无法使用分发证书发送APNS消息

时间:2013-07-09 17:05:17

标签: c# objective-c apple-push-notifications x509certificate2 sslstream

我已使用开发证书和gateway.sandbox.push.apple.com设置并成功测试了APNS消息。
当我切换到我的分发证书时,gateway.push.apple.com消息没有通过,我得到例外:

无法将数据写入传输连接:已建立的连接已被主机中的软件中止。

我已按照这些教程生成p12证书:

http://www.raywenderlich.com/32960/apple-push-notification-services-in-ios-6-tutorial-part-1 http://code.google.com/p/apns-sharp/wiki/HowToCreatePKCS12Certificate

我发送通知的服务器软件是使用SslStreamX509Certificate2类的.NET应用程序。

以下是连接代码:

    /// <summary>
    /// Establish connection to Apple's Push Notification System using the variables in the config file.
    /// </summary>
    public void ConnectToAPNS()
    {
        try
        {
            int port = Convert.ToInt32(Config.SSL_PORT ); // 2195
                // pick the target address
            String hostname = Config.SSL_PATH;  // gateway.push.apple.com

            //load certificate
            string certificatePath = Config.CERT_FILE; //.p12 certification file
            string certificatePassword = Config.CERT_PASS;
            byte[] p12Data = System.IO.File.ReadAllBytes(certificatePath);

            X509Certificate2 clientCertificate = new X509Certificate2(p12Data, certificatePassword, X509KeyStorageFlags.MachineKeySet | X509KeyStorageFlags.PersistKeySet | X509KeyStorageFlags.Exportable);

            X509Certificate2Collection certificatesCollection = new X509Certificate2Collection();
            certificatesCollection.Add(clientCertificate);

            RemoteCertificateValidationCallback remote = new RemoteCertificateValidationCallback(ValidateServerCertificate);

            client = new TcpClient(hostname, port);
            sslStream = new SslStream(
                    client.GetStream(),
                    false,
                    remote,
                    null
            );

            try
            {
                sslStream.AuthenticateAsClient(hostname, certificatesCollection, SslProtocols.Tls, true);

            }
            catch (AuthenticationException e)
            {
                IQLogger.Logger.LogError("Push NotifyMessenger ConnectToAPNS: " + e.Message);
                client.Close();
                sslStream = null;
                client = null;
                return;
            }
        }catch (Exception e)
        {
            IQLogger.Logger.LogError("PushNotifyMessenger ConnectToAPNS: " + e.Message);
            sslStream = null;
            client = null;
            return;
        }
        return;
    }

    /// <summary>
    /// Call back checks for validation error
    /// </summary>
    /// <returns></returns>
    public static bool ValidateServerCertificate( object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors sslPolicyErrors)
    {
        try{
            if (sslPolicyErrors == SslPolicyErrors.None)
                return true;
        }
        catch 
        {
        }
        IQLogger.Logger.LogError("PushNotifyMessenger ValidateServerCertificate: sslPolicyErrors" + sslPolicyErrors);
        // Do not allow this client to communicate with unauthenticated servers. 
        return false;
    }

这是发送消息的代码:

    /// <summary>
    /// I send a text message to a specified device ID. I provide an example of how to format a message for the APNS system. 
    /// The message must be formatted in Json and be sent as a byte array.
    /// </summary>
    /// <param name="deviceId"> A string containing 64 characters representing hexidecimal values of a 32 byte device code</param>
    /// <param name="msgPrompt">The text that will popup on the device </param>
    /// <param name="msgData"> XML that will be put in the XML json Section. This data will be invisible to the recipient's user, 
    /// but will be accessible by the recipient program</param>
    public void SendMessage(string deviceId, string msgPrompt, string msgData)
    {
        try{
            if (client == null || sslStream == null)
            {
                ConnectToAPNS();
            }

            // Encode a test message into a byte array.
            MemoryStream memoryStream = new MemoryStream();
            BinaryWriter writer = new BinaryWriter(memoryStream);

            writer.Write((byte)0);  //The command
            writer.Write((byte)0);  //The first byte of the deviceId length (big-endian first byte)
            writer.Write((byte)32); //The deviceId length (big-endian second byte)

            byte[] arDeviceID = ConvertDeviceID(deviceId);//System.Text.Encoding.UTF8.GetBytes(deviceId);
            writer.Write(arDeviceID);

            String payload = "{\"aps\":{\"alert\":\"" + msgPrompt + "\",\"badge\":1,\"xml\":\"" + msgData + "\"}}";

            writer.Write((byte)0); //First byte of payload length; (big-endian first byte)
            writer.Write((byte)payload.Length); //payload length (big-endian second byte)

            byte[] b1 = System.Text.Encoding.UTF8.GetBytes(payload);
            writer.Write(b1);
            writer.Flush();

            byte[] array = memoryStream.ToArray();
            sslStream.Write(array);   // <<<<<<<<<< exception thrown here
            sslStream.Flush();

        }
        catch (Exception e)
        {
            IQLogger.Logger.LogError("PushNotifyMessenger.SendMessage: " + e.Message);
            return;
        }

    }

在第二次或第三次尝试发送APNS消息时抛出异常。但是,没有任何消息可以通过设备。我可以交换回我的开发证书,这个代码运行得很好(APNS消息到达设备)。

在我搜索解决问题的过程中,我遇到了一些帖子,说明开发证书在某种程度上干扰了部署,但是我不明白这是怎么回事,或者我应该怎么做才能解决它。

提前感谢您提供的任何帮助。

1 个答案:

答案 0 :(得分:0)

确保您使用的是APNS实时服务器网址 ssl://gateway.push.apple.com:2195