• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
CFHTTP SSL errors
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

CFHTTP SSL errors


  • Subject: CFHTTP SSL errors
  • From: Ryan McGann <email@hidden>
  • Date: Fri, 13 Mar 2009 15:15:40 -0700

Hello all,

I am using CFHTTPStream to send an HTTP POST message and am running into a problem. Best I can tell, I am getting an SSL error but it's impossible to tell what. My error callback gets called, after a lengthy delay (maybe 20-30 seconds later) with the error code -9806 and error domain 3. I searched for that error code in CFNetworkErrors.h and in other frameworks but didn't find it. The sources for CFNetwork aren't available anymore so I can't really search in there.

However if I break on __cxa_throw I see the following backtrace is throwing an exception, which leads me to believe there's an SSL error:
#0  0x95a82201 in __cxa_throw ()
#1  0x96e7421f in Security::UnixError::throwMe ()
#2  0x96e77f98 in Security::Dictionary::initFromFile ()
#3  0x96e7808e in Security::Dictionary::Dictionary ()
#4  0x96e0c0ea in RSAKeySizes::RSAKeySizes ()
#5  0x96e0c952 in Security::ModuleNexus<RSAKeySizes>::make ()
#6  0x96e745c3 in Security::ModuleNexusCommon::create ()
#7  0x96e0c8f8 in Security::ModuleNexus<RSAKeySizes>::operator() ()
#8  0x96e0c72a in rawCssmKeyToRsa ()
#9  0x96e0a1d7 in RSAKeyInfoProvider::QueryKeySizeInBits ()
#10 0x96dfd41b in AppleCSPSession::getKeySize ()
#11 0x96e47372 in cssm_QueryKeySizeInBits ()
#12 0x96dcf8d1 in CSSM_QueryKeySizeInBits ()
#13 0x96debba5 in CL_extractCSSMKeyNSS ()
#14 0x96dee573 in DecodedCert::extractCSSMKey ()
#15 0x96df1455 in AppleX509CLSession::CertGetKeyInfo ()
#16 0x96e42f64 in cssm_CertGetKeyInfo ()
#17 0x96dcb278 in CSSM_CL_CertGetKeyInfo ()
#18 0x96d5ad92 in sslPubKeyFromCert ()
#19 0x96d6021a in SSLProcessCertificate ()
#20 0x96d63284 in SSLProcessHandshakeRecord ()
#21 0x96d66b27 in SSLProcessProtocolMessage ()
#22 0x96d66cc3 in SSLHandshakeProceed ()
#23 0x96d66d38 in SSLHandshake ()
#24 0x90be7865 in SocketStream::_PerformSecurityHandshake_NoLock ()
#25 0x90c219d8 in SocketStream::socketCallback ()
#26 0x90c21c99 in SocketStream::_SocketCallBack_stream ()
#27 0x97126920 in __CFSocketDoCallback ()
#28 0x97127f65 in __CFSocketPerformV0 ()
#29 0x9711d5f5 in CFRunLoopRunSpecific ()
#30 0x9711dd34 in CFRunLoopRun ()

I tried turning off SSL certificate chain validation on the stream,
				CFDictionarySetValue( theSettings, kCFStreamSSLValidatesCertificateChain, kCFBooleanFalse );
				CFReadStreamSetProperty( _readStreamRef, kCFStreamPropertySSLSettings, theSettings );

but that didnt seem to make a difference. This is on Mac OS X 10.5.6 on an Intel MacBook Pro.


Anybody know (at Apple or otherwise) what this error means? Our Windows products use the same servers and they don't seem to have any SSL problems, so I am wondering if problem with the root certificate not being installed on Mac OS X.

Thanks,
Ryan

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden

  • Follow-Ups:
    • Re: CFHTTP SSL errors
      • From: Jens Alfke <email@hidden>
  • Prev by Date: Re: Reducing latency in TCP-based streams
  • Next by Date: Re: CFHTTP SSL errors
  • Previous by thread: Re: Reducing latency in TCP-based streams
  • Next by thread: Re: CFHTTP SSL errors
  • Index(es):
    • Date
    • Thread