SSL issues on ios 15.4 beta

Question

KristapsK OP

Created Feb ’22

Replies 3

Boosts 0

Views 3.2k

Participants 3

Hello,

Installed iOS 15.4 beta on my test device, made a build launched the app, and when i try to log in i'm getting

Task <D85AA032-FE4E-4CA3-86A2-FF2DB4D57DA3>.<1> finished with error [-1200] Error Domain=NSURLErrorDomain Code=-1200 "An SSL error has occurred and a secure connection to the server cannot be made." UserInfo={NSErrorFailingURLStringKey=https://url.here, NSLocalizedRecoverySuggestion=Would you like to connect to the server anyway?, _kCFStreamErrorDomainKey=3, _NSURLErrorFailingURLSessionTaskErrorKey=LocalDataTask <D85AA032-FE4E-4CA3-86A2-FF2DB4D57DA3>.<1>, _NSURLErrorRelatedURLSessionTaskErrorKey=(
  "LocalDataTask <D85AA032-FE4E-4CA3-86A2-FF2DB4D57DA3>.<1>"
), NSLocalizedDescription=An SSL error has occurred and a secure connection to the server cannot be made., NSErrorFailingURLKey=https://url.here, NSUnderlyingError=0x283c27360 {Error Domain=kCFErrorDomainCFNetwork Code=-1200 "(null)" UserInfo={_kCFStreamPropertySSLClientCertificateState=0, _kCFNetworkCFStreamSSLErrorOriginalValue=-9816, _kCFStreamErrorDomainKey=3, _kCFStreamErrorCodeKey=-9816, _NSURLErrorNWPathKey=satisfied (Path is satisfied), viable, interface: en0, ipv4, dns}}, _kCFStreamErrorCodeKey=-9816}

I did find that adding following code into info.plist fixes it.

    <key>NSExceptionDomains</key>
    <dict>
        <key>domain</key>
        <dict>
            <!-- Allow subdomains -->
            <key>NSIncludesSubdomains</key>
            <true/>
            <!-- Disable some extra cypher suites -->
            <key>NSExceptionRequiresForwardSecrecy</key>
            <false/>
        </dict>
    </dict>

Did try also setting minimum TLS version to 1.2, which server is using, but it didn't help.

Does anyone know what might be the issue? Note that there is no such issue on all other ios versions. Is it a beta defect or something? or is apple introducing some big changes in iOS 15.4?

Regards, Kris

Boost

Answer 1

Systems Engineer OP

Apple

Feb ’22

or is apple introducing some big changes in iOS 15.4?

Not that I'm aware of.

Regarding:

I did find that adding following code into info.plist fixes it.

What cipher suites are you disabling? Are you using RSA for key exchange or Elliptic Curve?

Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com

0

Answer 2

KristapsK OP

Feb ’22

Sorry, those comments are from the code that i found, we don't cypher this request on the app side afaik.

Also if i use Charles to debug the request, then it works fine and the request goes through without any issues.

0

Answer 3

Systems Engineer OP

Apple

Feb ’22

Also if i use Charles to debug the request, then it works fine and the request goes through without any issues.

This suggests that there is either something wrong with our certificate handling in iOS 15.4 or there is something wrong with your certificate at this present time. However, this is just a guess based on the information you have provided. From here we can go about this in one of two ways:

You can post extra information like the URL that you are connecting to here in the Forums so that I can take a deeper look at this.
You can open up a TSI and we can discuss this matter in a closed setting.

Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com

0