> On Aug 8, 2014, at 2:54 PM, David Quon <[email protected]> wrote: > > Unfortunately `{(id)kCFStreamSSLValidatesCertificateChain, @NO}` wasn't the > fix we were looking for. Probably need to try to pre-install the > intermediate SSL certificate in the keychain and see if that fixes the issue.
I don't think this problem is related to the certificate. Error -9800 is errSSLProtocol (it's defined in SecureTransport.h) which sounds like a low-level error; there are more specific error codes for cert related problems, like errSSLXCertChainInvalid and errSSLUnknownRootCert. Even a problem with cipher suites would result in errSSLNegotiation. errSSLProtocol sounds like a generic "WTF?" syntax error. My guess is that the client is somehow connecting to something that isn't actually using SSL at all. Have you been able to packet-sniff the connection and see what the data being received is? —Jens -- You received this message because you are subscribed to the Google Groups "Couchbase Mobile" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/mobile-couchbase/CBAED9F1-C527-461C-B151-57233DF72A49%40couchbase.com. For more options, visit https://groups.google.com/d/optout.
