Mobilelfirst 7.1 - ios9发生SSL错误,无法与服务器建立安全连接

时间:2016-04-06 12:33:46

标签: ssl ibm-mobilefirst

使用从移动设备到MFP服务器的Https连接时,我收到此SSL握手错误。但是,如果在浏览器中尝试相同的URL工作完美。

我们使用的证书是TLS 1.2版标准,并使用AES_128_GCM加密和验证,并使用RSA作为密钥交换机制

以下是来自xcode的日志

ii

我还尝试从Mac运行此命令来诊断SSL握手是否完成但同样失败。不确定这是否是正确的测试方法。

nscurl --ats-diagnostics https://ourhostname --verbose

2016-04-06 00:13:21.870 SSMobileApp[5742:3715304] [DEBUG] [NOsslNE] establishSSLClientAuth
2016-04-06 00:13:21.873 SSMobileApp[5742:3715317] [DEBUG] [NONE] after: initOptions.onSuccess
2016-04-06 00:13:21.876 SSMobileApp[5742:3715303] [DEBUG] [NONE] added onPause and onResume event handlers
2016-04-06 00:13:21.879 SSMobileApp[5742:3715301] [DEBUG] [NONE] wlclient init success
2016-04-06 00:13:21.881 SSMobileApp[5742:3715258] THREAD WARNING: ['UserAuth'] took '13.794922' ms. Plugin should use a background thread.
2016-04-06 00:13:22.082 SSMobileApp[5742:3715258] [DEBUG] [WORKLIGHT] +[WLClient sharedInstance] in WLClient.m:165 :: IBMMobilieFirstFoundation.framework version = 7.1-2015/12/27 17:46:32
2016-04-06 00:13:22.085 SSMobileApp[5742:3715317] [DEBUG] [NONE] Request [/apps/services/api/SSMobileApp/iphone/init]
2016-04-06 00:13:22.088 SSMobileApp[5742:3715304] [TRACE] [NONE] Application details header: {"applicationDetails":{"platformVersion":"7.1.0.0","nativeVersion":"2929140589","skinName":"default","skinChecksum":284837888,"skinLoaderChecksum":"(null)"}}
2016-04-06 00:13:22.090 SSMobileApp[5742:3715303] [DEBUG] [NONE] establishSSLClientAuth isCertificateExists:  false
2016-04-06 00:13:22.094 SSMobileApp[5742:3715258] THREAD WARNING: ['WLAuthorizationManagerPlugin'] took '14.354980' ms. Plugin should use a background thread.
2016-04-06 00:13:22.109 SSMobileApp[5742:3715258] THREAD WARNING: ['WLAuthorizationManagerPlugin'] took '11.534180' ms. Plugin should use a background thread.
2016-04-06 00:13:22.111 SSMobileApp[5742:3715258] [TRACE] [WL_SPLASH] -[WLSplashView hide] in WLSplashView.m:73 :: 
2016-04-06 00:13:22.122 SSMobileApp[5742:3715304] [TRACE] [WLNativeXHR] open method POST url /apps/services/api/SSMobileApp/iphone/init
2016-04-06 00:13:22.124 SSMobileApp[5742:3715317] [TRACE] [WLNativeXHR] setRequestHeader name X-Requested-With value XMLHttpRequest
2016-04-06 00:13:22.126 SSMobileApp[5742:3715303] [TRACE] [WLNativeXHR] Constructing
2016-04-06 00:13:22.129 SSMobileApp[5742:3715333] [TRACE] [WLNativeXHR] setRequestHeader name Accept-Language value en-US
2016-04-06 00:13:22.132 SSMobileApp[5742:3715337] [TRACE] [WLNativeXHR] setRequestHeader name Content-type value application/x-www-form-urlencoded; charset=UTF-8
2016-04-06 00:13:22.135 SSMobileApp[5742:3715304] [TRACE] [WLNativeXHR] setRequestHeader name x-wl-app-version value 1.0
2016-04-06 00:13:22.138 SSMobileApp[5742:3715338] [TRACE] [WLNativeXHR] setRequestHeader name x-wl-app-details value {"applicationDetails":{"platformVersion":"7.1.0.0","nativeVersion":"2929140589","skinName":"default","skinChecksum":284837888,"skinLoaderChecksum":"(null)"}}
2016-04-06 00:13:22.141 SSMobileApp[5742:3715339] [TRACE] [WLNativeXHR] setRequestHeader name x-wl-clientlog-deviceId value 62413470-564E-4012-96E9-8C13CA4E50F5
2016-04-06 00:13:22.144 SSMobileApp[5742:3715301] [TRACE] [WLNativeXHR] setRequestHeader name Accept value text/javascript, text/html, application/xml, text/xml, */*
2016-04-06 00:13:22.147 SSMobileApp[5742:3715341] [TRACE] [WLNativeXHR] setRequestHeader name x-wl-clientlog-appname value SSMobileApp
2016-04-06 00:13:22.150 SSMobileApp[5742:3715340] [TRACE] [WLNativeXHR] setRequestHeader name x-wl-clientlog-appversion value 1.0
2016-04-06 00:13:22.153 SSMobileApp[5742:3715343] [TRACE] [WLNativeXHR] setRequestHeader name x-wl-clientlog-osversion value 9.1
2016-04-06 00:13:22.156 SSMobileApp[5742:3715342] [TRACE] [WLNativeXHR] setRequestHeader name x-wl-clientlog-env value iphone
2016-04-06 00:13:22.159 SSMobileApp[5742:3715344] [TRACE] [WLNativeXHR] setRequestHeader name x-wl-clientlog-model value iPhone8,1
2016-04-06 00:13:22.162 SSMobileApp[5742:3715345] [TRACE] [WLNativeXHR] setRequestHeader name X-WL-ClientId value 535fecc2c8e0262fea1d44449283d940443060d4
2016-04-06 00:13:22.165 SSMobileApp[5742:3715317] [TRACE] [WLNativeXHR] setRequestHeader name X-WL-S-ClientId value eyJhbGciOiJSUzI1NiIsImpwayI6eyJhbGciOiJSU0EiLCJtb2QiOiJBSkswUVVTS2hSaHhqTE5HM0wxTHdoamg4ZHBtWXBXczZOVElBZU9SSDd4NFozd0NuTHJtMWM2RU9qdjFmVjNHdmE2cDlpRm1YbDVSb204cmdrYkhFS2s9IiwiZXhwIjoiQVFBQiJ9fQ==.eyJjbGllbnRJZCI6IjUzNWZlY2MyYzhlMDI2MmZlYTFkNDQ0NDkyODNkOTQwNDQzMDYwZDQifQ==.dzRy2WM8kiXrMIS52VQopNAuOewgPS1VfiX4kOj0ygm-UDqbiNimCKpS6vBZf97LtvLD2Fw7-zptf73wPIAICQ==
2016-04-06 00:13:22.168 SSMobileApp[5742:3715346] [TRACE] [WLNativeXHR] setRequestHeader name X-WL-Session value 7453DE78-568F-4186-90FC-C7AA1F131B13
2016-04-06 00:13:22.171 SSMobileApp[5742:3715347] [TRACE] [WLNativeXHR] send
2016-04-06 00:13:22.174 SSMobileApp[5742:3715348] [DEBUG] [WL_AFHTTPRequestOperationManagerWrapper_PACKAGE] +[WLAFHTTPRequestOperationManagerWrapper requestWithURL:] in WLAFHTTPRequestOperationManagerWrapper.m:52 :: Request url is https://myhostname:443/SSProject/apps/services/api/SSMobileApp/iphone/init
2016-04-06 00:13:22.181 SSMobileApp[5742:3715348] [DEBUG] [WL_AFHTTPRequestOperationManagerWrapper_PACKAGE] -[WLAFHTTPRequestOperationManagerWrapper start] in WLAFHTTPRequestOperationManagerWrapper.m:320 :: Starting the request with URL https://myhostname:443/SSProject/apps/services/api/SSMobileApp/iphone/init
2016-04-06 00:13:22.297 SSMobileApp[5742:3715308] CFNetwork SSLHandshake failed (-9824)
2016-04-06 00:13:22.297 SSMobileApp[5742:3715308] NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9824)
2016-04-06 00:13:22.298 SSMobileApp[5742:3715258] [DEBUG] [WL_AFHTTPRequestOperationManagerWrapper_PACKAGE] -[WLAFHTTPRequestOperationManagerWrapper requestFailed:error:] in WLAFHTTPRequestOperationManagerWrapper.m:352 :: Request Failed
2016-04-06 00:13:22.299 SSMobileApp[5742:3715258] [DEBUG] [WL_AFHTTPRequestOperationManagerWrapper_PACKAGE] -[WLAFHTTPRequestOperationManagerWrapper requestFailed:error:] in WLAFHTTPRequestOperationManagerWrapper.m:353 :: Response Status Code : 0
2016-04-06 00:13:22.302 SSMobileApp[5742:3715258] [DEBUG] [WL_AFHTTPRequestOperationManagerWrapper_PACKAGE] -[WLAFHTTPRequestOperationManagerWrapper requestFailed:error:] in WLAFHTTPRequestOperationManagerWrapper.m:354 :: Response Error : An SSL error has occurred and a secure connection to the server cannot be made.
2016-04-06 00:13:22.310 SSMobileApp[5742:3715317] [ERROR] [NONE] [/apps/services/api/SSMobileApp/iphone/init] Host is not responsive.
2016-04-06 00:13:22.311 SSMobileApp[5742:3715317] [DEBUG] [NONE] Failed connecting to MobileFirst Server.
2016-04-06 00:13:22.329 SSMobileApp[5742:3715258] THREAD WARNING: ['Notification'] took '19.496826' ms. Plugin should use a background thread.
2016-04-06 00:13:33.259 SSMobileApp[5742:3715258] [DEBUG] [WORKLIGHT] +[WLClient sharedInstance] in WLClient.m:165 :: IBMMobilieFirstFoundation.framework version = 7.1-2015/12/27 17:46:32
2

有人可以帮助我,我在这里失踪了吗?我们是否需要在移动应用程序中放置一些证书,以便此SSL握手不会失败?

1 个答案:

答案 0 :(得分:0)

请确保您已按照此博客文章中提供的说明正确配置了支持TLS 1.2的MobileFirst Server(太长时间无法发布作为答案):https://mobilefirstplatform.ibmcloud.com/blog/2015/09/07/preparing-ibm-mobilefirst-platform-server-app-transport-security-ios-9/