blocks|key|194441|text|iOS9要求服务器只支持TLSv1.2，并支持完善的前向安全性。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|194442|还需要该应用程序支持IPV6，包括不使用硬编码IP地址。建议使用NSURLSession。否则，必须在应用程序plist中添加异常。|offset|length|style|CODE|194443|见WWDC-15会议“安全和您的应用程序”。|194444|有关详细信息，请参见史蒂文·彼得森的博客。|194445|entityMap|0|LINK|mutability|MUTABLE|url|http://ste.vn/2015/06/10/configuring-app-transport-security-ios-9-osx-10-11/^0|0|W|C|0|0|A|A|0|0^^$0|@$1|2|3|4|5|6|7|T|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|U|8|@$D|V|E|W|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|X|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|Y|8|@]|9|@$D|Z|E|10|1|11]]|A|$]]|$1|L|3|-4|5|6|7|12|8|@]|9|@]|A|$]]]|M|$N|$5|O|P|Q|A|$R|S]]]]

iOS9 requires the server to only support TLSv1.2 and support perfect forward security.

Also required is for the app to support IPV6 including not using hard-coded IP addresses. Suggested is to use <code>NSURLSession</code>. Otherwise exception additions must be made in the app plist.

See the WWDC-15 session "Security and your Apps".

Also see <a href="http://ste.vn/2015/06/10/configuring-app-transport-security-ios-9-osx-10-11/">Steven Peterson's Blog</a> for details.

blocks|key|1177099|text|我找到了另一个堆栈溢出答案，其中包含了服务器上准确的新需求清单，以完全填充iOS+9默认的应用程序传输安全要求：iOS+9安全服务器需求检查列表|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1177100|希望这能有所帮助。|1177101|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/31231696/ios-9-ats-ssl-error-with-supporting-server^0|1K|G|0|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@$A|O|B|P|1|Q]]|C|$]]|$1|D|3|E|5|6|7|R|8|@]|9|@]|C|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|C|$]]]|G|$H|$5|I|J|K|C|$L|M]]]]

I found another stack overflow answer with a checklist of the exact new requirements on the server to full fill the iOS 9 default App Transport Security requirements:
<a href="https://stackoverflow.com/questions/31231696/ios-9-ats-ssl-error-with-supporting-server">iOS 9 Security Server requirements Checklist</a>

Hope that helps.

blocks|key|195383|text|您可以将其添加到"Info.plist“文件中，它将允许非安全连接：|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|195384|<key>NSAppTransportSecurity</key>
<dict>
++++<key>NSAllowsArbitraryLoads</key>
++++<true/>
</dict>|code-block|syntax|javascript|195385|entityMap^0|9|A|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|P|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|L|$]]

You can add this in your "Info.plist" file, it will allow non secured connections:

<pre><code>&lt;key&gt;NSAppTransportSecurity&lt;/key&gt;
&lt;dict&gt;
 &lt;key&gt;NSAllowsArbitraryLoads&lt;/key&gt;
 &lt;true/&gt;
&lt;/dict&gt;
</code></pre>

blocks|key|194540|text|我在这个问题上被困了一段时间，尝试了Info.plist中的所有技巧，但仍然有错误：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|194541|HTTP+load+failed+(kCFStreamErrorDomainSSL,+-9813)|code-block|syntax|javascript|194542|当尝试连接到正在开发的本地主机服务器时。|194543|使用一个带有自签名证书的API进行本地开发时，我的系统设置了对证书的信任，但我花了一段时间才意识到，我还需要IOS模拟器来接受我的证书作为受信任的证书，以克服此错误。|194544|在模拟器的主屏幕中，您应该能够将cert文件拖到模拟器中，以提示它添加证书配置文件。或者，如果证书可以通过模拟器safari浏览器中的localhost+url访问，则可以通过safari接受证书。|194545|希望这能帮到我的人，因为我在它为我点击之前绕着圈转！|194546|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|R|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|S|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|T|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|U|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|V|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|P|$]]

I got stuck on this one for a while and tried all the tricks in Info.plist but still had the error:

<pre><code>HTTP load failed (kCFStreamErrorDomainSSL, -9813)
</code></pre>

when trying to connect to a localhost server in development.

Developing locally with a react native project connecting to an API served with a self signed certificate I had my system set to trust the certificate but it took me a while to realise that I also needed the IOS simulator to accept my cert as trusted to get past this error.

In the home screen of your simulator you should be able to drag the cert file into the simulator to prompt it to add the certificate profile.
Or, if the certificate is accessible through a localhost url in the simulator's safari browser you may be able to accept it through safari.

Hope this helps someone as I went around in circles before it clicked for me!

blocks|key|14986|text|解决方案1+:|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|14987|如果您正在寻找work+around，那么请使用以下方法：|CODE|14988|添加类型为NSAllowsArbitraryLoads键的布尔和值true。|ordered-list-item|14989|您的Info.plist文件应该如下所示：|14990|​|14991|📷|atomic|14992|14993|但是，不建议使用这种方法，因为它允许所有不安全的连接。|14994|解决方案2+:|14995|SSL+certificate+that+you+apply+on+Server+should+be+of+type+TLSv2.0+minimum+since+iOS+10+requires+this.检查此链接以获得详细信息。|14996|添加NSIncludesSubdomains键，类型为boolean，值为|14997|添加NSTemporaryExceptionAllowsInsecureHTTPLoads键，类型为boolean，值为|14998|添加NSTemporaryExceptionMinimumTLSVersion键，类型为String，值为TLSv1.2|14999|15000|15001|15002|15003|entityMap|0|IMAGE|mutability|IMMUTABLE|imageUrl|https://developer.qcloudimg.com/http-save/yehe-900000/d996250cf4f105f1c55fd6505d344c91.png|imageAlt|1|LINK|MUTABLE|url|https://ste.vn/2015/06/10/configuring-app-transport-security-ios-9-osx-10-11/|2|https://developer.qcloudimg.com/http-save/yehe-900000/7ecbc5d613da2c0cb6a3159652a20077.png^0|0|7|0|7|B|0|5|M|T|2|X|4|0|0|0|0|1|0|0|0|0|0|7|0|0|2U|2X|2|1|0|2|K|R|7|0|2|17|1E|7|0|2|11|18|6|1H|7|0|0|0|0|1|2|0|0^^$0|@$1|2|3|4|5|6|7|1P|8|@$9|1Q|A|1R|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|1S|8|@$9|1T|A|1U|B|H]]|D|@]|E|$]]|$1|I|3|J|5|K|7|1V|8|@$9|1W|A|1X|B|C]|$9|1Y|A|1Z|B|C]|$9|20|A|21|B|C]]|D|@]|E|$]]|$1|L|3|M|5|6|7|22|8|@]|D|@]|E|$]]|$1|N|3|O|5|6|7|23|8|@]|D|@]|E|$]]|$1|P|3|Q|5|R|7|24|8|@]|D|@$9|25|A|26|1|27]]|E|$]]|$1|S|3|O|5|6|7|28|8|@]|D|@]|E|$]]|$1|T|3|U|5|6|7|29|8|@]|D|@]|E|$]]|$1|V|3|W|5|6|7|2A|8|@$9|2B|A|2C|B|C]]|D|@]|E|$]]|$1|X|3|Y|5|6|7|2D|8|@$9|2E|A|2F|B|H]]|D|@$9|2G|A|2H|1|2I]]|E|$]]|$1|Z|3|10|5|K|7|2J|8|@$9|2K|A|2L|B|C]|$9|2M|A|2N|B|C]]|D|@]|E|$]]|$1|11|3|12|5|K|7|2O|8|@$9|2P|A|2Q|B|C]|$9|2R|A|2S|B|C]]|D|@]|E|$]]|$1|13|3|14|5|K|7|2T|8|@$9|2U|A|2V|B|C]|$9|2W|A|2X|B|C]|$9|2Y|A|2Z|B|C]]|D|@]|E|$]]|$1|15|3|M|5|6|7|30|8|@]|D|@]|E|$]]|$1|16|3|O|5|6|7|31|8|@]|D|@]|E|$]]|$1|17|3|Q|5|R|7|32|8|@]|D|@$9|33|A|34|1|35]]|E|$]]|$1|18|3|O|5|6|7|36|8|@]|D|@]|E|$]]|$1|19|3|-4|5|6|7|37|8|@]|D|@]|E|$]]]|1A|$1B|$5|1C|1D|1E|E|$1F|1G|1H|-4]]|1I|$5|1J|1D|1K|E|$1L|1M]]|1N|$5|1C|1D|1E|E|$1F|1O|1H|-4]]]]

Solution 1 :

If you’re looking for <code>work around</code> then use below approach :

<ol>
<li>Add NSAllowsArbitraryLoads key of type boolean with value true.</li>
</ol>

Your Info.plist file should look like this :

<a href="https://i.stack.imgur.com/ybjhX.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/ybjhX.png" alt="Screenshot 1"></a>

However, this approach is not recommended since it allows all unsecure connection.

Solution 2 :

The <code>SSL certificate that you apply on Server should be of type TLSv2.0 minimum since iOS 10 requires this.</code>
Check this <a href="https://ste.vn/2015/06/10/configuring-app-transport-security-ios-9-osx-10-11/" rel="nofollow noreferrer">link</a> for detail.

<ol>
<li>Add NSIncludesSubdomains key of type boolean with value true</li>
<li>Add NSTemporaryExceptionAllowsInsecureHTTPLoads key of type boolean with value true</li>
<li>Add NSTemporaryExceptionMinimumTLSVersion key of type String with value TLSv1.2</li>
</ol>

Your Info.plist file should look like this :

<a href="https://i.stack.imgur.com/eaEEw.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/eaEEw.png" alt="Screenshot 2"></a>

We have an iOS app that connects to our server through HTTPS. When the app is built with the new iOS 9 SDK and ran under iOS 9, the following error occurs:

<pre><code>NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9802)
</code></pre>

The app uses AFNetworking 1.3.4 with pinned certs. The problem occurs if I connect to the server with its IP address. It works if I add the <a href="http://ste.vn/2015/06/10/configuring-app-transport-security-ios-9-osx-10-11/">NSAllowsArbitraryLoads</a> config, or if I connect to the server with its domain name.

The Tomcat connector is configured with sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2".

I have tried <a href="https://developer.apple.com/library/ios/documentation/NetworkingInternet/Conceptual/NetworkingTopics/Articles/OverridingSSLChainValidationCorrectly.html">overriding the host name</a> but it doesn't seem to change anything.

I can't find much official documentation on ATS yet. Maybe connecting with IP address is not supposed to work?

kCFStreamErrorDomainSSL, -9802 when connecting to a server by IP address through HTTPS in iOS 9

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我们有一个通过HTTPS连接到服务器的iOS应用程序。当应用程序是用新的iOS 9 SDK构建并在iOS 9下运行时，会发生以下错误：NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9802)该应用程序使用AFNetwor...

问kCFStreamErrorDomainSSL，-9802通过iOS 9中的HTTPS通过IP地址连接到服务器时
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问kCFStreamErrorDomainSSL，-9802通过iOS 9中的HTTPS通过IP地址连接到服务器时EN