App Transport Security: NSURLSession/NSURLConnection HTTP load failed

Question

I have this code:

func loginWithBasicAuth() -> Void {

    let usernameText = username.text
    let passwordText = password.text

    let credentialData = "\(usernameText):\(passwordText)".dataUsingEncoding(NSUTF8StringEncoding)
    let base64Credentials = credentialData?.base64EncodedStringWithOptions([])
    let headers = ["Authorization": "HTTP Basic \(base64Credentials)"]

    Alamofire.request(.GET, "https://api.domainname.com/v0.1/", headers: headers).responseString { aResponse in

        if let receivedString = aResponse.result.value {

            print(receivedString)

        } else {

            print("Login failed.")

        }
    }
}

In the console it prints:

NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9802) Login failed.

Here's the configuration in the info.plist file：

What's wrong？

try `NSTemporaryExceptionRequiresForwardSecrecy = NO` in your exception domain — Warren Burton, Oct 20 '15 at 13:40
Add this key `NSIncludesSubdomains ` to api.domainname.com dictionary.And set it to YES to include subdomains — Leo, Oct 20 '15 at 13:44
@Leo No, doesn't work. Is it something wrong with the `Exception Domains` format? — Bright, Oct 20 '15 at 13:47
I notice that your request is `https`,it seems that it is not the problem of App Transport Security. Does your api server have valid Certificate? — Leo, Oct 20 '15 at 13:52

score 2 · Answer 1 · answered Oct 20 '15 at 13:53

I'm not sure NSThirdPartyExceptionAllowsInsecureHTTPLoads is the right key to use when the connection is via HTTPS. You should probably use NSThirdPartyExceptionMinimumTLSVersion or NSThirdPartyExceptionRequiresForwardSecrecy.

I would highly recommend reading the App Transport Security Technote document, specially the Diagnosing Connection Issues section.

There is a tool that may help you diagnose your domain:

/usr/bin/nscurl --ats-diagnostics [--verbose] URL

score 1 · Answer 2 · answered Oct 20 '15 at 13:36

1

Make NSAllowsArbitraryLoads to YES to disable ATS.

answered Oct 20 '15 at 13:36

Bhavuk Jain

2,167
1
15
23

score 0 · Answer 3 · edited May 23 '17 at 11:52

0

Add NSIncludesSubdomains as you refer to subdomains and wants to have it also as an exception. See this answer for more details

edited May 23 '17 at 11:52

Community

1
1

answered Oct 21 '15 at 07:02

Julian

9,299
5
48
65

App Transport Security: NSURLSession/NSURLConnection HTTP load failed

3 Answers3