osx - Enable DHE_RSA cipher suites on OS X/iOS -
i developing os x app communicates server on https using nsurlsession
, datataskwithrequest
. server supports following cipher-string: kedh+aesgcm:high:medium:tlsv1:!keecdh:!rc4:!3des:!seed:!idea:!rc2:!des:!md5:!dss:!anull:!enull:!psk:!srp:!aecdh:!ecdsa
.
on os x 10.11 error message: cfnetwork sslhandshake failed (-9824)
.
quote os x 10.11 release notes:
dhe_rsa cipher suites disabled default in secure transport tls clients. may cause failure connect tls servers support dhe_rsa cipher suites. applications explicitly enable cipher suites using sslsetenabledciphers() not affected.
so release notes talk using sslsetenabledciphers()
can’t create sslcontext , find apples secure transport reference quite confusing (lots of deprecated stuff).
how can re enable dhe_rsa cipher suites im app? swift or objective-c.
Comments
Post a Comment