最近,我正在使用iOS ATS。我列出了我的应用程序中使用的所有服务器API。我使用/usr/bin/nscurl --ats-diagnostics server_api_url
进行验证,我将获得以下报告。但是我不知道服务器API是否向ATS确认。
Starting ATS Diagnostics
Configuring ATS Info.plist keys and displaying the result of HTTPS loads to xxxxx.
A test will "PASS" if URLSession:task:didCompleteWithError: returns a nil error.
Use '--verbose' to view the ATS dictionaries used and to display the error received in URLSession:task:didCompleteWithError:.
================================================================================
Default ATS Secure Connection
---
ATS Default Connection
Result : PASS
---
================================================================================
Allowing Arbitrary Loads
---
Allow All Loads
Result : PASS
---
================================================================================
Configuring TLS exceptions for xxxx
---
......
================================================================================
Configuring PFS exceptions for xxx
---
Disabling Perfect Forward Secrecy
Result : PASS
---
================================================================================
Configuring PFS exceptions and allowing insecure HTTP for xxxx
---
Disabling Perfect Forward Secrecy and Allowing Insecure HTTP
Result : PASS
---
================================================================================
Configuring TLS exceptions with PFS disabled for xxx
---
......
---
================================================================================
Configuring TLS exceptions with PFS disabled and insecure HTTP allowed for xxx
---
TLSv1.3 with PFS disabled and insecure HTTP allowed
2019-06-10 14:05:43.052 nscurl[96230:2204700] NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9858)
Result : FAIL
---
---
......
================================================================================