SSLHandshake failed errors on client connection [iOS]

[dollar8]

Hello,
recently on mobile network while opening connection, I'm getting this continuous errors:

CFNetwork SSLHandshake failed (-9846)
CFNetwork SSLHandshake failed (-9846)
CFNetwork SSLHandshake failed (-9806)
NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9806)

and client can not connect.

on Wi-Fi everything works good.
what could it be and how to deal with it?

Lightstreamer iOS Client Library version 1.2.4 build 74.14

Thanks.

[gianluca.bertani]

Hello,

this error may be caused by an expired or self-signed certificate. If this is the case, the following callback in the LSConnectionDelegate is being called:


- (void) clientConnection: (LSClient *)client willSendRequestForAuthenticationChallenge: (NSURLAuthenticationChallenge *)challenge;


To accept the certificate you should implement this method with the following call:


[challenge.sender continueWithoutCredentialForAuthenticationChalleng e:challenge];


The API documentation for this delegate method provides more options on how to react to this callback. Further information may also be found Apple's Developer Center: Authentication Challenges and TLS Chain Validation

Hope this helps.
Best regards,

Gianluca

[dollar8]

Hello,this error may be caused by an expired or self-signed certificate. If this is the case, the following callback in the LSConnectionDelegate is being called:
- (void) clientConnection: (LSClient *)client willSendRequestForAuthenticationChallenge: (NSURLAuthenticationChallenge *)challenge;
To accept the certificate you should implement this method with the following call:[challenge.sender continueWithoutCredentialForAuthenticationChalleng e:challenge];

Hello, Gianluca.
I done this. the delegate method is called, but it doesn't help.
Does it look like it is asking for some credentials?
what are they?

[gianluca.bertani]

Hello,

these two error codes (-9806 and -9846, corresponding respectively to errSSLClosedAbort and errSSLBadRecordMac) are reported on the Net for a wide range of issues related to SSL. Our advice is to double check everything is in place, in particular:
* check that a certificate is not missing from the certificate chain on the server keystore;
* check that all certificates are valid;
* if everything is in place and still does not work, try connecting with a device using a different iOS version (e.g. 7 instead of 8).

It may also be due to a bug in an old version of the Java Virtual Machine: if you are running the server on a JVM anterior to 7u2 this could be the cause, and updating the JVM should solve the problem.

Let us know if after all this the problem should still persist.
Best regards,

Gianluca