (14) | < 00000240: f37f e633 82e6 a8c5 7efe d008 e225 5808 ...3....~....%X.

RAW-READ (14) | < 00000250: 7168 e6cd a2e6 14de 4e52 242d fde5 7913 qh......NR$-..y.

RAW-READ (14) | < 00000260: 53e7 5e2f 2d4d 1b6d 4015 522b f787 8978 S.^/-M.m@.R+...x

RAW-READ (14) | < 00000270: 1281 6ed9 4daa 2d78 d4c2 2c3d 085f 8791 ..n.M.-x..,=._..

RAW-READ (14) | < 00000280: 9e1f 0eb0 de30 5264 8689 aa9d 669c 0e76 .....0Rd....f..v

RAW-READ (14) | < 00000290: 0c80 f274 d82a f8b8 3ace d7d6 0f11 be6b ...t.*..:......k

RAW-READ (14) | < 000002a0: ab14 f5bd 41a0 2263 89f1 ba0f 6f29 6366 ....A."c....o)cf

RAW-READ (14) | < 000002b0: 2d3f ac8c 72c5 fbc7 e4d4 0ff2 3b4f 8c29 -?..r.......;O.)

RAW-READ (14) | < 000002c0: c700 04d4 3082 04d0 3082 0439 a003 0201 ....0...0..9....

RAW-READ (14) | < 000002d0: 0202 1025 0ce8 e030 612e 9f2b 89f7 054d ...%...0a..+...M

RAW-READ (14) | < 000002e0: 7cf8 fd30 0d06 092a 8648 86f7 0d01 0105 |..0-..*.H..-...

RAW-READ (14) | < 000002f0: 0500 305f 310b 3009 0603 5504 0613 0255 ..0_1.0...U....U

RAW-READ (14) | < 00000300: 5331 1730 1506 0355 040a 130e 5665 7269 S1.0...U.-..XX

RAW-READ (14) | < 00000310: 5369 676e 2c20 496e 632e 3137 3035 0603 XX, Inc.1705..

RAW-READ (14) | < 00000320: 5504 0b13 2e43 6c61 7373 2033 2050 7562 U....Class 3 Pub

RAW-READ (14) | < 00000330: 6c69 6320 5072 696d 6172 7920 4365 7274 lic XXXX

RAW-READ (14) | < 00000340: 6966 6963 6174 696f 6e20 4175 7468 6f72 XXXAuthor

RAW-READ (14) | < 00000350: 6974 7930 1e17 0d30 3631 3130 3830 3030 ity0..-061108000

RAW-READ (14) | < 00000360: 3030 305a 170d 3231 3131 3037 3233 3539 000Z.-2111072359

RAW-READ (14) | < 00000370: 3539 5a30 81ca 310b 3009 0603 5504 0613 59Z0..1.0...U...

RAW-READ (14) | < 00000380: 0255 5331 1730 1506 0355 040a 130e 5665 .US1.0...U.-..

RAW-READ (14) | < 00000390: 7269 5369 676e 2c20 496e 632e 311f 301d XXXX, Inc.1.0.

RAW-READ (14) | < 000003a0: 0603 5504 0b13 1656 6572 6953 6967 6e20 ..U....***

RAW-READ (14) | < 000003b0: 5472 7573 7420 4e65 7477 6f72 6b31 3a30 Trust Network1:0

RAW-READ (14) | < 000003c0: 3806 0355 040b 1331 2863 2920 3230 3036 8..U...1(c) 2006

RAW-READ (14) | < 000003d0: 2056 6572 6953 6967 6e2c 2049 6e63 2e20 XXXX, Inc.

RAW-READ (14) | < 000003e0: 2d20 466f 7220 6175 7468 6f72 697a 6564 - For authorized

RAW-READ (14) | < 000003f0: 2075 7365 206f 6e6c 7931 4530 4306 0355 use only1E0C..U

RAW-READ (14) | < 00000400: 0403 133c 5665 7269 5369 676e 2043 6c61 ...<XXXXCla

RAW-READ (14) | < 00000410: 7373 2033 2050 7562 6c69 6320 5072 696d ss 3 Public Prim

RAW-READ (14) | < 00000420: 6172 7920 4365 7274 6966 6963 6174 696f ary Certificatio

RAW-READ (14) | < 00000430: 6e20 4175 7468 6f72 6974 7920 2d20 4735 n Authority - G5

RAW-READ (14) | < 00000440: 3082 0122 300d 0609 2a86 4886 f70d 0101 0.."0-..*.H..-..

RAW-READ (14) | < 00000450: 0105 0003 8201 0f00 3082 010a 0282 0101 ........0..-....

RAW-READ (14) | < 00000460: 00af 2408 0829 7a35 9e60 0caa e74b 3b4e ..$..)z5.`...K;N

RAW-READ (14) | < 00000470: dc7c bc3c 451c bb2b e0fe 2902 f957 08a3 .|.<E..+..)..W..

RAW-READ (14) | < 00000480: 6485 1527 f5f1 adc8 3189 5d22 e82a aaa6 d..'....1.]".*..

RAW-READ (14) | < 00000490: 42b3 8ff8 b955 b7b1 b74b b3fe 8f7e 0757 B....U...K...~.W

RAW-READ (14) | < 000004a0: ecef 43db 6662 1561 cf60 0da4 d8de f8e0 ..C.fb.a.`-.....

RAW-READ (14) | < 000004b0: c362 083d 5413 eb49 ca59 5485 26e5 2b8f .b.=T..I.YT.&.+.

RAW-READ (14) | < 000004c0: 1b9f ebf5 a191 c233 49d8 4363 6a52 4bd2 .......3I.CcjRK.

RAW-READ (14) | < 000004d0: 8fe8 7051 4dd1 8969 7bc7 70f6 b3dc 1274 ..pQM..i{.p....t

RAW-READ (14) | < 000004e0: db7b 5d4b 56d3 96bf 1577 a1b0 f4a2 25f2 .{]KV....w....%.

RAW-READ (14) | < 000004f0: af1c 9267 18e5 f406 04ef 90b9 e400 e4dd ...g............

RAW-READ (14) | < 00000500: 3ab5 19ff 02ba f43c eee0 8beb 378b ecf4 :......<....7...

RAW-READ (14) | < 00000510: d7ac f2f6 f03d afdd 7591 3319 1d1c 40cb .....=..u.3...@.

RAW-READ (14) | < 00000520: 7424 1921 93d9 14fe ac2a 52c7 8fd5 0449 t$.!.....*R....I

RAW-READ (14) | < 00000530: e48d 6347 883c 6983 cbfe 47bd 2b7e 4fc5 ..cG.<i...G.+~O.

RAW-READ (14) | < 00000540: 95ae 0e9d d4d1 43c0 6773 e314 087e e53f ......C.gs...~.?

RAW-READ (14) | < 00000550: 9f73 b833 0acf 5d3f 3487 968a ee53 e825 .s.3-.]?4....S.%

RAW-READ (14) | < 00000560: 1502 0301 0001 a382 019b 3082 0197 300f ..........0...0.

RAW-READ (14) | < 00000570: 0603 551d 1301 01ff 0405 3003 0101 ff30 ..U.......0....0

RAW-READ (14) | < 00000580: 3106 0355 1d1f 042a 3028 3026 a024 a022 1..U...*0(0&.$."

RAW-READ (14) | < 00000590: 8620 6874 7470 3a2f 2f63 726c 2e76 6572 . XXXX

RAW-READ (14) | < 000005a0: 6973 6967 6e2e 636f 6d2f 7063 6133 2e63 isign.com/pca3.c

RAW-READ (14) | < 000005b0: 726c 300e 0603 551d 0f01 01ff 0404 0302 rl0...U.........

RAW-READ (14) | < 000005c0: 0106 303d 0603 551d 2004 3630 3430 3206 ..0=..U. .60402.

RAW-READ (14) | < 000005d0: 0455 1d20 0030 2a30 2806 082b 0601 0505 .U. .0*0(..+....

RAW-READ (14) | < 000005e0: 0702 0116 1c68 7474 7073 3a2f 2f77 7777 .....XXXXX

RAW-READ (14) | < 000005f0: 2e76 6572 6973 6967 6e2e 636f 6d2f 6370 .XX/cp

RAW-READ (14) | < 00000600: 7330 1d06 0355 1d0e 0416 0414 7fd3 65a7 s0...U........e.

RAW-READ (14) | < 00000610: c2dd ecbb f030 09f3 4339 fa02 af33 3133 .....0..C9...313

RAW-READ (14) | < 00000620: 306d 0608 2b06 0105 0507 010c 0461 305f 0m..+........a0_

RAW-READ (14) | < 00000630: a15d a05b 3059 3057 3055 1609 696d 6167 .].[0Y0W0U..imag

RAW-READ (14) | < 00000640: 652f 6769 6630 2130 1f30 0706 052b 0e03 e/gif0!0.0...+..

RAW-READ (14) | < 00000650: 021a 0414 8fe5 d31a 86ac 8d8e 6bc3 cf80 ............k...

RAW-READ (14) | < 00000660: 6ad4 4818 2c7b 192e 3025 1623 6874 7470 j.H.,{..0%.#http

RAW-READ (14) | < 00000670: 3a2f 2f6c 6f67 6f2e 7665 7269 7369 676e ://XX

RAW-READ (14) | < 00000680: 2e63 6f6d 2f76 736c 6f67 6f2e 6769 6630 .com/XX

RAW-READ (14) | < 00000690: 3406 082b 0601 0505 0701 0104 2830 2630 4..+........(0&0

RAW-READ (14) | < 000006a0: 2406 082b 0601 0505 0730 0186 1868 7474 $..+.....0...

RAW-READ (14) | < 000006b0: 703a 2f2f 6f63 7370 2e76 6572 6973 6967 XX

RAW-READ (14) | < 000006c0: 6e2e 636f 6d30 3e06 0355 1d25 0437 3035 0>..U.%.705

RAW-READ (14) | < 000006d0: 0608 2b06 0105 0507 0301 0608 2b06 0105 ..+.........+...

RAW-READ (14) | < 000006e0: 0507 0302 0608 2b06 0105 0507 0303 0609 ......+.........

RAW-READ (14) | < 000006f0: 6086 4801 86f8 4204 0106 0a60 8648 0186 `.H...B...-`.H..

RAW-READ (14) | < 00000700: f845 0108 0130 0d06 092a 8648 86f7 0d01 .E...0-..*.H..-.

RAW-READ (14) | < 00000710: 0105 0500 0381 8100 1302 ddf8 e886 00f2 ................

RAW-READ (14) | < 00000720: 5af8 f820 0c59 8862 07ce cef7 4ef9 bb59 Z.. .Y.b....N..Y

RAW-READ (14) | < 00000730: a198 e5e1 38dd 4ebc 6618 d3ad eb18 f20d ....8.N.f......-

RAW-READ (14) | < 00000740: c96d 3e4a 9420 c33c babd 6554 c6af 44b3 .m>J. .<..eT..D.

RAW-READ (14) | < 00000750: 10ad 2c6b 3eab d707 b6b8 8163 c5f9 5e2e ..,k>......c..^.

RAW-READ (14) | < 00000760: e52a 67ce cd33 0c2a d789 5603 231f b3be .*g..3.*..V.#...

RAW-READ (14) | < 00000770: e83a 0859 b4ec 4535 f78a 5bff 66cf 50af .:.Y..E5..[.f.P.

RAW-READ (14) | < 00000780: c66d 578d 1978 b7b9 a2d1 57ea 1f9a 4baf .mW..x....W...K.

RAW-READ (14) | < 00000790: bac9 8e12 7ec6 bdff 0002 4030 8202 3c30 ....~.....@0..<0

RAW-READ (14) | < 000007a0: 8201 a502 103c 9131 cb1f f6d0 1b0e 9ab8 .....<.1........

RAW-READ (14) | < 000007b0: d044 bf12 be30 0d06 092a 8648 86f7 0d01 .D...0-..*.H..-.

RAW-READ (14) | < 000007c0: 0105 0500 305f 310b 3009 0603 5504 0613 ....0_1.0...U...

RAW-READ (14) | < 000007d0: 0255 5331 1730 1506 0355 040a 130e 5665 .US1.0...U.-..XX

RAW-READ (14) | < 000007e0: 7269 5369 676e 2c20 496e 632e 3137 3035 XX, Inc.1705

RAW-READ (14) | < 000007f0: 0603 5504 0b13 2e43 6c61 7373 2033 2050 ..U....Class 3 P

RAW-READ (14) | < }

} [3:194]

Aug 11 17:43:21 YJFS[2618] <Notice>: CFNetwork Diagnostics [3:195] 17:43:21.493 {

ioLogger

logStruct: array [4] {

BEGIN SSL RECORD DECODE: READ

decodeHandshake [0] @ 0x125895635, version 300, length 81 (0x51)

ServerHello (2, 0x2), length 77 (0x4d)

END SSL RECORD DECODE: READ

}

} [3:195]

Aug 11 17:43:21 YJFS[2618] <Notice>: CFNetwork Diagnostics [3:196] 17:43:21.497 {

TCP Connection Created

conn: 0x124d3fee0 for name ***, port 12001

} [3:196]

Aug 11 17:43:21 YJFS[2618] <Notice>: CFNetwork Diagnostics [3:197] 17:43:21.498 {

TCP Connection Start

conn: 0x124d3fee0

} [3:197]

Aug 11 17:43:21 YJFS[2618] <Notice>: CFNetwork Diagnostics [3:198] 17:43:21.740 {

SocketStream TCP Connection Complete

conn: 0x124d3fee0

fd: 14

error: 0

} [3:198]

Aug 11 17:43:21 YJFS[2618] <Notice>: CFNetwork Diagnostics [3:199] 17:43:21.743 {

{ fd: 14, local 192.168.7.22:60704 => peer ***:12001 XXXX} RAW-SENT 201

RAW-SENT (14) | > data [ 201 ] bytes {

RAW-SENT (14) | > 00000000: 1603 0300 c401 0000 c003 0355 c9e6 e11c ...........U....

RAW-SENT (14) | > 00000010: 0b71 e5bc 8776 b617 a0d4 aa05 84e1 1693 .q...v..........

RAW-SENT (14) | > 00000020: 8199 1498 25cd dd66 92b7 8500 0042 00ff ....%..f.....B..

RAW-SENT (14) | > 00000030: c02c c02b c024 c023 c00a c009 c008 c030 .,.+.$.#.-.....0

RAW-SENT (14) | > 00000040: c02f c028 c027 c014 c013 c012 009f 009e ./.(.'..........

RAW-SENT (14) | > 00000050: 006b 0067 0039 0033 0016 009d 009c 003d .k.g.9.3.......=

RAW-SENT (14) | > 00000060: 003c 0035 002f 000a c007 c011 0005 0004 .<.5./.-........

RAW-SENT (14) | > 00000070: 0100 0055 0000 0020 001e 0000 1b79 6a66 ...U... .....yjf

RAW-SENT (14) | > 00000080: 782d 6f70 656e 7374 7265 616d 2e66 7864 x-XXXX

RAW-SENT (14) | > 00000090: 6e6c 642e 6d6f 6269 000a 0008 0006 0017 nXXXi.-......

RAW-SENT (14) | > 000000a0: 0018 0019 000b 0002 0100 000d 000e 000c ...........-....

RAW-SENT (14) | > 000000b0: 0501 0401 0201 0503 0403 0203 0005 0005 ................

RAW-SENT (14) | > 000000c0: 0100 0000 0000 1200 00 .........

RAW-SENT (14) | > }

} [3:199]

Aug 11 17:43:21 YJFS[2618] <Notice>: CFNetwork Diagnostics [3:200] 17:43:21.744 {

ioLogger

logStruct: array [4] {

BEGIN SSL RECORD DECODE: SENT

decodeHandshake [0] @ 0x124e76555, version 303, length 196 (0xc4)

ClientHello (1, 0x1), length 192 (0xc0)

END SSL RECORD DECODE: SENT

}

} [3:200]

Aug 11 17:43:22 YJFS[2618] <Notice>: CFNetwork Diagnostics [3:201] 17:43:21.997 {

{ fd: 14, local 192.168.7.22:60704 => peer XX:12001 XXXi} RAW-READ 1448

RAW-READ (14) | < data [ 1448 ] bytes {

RAW-READ (14) | < 00000000: 1603 0000 5102 0000 4d03 0055 c9e6 972a ....Q...M..U...*

RAW-READ (14) | < 00000010: e336 9718 76e3 f3ba 1117 222a 9e29 0ca1 .6..v....."*.)..

RAW-READ (14) | < 00000020: 4904 7f8f d78d 2633 242d 0c20 83c1 178f I.....&3$-. ....

RAW-READ (14) | < 00000030: 0490 7b8a aaad dcec 9b60 6ac6 54df 4b91 ..{......`j.T.K.

RAW-READ (14) | < 00000040: 4f53 ffd7 8215 013f e69e 2fb9 0035 0000 OS.....?../..5..

RAW-READ (14) | < 00000050: 05ff 0100 0100 1603 0011 800b 0011 7c00 ..............|.

RAW-READ (14) | < 00000060: 1179 0005 1d30 8205 1930 8204 01a0 0302 .y...0...0......

RAW-READ (14) | < 00000070: 0102 0210 6df3 39d6 6518 aa3b 56f6 3131 ....m.9.e..;V.11

RAW-READ (14) | < 00000080: 955d 73eb 300d 0609 2a86 4886 f70d 0101 .]s.0-..*.H..-..

RAW-READ (14) | < 00000090: 0b05 0030 7e31 0b30 0906 0355 0406 1302 ...0~1.0...U....

RAW-READ (14) | < 000000a0: 5553 311d 301b 0603 5504 0a13 1453 796d US1.0...U.-..***

RAW-READ (14) | < 000000b0: 616e 7465 6320 436f 7270 6f72 6174 696f *** Corporatio

RAW-READ (14) | < 000000c0: 6e31 1f30 1d06 0355 040b 1316 5379 6d61 n1.0...U....XX

RAW-READ (14) | < 000000d0: 6e74 6563 2054 7275 7374 204e 6574 776f XXTrust Netwo

RAW-READ (14) | < 000000e0: 726b 312f 302d 0603 5504 0313 2653 796d rk1/0-..U...&XX

RAW-READ (14) | < 000000f0: 616e 7465 6320 436c 6173 7320 3320 5365 XXXXX 3 Se

RAW-READ (14) | < 00000100: 6375 7265 2053 6572 7665 7220 4341 202d cure XXXCA -

RAW-READ (14) | < 00000110: 2047 3430 1e17 0d31 3530 3330 3930 3030 G40..-150309000

RAW-READ (14) | < 00000120: 3030 305a 170d 3136 3033 3038 3233 3539 000Z.-1603082359

RAW-READ (14) | < 00000130: 3539 5a30 8197 310b 3009 0603 5504 0613 59Z0..1.0...U...

RAW-READ (14) | < 00000140: 0255 5331 1130 0f06 0355 0408 0c08 4e65 .US1.0...U....Ne

RAW-READ (14) | < 00000150: 7720 596f 726b 3111 300f 0603 5504 070c w York1.0...U...

RAW-READ (14) | < 00000160: 084e 6577 2059 6f72 6b31 2130 1f06 0355 .New York1!0...U

RAW-READ (14) | < 00000170: 040a 0c18 5374 6174 6520 5374 7265 6574 .-..***

RAW-READ (14) | < 00000180: 2043 6f72 706f 7261 7469 6f6e 3125 3023 Corporation1%0#

RAW-READ (14) | < 00000190: 0603 5504 0b0c 1c53 7461 7465 2053 7472 ..U....XXXXX

RAW-READ (14) | < 000001a0: 6565 7420 476c 6f62 616c 2045 7863 6861 XXXXX

RAW-READ (14) | < 000001b0: 6e67 6531 1830 1606 0355 0403 0c0f 7777 XX...U....ww

RAW-READ (14) | < 000001c0: 772e 6678 646e 6c64 2e6d 6f62 6930 8201 ***..

RAW-READ (14) | < 000001d0: 2230 0d06 092a 8648 86f7 0d01 0101 0500 "0-..*.H..-.....

RAW-READ (14) | < 000001e0: 0382 010f 0030 8201 0a02 8201 0100 e760 .....0..-......`

RAW-READ (14) | < 000001f0: 7007 54d2 8a43 a33d 9e9d dc73 6c75 f59a p.T..C.=...slu..

RAW-READ (14) | < 00000200: 3364 3d5c 4097 6621 6607 70de d8a1 4bf9 3d=\@.f!f.p...K.

RAW-READ (14) | < 00000210: 0ec5 9472 3c71 0246 64ea d3fa 453a 9c08 ...r<q.Fd...E:..

RAW-READ (14) | < 00000220: 469b 26ca 13cd 69d8 2490 b08d 6949 9963 F.&...i.$...iI.c

RAW-READ (14) | < 00000230: 1d69 5bb2 5c62 7173 f45e 5826 ef9f 27d5 .i[.\bqs.^X&..'.

RAW-READ (14) | < 00000240: 2b25 aa8f f737 0b7b 62be 16f7 04eb a8e3 +%...7.{b.......

RAW-READ (14) | < 00000250: 4943 ee2b c53d 9461 7942 eea5 761f f945 IC.+.=.ayB..v..E

RAW-READ (14) | < 00000260: f17f 6581 5b37 40e9 0624 e462 e721 440d ..e.[7@..$.b.!D-

RAW-READ (14) | < 00000270: 605c 57e4 3925 e737 699d e587 7ac4 0d25 `\W.9%.7i...z.-%

RAW-READ (14) | < 00000280: 2f02 3e13 399d 5a79 6d86 ce69 aa8c 530e /.>.9.Zym..i..S.

RAW-READ (14) | < 00000290: 1d8c 6482 7999 cdeb ae50 3c00 8d54 022f ..d.y....P<..T./

RAW-READ (14) | < 000002a0: ffc9 9bb4 0e1f cf87 2a40 736b b57c f529 ........*@sk.|.)

RAW-READ (14) | < 000002b0: f52a ea2c 8e9f d1ea f2a1 26dc f56f 18ad .*.,......&..o..

RAW-READ (14) | < 000002c0: 02ad 5db2 4beb 9fa8 9a26 1542 bcac 99e1 ..].K....&.B....

RAW-READ (14) | < 000002d0: 10ba da4b 67a4 27bb be28 4c54 55f1 d054 ...Kg.'..(LTU..T

RAW-READ (14) | < 000002e0: 1783 9be2 e4a6 0f56 fa2e 8df2 3d27 0203 .......V....='..

RAW-READ (14) | < 000002f0: 0100 01a3 8201 7730 8201 7330 2906 0355 ......w0..s0)..U

RAW-READ (14) | < 00000300: 1d11 0422 3020 820d 2a2e 6678 646e 6c64 ..."0 .-*.

RAW-READ (14) | < 00000310: 2e6d 6f62 6982 0f77 7777 2e66 7864 6e6c .***

RAW-READ (14) | < 00000320: 642e 6d6f 6269 3009 0603 551d 1304 0230 d.mobi0...U....0

RAW-READ (14) | < 00000330: 0030 0e06 0355 1d0f 0101 ff04 0403 0205 .0...U..........

RAW-READ (14) | < 00000340: a030 1d06 0355 1d25 0416 3014 0608 2b06 .0...U.%..0...+.

RAW-READ (14) | < 00000350: 0105 0507 0301 0608 2b06 0105 0507 0302 ........+.......

RAW-READ (14) | < 00000360: 3065 0603 551d 2004 5e30 5c30 5a06 0a60 0e..U. .^0\0Z.-`

RAW-READ (14) | < 00000370: 8648 0186 f845 0107 3630 4c30 2306 082b .H...E..60L0#..+

RAW-READ (14) | < 00000380: 0601 0505 0702 0116 1768 7474 7073 3a2f .........https:/

RAW-READ (14) | < 00000390: 2f64 2e73 796d 6362 2e63 6f6d 2f63 7073 /d.symcb.com/cps

RAW-READ (14) | < 000003a0: 3025 0608 2b06 0105 0507 0202 3019 1a17 0%..+.......0...

RAW-READ (14) | < 000003b0: 6874 7470 733a 2f2f 642e 7379 6d63 622e XXXX

RAW-READ (14) | < 000003c0: 636f 6d2f 7270 6130 1f06 0355 1d23 0418 com/rpa0...U.#..

RAW-READ (14) | < 000003d0: 3016 8014 5f60 cf61 9055 df84 4314 8a60 0..._`.a.U..C..`

RAW-READ (14) | < 000003e0: 2ab2 f57a f443 18ef 302b 0603 551d 1f04 *..z.C..0+..U...

RAW-READ (14) | < 000003f0: 2430 2230 20a0 1ea0 1c86 1a68 7474 703a $0"0 ......http:

RAW-READ (14) | < 00000400: 2f2f 7373 2e73 796d 6362 2e63 6f6d 2f73 //ss.symcb.com/s

RAW-READ (14) | < 00000410: 732e 6372 6c30 5706 082b 0601 0505 0701 s.crl0W..+......

RAW-READ (14) | < 00000420: 0104 4b30 4930 1f06 082b 0601 0505 0730 ..K0I0...+.....0

RAW-READ (14) | < 00000430: 0186 1368 7474 703a 2f2f 7373 2e73 796d .XXXXX

RAW-READ (14) | < 00000440: 6364 2e63 6f6d 3026 0608 2b06 0105 0507 cd.com0&..+.....

RAW-READ (14) | < 00000450: 3002 861a 6874 7470 3a2f 2f73 732e 7379 0..XXXXX

RAW-READ (14) | < 00000460: 6d63 622e 636f 6d2f 7373 2e63 7274 300d mcb.com/ss.crt0-

RAW-READ (14) | < 00000470: 0609 2a86 4886 f70d 0101 0b05 0003 8201 ..*.H..-........

RAW-READ (14) | < 00000480: 0100 71f5 6d19 1b6e 0227 f685 1501 c4e8 ..q.m..n.'......

RAW-READ (14) | < 00000490: 10de 4fa0 0252 7f21 7127 b415 9a87 0106 ..O..R.!q'......

RAW-READ (14) | < 000004a0: 713b fd89 30ca 843f cf0c 7fb3 d2cb 56a8 q;..0..?......V.

RAW-READ (14) | < 000004b0: c6e3 b041 5dbe a295 e7fe 1b70 d4a7 2e5e ...A]......p...^

RAW-READ (14) | < 000004c0: 85ae 1c0c 42f8 a1eb fe07 db97 1968 7325 ....B........hs%

RAW-READ (14) | < 000004d0: 78d2 7b75 ef47 8ac0 9783 1d53 3589 9fe9 x.{u.G.....S5...

RAW-READ (14) | < 000004e0: ffde eebc bf44 bae1 41b2 8ed1 bf94 3feb .....D..A.....?.

RAW-READ (14) | < 000004f0: 6edb 6385 f58a 5021 9c42 b925 970c b6ca n.c...P!.B.%....

RAW-READ (14) | < 00000500: 5daa ebf2 d89f 01f2 b407 3d9b 63ee 740f ].........=.c.t.

RAW-READ (14) | < 00000510: 0777 982b c57c 484c 7671 d957 4d20 50c9 .w.+.|HLvq.WM P.

RAW-READ (14) | < 00000520: bb62 402e 219e cdd0 57c7 8990 7460 dea9 .b@.!...W...t`..

RAW-READ (14) | < 00000530: a6aa cb04 5ba2 9f3f 5dde 949d fa3c 444c ....[..?]....<DL

RAW-READ (14) | < 00000540: 1915 3b49 f480 150d a89e 8311 2443 afd6 ..;I...-....$C..

RAW-READ (14) | < 00000550: 4da7 9b4b 9d47 efb4 34dd b735 23d6 23c3 M..K.G..4..5#.#.

RAW-READ (14) | < 00000560: 4a8f 49c0 1917 afb5 3030 e7e9 088e 221d J.I.....00....".

RAW-READ (14) | < 00000570: 22c2 bfa3 4c55 70dd 79a3 d958 7a7f 7130 "...LUp.y..Xz.q0

RAW-READ (14) | < 00000580: 2501 0005 3c30 8205 3830 8204 20a0 0302 %...<0..80.. ...

RAW-READ (14) | < 00000590: 0102 0210 513f b974 3870 b734 4041 8d30 ....Q?.t8p.4@A.0

RAW-READ (14) | < 000005a0: 9306 99ff 300d 0609 ....0-..

RAW-READ (14) | < }

} [3:201]

Aug 11 17:43:22 YJFS[2618] <Notice>: CFNetwork Diagnostics [3:202] 17:43:22.003 {

ioLogger

logStruct: array [4] {

BEGIN SSL RECORD DECODE: READ

decodeHandshake [0] @ 0x125099435, version 300, length 81 (0x51)

ServerHello (2, 0x2), length 77 (0x4d)

END SSL RECORD DECODE: READ

}

} [3:202]

Aug 11 17:43:22 YJFS[2618] <Notice>: CFNetwork Diagnostics [3:203] 17:43:22.008 {

TCP Connection Created

conn: 0x124d3fee0 for name XXXX, port 12001

} [3:203]

Aug 11 17:43:22 YJFS[2618] <Notice>: CFNetwork Diagnostics [3:204] 17:43:22.009 {

TCP Connection Start

conn: 0x124d3fee0

} [3:204]

...


Connection established properly through openSSL

openssl s_client -showcerts -connect ***:ZZZ-ssl3

CONNECTED(00000003)

depth=3 /C=US/O=***, Inc./OU=XXXX

verify error:num=19:self signed certificate in certificate chain

verify return:0

---

Certificate chain

0 s:/C=US/ST=New York/L=New York/O=***/OU=***/CN=***

i:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4

-----BEGIN CERTIFICATE-----

MIIFGTCCBAGgAwIBAgIQbfM51mUYqjtW9jExlV1z6zANBgkqhkiG9w0BAQsFADB+

....

VXDdeaPZWHp/cTAlAQ==

-----END CERTIFICATE-----

1 s:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4

i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5

-----BEGIN CERTIFICATE-----

MIIFODCCBCCgAwIBAgIQUT+5dDhwtzRAQY0wkwaZ/zANBgkqhkiG9w0BAQsFADCB

...

Kvi4Os7X1g8RvmurFPW9QaAiY4nxug9vKWNmLT+sjHLF+8fk1A/yO0+MKcc=

-----END CERTIFICATE-----

2 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5

i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority

-----BEGIN CERTIFICATE-----

MIIE0DCCBDmgAwIBAgIQJQzo4DBhLp8rifcFTXz4/TANBgkqhkiG9w0BAQUFADBf

...

tOxFNfeKW/9mz1Cvxm1XjRl4t7mi0VfqH5pLr7rJjhJ+xr3/

-----END CERTIFICATE-----

3 s:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority

i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority

-----BEGIN CERTIFICATE-----

MIICPDCCAaUCEDyRMcsf9tAbDpq40ES/Er4wDQYJKoZIhvcNAQEFBQAwXzELMAkG

...

2HUw19JlYD1n1khVdWk/kfVIC0dpImmClr7JyDiGSnoscxlIaU5rfGW/D/xwzoiQ

-----END CERTIFICATE-----

---

Server certificate

subject=/C=US/ST=New York/L=New York/O=XXXX/OU=XXXe/CN=***

issuer=/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4

---

No client certificate CA names sent

---

SSL handshake has read 4655 bytes and written 434 bytes

---

New, TLSv1/SSLv3, Cipher is AES256-SHA

Server public key is 2048 bit

Secure Renegotiation IS supported

Compression: NONE

Expansion: NONE

SSL-Session:

Protocol : SSLv3

Cipher : AES256-SHA

Session-ID: A159CA3FAFF5A23E7CE47C2C1DD21C91310A3820F5A5D1EDE38D451613CAE704

Session-ID-ctx:

Master-Key: 3E4F812B8903562B501A144A9228F6001497D325F575C1C4AB5A84E8C9974756923FDE479AD1DD49B68619C7CFEDFCF3

Key-Arg : None

Start Time: 1439320578

Timeout : 7200 (sec)

Verify return code: 0 (ok)


Tested with TLSTool

$ build/Debug/TLSTool s_client -connect yjfx-openstream.fxdnld.mobi:12001

* input stream did open

* output stream did open

* output stream has space

* trust result: unspecified

* certificate subjects:

* 0 XXXX

* 1 Symantec Class 3 Secure Server CA - G4

* 2 VeriSign Class 3 Public Primary Certification Authority - G5

* output stream has space


Note

Making a TCP connection to the same server in the app built with Xcode 6.4 works perfectly. And also app works perfectly with other https and http connection.


Answered by DTS Engineer in 40217022

To start, given that you're using NSStream rather than NSURL{Session,Connection}, App Transport Security is not relevant. ATS only applies to high-level HTTP[S] APIs.

Next, it seems that you're server only supports SSL 3.0. You can see this in the OpenSSL log you posted:

SSL-Session: Protocol : SSLv3

NSStream on iOS 9 requires TLS 1.0 or later by default. You can lower this default via 

kCFStreamPropertySSLContext
and 
SSLSetProtocolVersionMin
as shown in the code below. But you really should not do that. SSL 3.0 is woefully insecure, to the point that you might as well send data in plaintext. 
context = (SSLContextRef) CFReadStreamCopyProperty(
    (__bridge CFReadStreamRef) self.inputStream,
    kCFStreamPropertySSLContext
);
assert(context != NULL);

success = SSLSetProtocolVersionMin(context, kSSLProtocol3) == errSecSuccess;
assert(success);

CFRelease(context);

Share and Enjoy
—
Quinn "The Eskimo!"
Apple Developer Relations, Developer Technical Support, Core OS/Hardware 

let myEmail = "eskimo" + "1" + "@apple.com"
Replies  2
Boosts  0
Views  4.2k
Participants  3
DTS Engineer OP
Apple
Aug ’15
Accepted Answer

To start, given that you're using NSStream rather than NSURL{Session,Connection}, App Transport Security is not relevant. ATS only applies to high-level HTTP[S] APIs.

Next, it seems that you're server only supports SSL 3.0. You can see this in the OpenSSL log you posted:

SSL-Session: Protocol : SSLv3

NSStream on iOS 9 requires TLS 1.0 or later by default. You can lower this default via 

kCFStreamPropertySSLContext
and 
SSLSetProtocolVersionMin
as shown in the code below. But you really should not do that. SSL 3.0 is woefully insecure, to the point that you might as well send data in plaintext. 
context = (SSLContextRef) CFReadStreamCopyProperty(
    (__bridge CFReadStreamRef) self.inputStream,
    kCFStreamPropertySSLContext
);
assert(context != NULL);

success = SSLSetProtocolVersionMin(context, kSSLProtocol3) == errSecSuccess;
assert(success);

CFRelease(context);

Share and Enjoy
—
Quinn "The Eskimo!"
Apple Developer Relations, Developer Technical Support, Core OS/Hardware 

let myEmail = "eskimo" + "1" + "@apple.com"
0
Alex Lima OP
Sep ’15

As declare the variable 'context' and 'success'.It is to show the most complete code?


thank you

0
SSL Handshake failed 9801 - TCP connection - Xcode 7
First post date Last post date
 
 
Q