Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: CFReadStreamRead doesn't read data over SSL (HTTPS) server



At 9:20 +0000 14/5/07, Yuvaraj D wrote:
But "CFReadStreamRead" fails to read any data and throws up an error which when logged gives "-9812" which means "errUnknownRootCert" as seen in the "SecureTransport.h" header file.

This pretty much means what it says: the root cert of the cert chain advertised by the server isn't in Mac OS X's list of trusted root certs. You can either:


1. Give your server a proper cert.

2. Add the cert to your list of trusted root certs (you can do this using Keychain Access to add it to /System/Library/Keychains/X509Anchors).

3. Disable this check by setting kCFStreamSSLAllowsAnyRoot on the stream.

Of these, only option 1 is a good solution if you plan to deploy your program to a wide user base.

S+E
--
Quinn "The Eskimo!"                    <http://www.apple.com/developer/>
Apple Developer Relations, Developer Technical Support, Core OS/Hardware
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macnetworkprog/email@hidden

This email sent to email@hidden
References: 
 >CFReadStreamRead doesn't read data over SSL (HTTPS) server (From: "Yuvaraj D" <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.