GSA / datagov-wptheme

Data.gov WordPress Theme (obsolete)
https://www.data.gov
Other
1.88k stars 411 forks source link

Unable to query "https://inventory.data.gov" on iOS app #766

Open bmwertman opened 7 years ago

bmwertman commented 7 years ago

I had been successfully doing HTTPS GET requests to https://inventory.data.gov/api/action/datastore_search on iOS devices. Now I get errors such as;

NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9824)

and

nw_coretls_read_one_record tls_handshake_process: [-9824]

I think there were some changes to the TLS security by Apple. I'm not sure, but I think this endpoint's TLS version may be behind what Apple requires

See Also; https://developer.apple.com/library/content/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW33

http://cordova.apache.org/docs/en/6.x/guide/appdev/whitelist/index.html#page-toc-source

Can someone confirm the TLS version at this endpoint? Or maybe some other configuration for my request to go through?

kvuppala commented 7 years ago

@bmwertman Site is using TLS 1.2 Protocol with an AES256 cipher, might require some updates on the iOS app to support the same

theresaanna commented 6 years ago

Can this still be reproduced?