RocketChat / Rocket.Chat.iOS

Legacy mobile Rocket.Chat client in Swift for iOS
https://rocket.chat
MIT License
1.04k stars 438 forks source link

Broken SSO authentication with the new update #2804

Open caggles opened 4 years ago

caggles commented 4 years ago

Since the new update, some of our users have been complaining of being unable to login to our rocketchat server on iOS. They are capable of getting in on PC and through Safari on their phones, but the app produces the following error:

Error loading page

Domain: NSURLErrorDomain
Error Code: -1200
Description: An SSL error has occurred and secure connection to the server cannot be made.

We authenticate to our private rocketchat server using Keycloak SSO with two providers: GitHub, and our internal enterprise user accounts, which communicates with Keycloak using SiteMinder. GitHub works fine, but if they're using their internal user account, we get the error above. It worked fine before the update to app version 4.1.0.

Has anyone else had a problem like this?

caggles commented 4 years ago

Further investigation has found that our SiteMinder logon page doesn't have PFS turned on. Would this be sufficient to cause this error? Does the RocketChat iOS app require PFS?