> On Oct 2, 2014, at 10:25 AM, David Quon <[email protected]> wrote: > > This was fixed on the server side by hardcoding to always use TLS v1 which is > supported by iOS 8. We tried all different combinations of TLS v1.1 and v1.2 > but the only one that wouldn't cause the problem above was always using TLS > v1. This is not an ideal fix but it worked for us. If anyone else finds a > more graceful solution please post. > > Here's a couple of links that led us to the "solution": > https://github.com/AFNetworking/AFNetworking/issues/2314#issuecomment-56664366 > > <https://github.com/AFNetworking/AFNetworking/issues/2314#issuecomment-56664366> > http://stackoverflow.com/questions/25914248/ios-8-has-broken-ssl-connection-in-my-app-cfnetwork-sslhandshake-failed-9806 > > <http://stackoverflow.com/questions/25914248/ios-8-has-broken-ssl-connection-in-my-app-cfnetwork-sslhandshake-failed-9806>
These look like different issues — the first thread is about a bug in keep-alive connection handling, while the second is about SSL handshakes. How do these relate? > Jens as usual you were correct in this failure being a lower level problem. > :+1: I've found it's usually a good tactic to blame bugs on something else ;-) But seriously, there might be wiggle room here to work around this in CBL. From the descriptions on stackoverflow, it sounds like this has to do with certificate checking, not the mechanics of the handshake protocol. We might be able to change how we check the server cert. Do you have any easy steps to reproduce this? We haven't run into it here, but I don't know if we've actually tested SSL connections on an iOS 8 device. Is your SSL server just Sync Gateway itself, or do you have a proxy/gateway doing it? —Jens -- You received this message because you are subscribed to the Google Groups "Couchbase Mobile" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/mobile-couchbase/6FB196E0-312C-4372-95C3-A089805BF6D3%40couchbase.com. For more options, visit https://groups.google.com/d/optout.
