Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Intermittent SSL Error

Tags:

ios

ssl

iphone

getting an intermittent SSL error on iOS. I've turned off ATS, and we know this happens on OS versions < iOS9 as well

Error Domain=NSURLErrorDomain Code=1011 "An SSL error has occurred and a secure connection to the server cannot be made." UserInfo={NSLocalizedDescription=An SSL error has occurred and a secure connection to the server cannot be made., NSLocalizedRecoverySuggestion=Would you like to connect to the server anyway?, _kCFStreamErrorCodeKey=-9806 NSErrorFailingURLStringKey=, _kCFStreamErrorDomainKey=3, NSUnderlyingError=0x1471b600

from our crittercism logs, seems like some users are able to replicate this. but we have not been able to

Would you like to connect to the server anyway?<-- this makes me suspect that there was an authentication challenge. how can i verify that?

kCFStreamErrorCodeKey=-9806 <-- does anyone know what this error means?

Edit:

-9806 means errSSLClosedAbort http://www.opensource.apple.com/source/Security/Security-55179.13/libsecurity_ssl/Security/SecureTransport.h

what can cause this? i don't think this is due to a spotty network because from our tracking tools, SSL connections to other hosts seem ok. and when a user hits this issue, it is re-produceable. seems to me like we need to inspect the failure with wireshark to get further information. but we have not been able to re-produce this. does anyone have ideas logging more information from apps in the wild to debug this?

like image 907
tzl Avatar asked Feb 10 '16 03:02

tzl


People also ask

Why do I keep getting SSL connection error?

An SSL certificate error occurs when a web browser can't verify the SSL certificate installed on a site. Rather than connect users to your website, the browser will display an error message, warning users that the site may be insecure.

How do I fix an SSL certificate error?

You should make sure both leaf and intermediate certificates are not expired. This could also happen when the browser machine's time is incorrect. Fix: Update the SSL certificates of your web server with new valid certificates.

Why am I getting certificate errors on all websites?

The “There is a problem with this website's security certificate” error may occur due to the enabled “Warn about certificate address mismatch” option. To check that and disable this option, you have to: Right-click Windows key and open Control Panel. Select Internet Options and open Advanced tab.

What is an SSL error on Macbook Pro?

An SSL error has occurred and a secure connection to the server cannot be made.” This problem is usually because of an issue with the connection between the Mac and the Apple servers running the Mac App Store, though there are some other possible situations that could lead to the error message.


1 Answers

The server SSL certificate is failing the built-in certificate validation. It is up to you to decide how to handle this and present a correct remediation to the user. This can happen for many reasons.

SSL trust evaluation is described in detail in Technical Note 2232: SSL Trust Evaluation.

like image 188
quellish Avatar answered Oct 20 '22 22:10

quellish