3

我的应用程序使用自签名 ssl 证书连接到 tcp 服务器。iOS7.1之前有效，iOS8.0之后脱网有问题，提示：CFNetwork SSLHandshake failed (-9806) and can't reconnect.

我正在使用方法：startTLS来设置ssl，代码如下：

// Configure SSL/TLS settings

NSMutableDictionary *sslSettings = [[NSMutableDictionary alloc] init];

NSData *pkcs12data = [[NSData alloc] initWithContentsOfFile:[[NSBundle mainBundle] pathForResource:certificate ofType:@"p12"]];

CFDataRef inPKCS12Data = (CFDataRef)CFBridgingRetain(pkcs12data);

CFStringRef password = CFSTR("123456");

const void *keys[] = { kSecImportExportPassphrase };

const void *values[] = { password };

CFDictionaryRef options = CFDictionaryCreate(NULL, keys, values, 1, NULL, NULL);

CFArrayRef items = CFArrayCreate(NULL, 0, 0, NULL);

OSStatus securityError = SecPKCS12Import(inPKCS12Data, options, &items);

CFRelease(options);

CFRelease(password);

[pkcs12data release];

if(securityError == errSecSuccess) {

    NSLog(@"Success opening p12 certificate.");

}

CFDictionaryRef identityDict = CFArrayGetValueAtIndex(items, 0);

SecIdentityRef myIdent = (SecIdentityRef)CFDictionaryGetValue(identityDict,
                                                              kSecImportItemIdentity);

SecIdentityRef  certArray[1] = { myIdent };

CFArrayRef myCerts = CFArrayCreate(NULL, (void *)certArray, 1, NULL);

[sslSettings setObject:(id)CFBridgingRelease(myCerts) forKey:(NSString *)kCFStreamSSLCertificates];

[sslSettings setObject:NSStreamSocketSecurityLevelSSLv2 forKey:(NSString *)kCFStreamSSLLevel];

[sslSettings setObject:(id)kCFBooleanFalse forKey:(NSString *)kCFStreamSSLValidatesCertificateChain];
4

0 回答 0