Universal Links Stops Working Randomly

Universal links stops working randomly, When i tried this curl API test i found strange result

  • Case 1: When the curl test return association JSON response it works fine
  • Case 2: Sometimes the curl test fails and association JSON response is not returned for the same log is below: (Actual domain is replaced by mydomain.com)
  1. Https enabled
  2. No redirections
  3. Association added in .well-known folder
  4. Works randomly without any change in sever
  5. IP added as exception in blacklist
  6. Applebot added as:
User-agent: Applebot
Allow: /.well-known/

Curl API Test Response:

Using Terminal: 
curl -v https://app-site-association.cdn-apple.com/a/v1/mydomain.com

*  Trying 8.241.155.124:443...
* Connected to app-site-association.cdn-apple.com (8.241.155.124) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/cert.pem
* CApath: none
* (304) (OUT), TLS handshake, Client hello (1):
* (304) (IN), TLS handshake, Server hello (2):
* (304) (IN), TLS handshake, Unknown (8):
* (304) (IN), TLS handshake, Certificate (11):
* (304) (IN), TLS handshake, CERT verify (15):
* (304) (IN), TLS handshake, Finished (20):
* (304) (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / AEAD-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
* subject: CN=app-site-association.cdn-apple.com; OU=management:idms.group.5707244; O=Apple Inc.; ST=California; C=US
* start date: Sep 1 20:44:29 2021 GMT
* expire date: Oct 1 20:44:28 2022 GMT
* subjectAltName: host "app-site-association.cdn-apple.com" matched cert's "app-site-association.cdn-apple.com"
* issuer: CN=Apple Public Server RSA CA 12 - G1; O=Apple Inc.; ST=California; C=US
* SSL certificate verify ok.
> GET /a/v1/mydomain.com HTTP/1.1
> Host: app-site-association.cdn-apple.com
> User-Agent: curl/7.79.1
> Accept: */*
> 
* Mark bundle as not supporting multiuse
< HTTP/1.1 404 Not Found
< Date: Tue, 28 Jun 2022 06:51:03 GMT
< Content-Type: text/plain; charset=utf-8
< Content-Length: 10
< Connection: keep-alive
< Apple-Failure-Details: {"cause":"context deadline exceeded (Client.Timeout exceeded while awaiting headers)"}
< Apple-Failure-Reason: SWCERR00301 Timeout
< Apple-From: https://mydomain.com/.well-known/apple-app-site-association
< Apple-Try-Direct: true
< Cache-Control: public, max-age=1800
< Expires: Tue, 28 Jun 2022 06:51:23 GMT
< X-Cache: MISS
< CDNUUID: 2478cf3a-1d35-4870-ae61-0ad342ef8adf-1481196180
< CDN-Server: lumn
< Age: 1238
< 
Not Found
* Connection #0 to host app-site-association.cdn-apple.com left intact

Please support, Urgent Help Required.

Post not yet marked as solved Up vote post of ArunTameeni Down vote post of ArunTameeni
1.5k views

Replies

i has same question, do you resolve?

also same question, anyone can help me?

Please ensure your website's configuration allows access the AASA file in the .well-known directory, in all geographical locations, from any IP address. Specific IP addresses are not published as they cannot be guaranteed, so whitelisting a few IP addresses will not work.

same problem.

I tried to visit https://app-site-association.cdn-apple.com/a/v1/ourdomain.com through different location based IPs, it turn out that only Asia IPs got a 404 response code. IPs in US or Europe worked.

@xring , can you please file a bug report and add the feedback number here? Please also ensure your site is open to all IP addresses and ranges from all geographical locations.

Instructions:

Go to https://feedback.apple.com

Create new feedback -> Choose "Feedback for Developer Technologies and SDKs" -> in the dropdown for which technology your app supports choose ""Safari Services Framework":

Same here, Is there any solutions?

  • @DavidFU1989 can you please file a bug report with my instructions above and post the number so I can look into it? Thanks!

Add a Comment

same problem. Trying with a non-Asian IP can be successful

same problem. Trying with a non-Asian IP can be successful

I am trying to access AASA using another website, which can be obtained

https://app-site-association.networking.apple/a/v1/ispanish.cn

This should be working successfully now. if anyone is still seeing this behavior please follow up.

  • @sha921 How did it work. I am also getting the same problem. but works when i connect VPN to non asian location.

Add a Comment