0

I am trying to figure out a ssl error that happens when sending a request to the server. FYI, this error happens inconsistently.

NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9800)
Task <A500DD66-FAD8-4E7C-B4C8-5A53279BC1B7>.<1> HTTP load failed (error code: -1200 [3:-9800])

According to some research, 9800 error indicates sslErrProtocol. To see if there is anything wrong with the server, I checked the configuration of Tomcat server. So far, no error has been reported in the server side.

To test out my server, I used nscurl --ats-diagnostics on my server. I found three failures in the result set.

Configuring TLS exceptions for <my-server>
---
TLSv1.3
2018-05-17 13:50:31.485 nscurl[2021:12478130] NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9800)
Result : FAIL
---

Configuring TLS exceptions with PFS disabled for <my-server>
---
TLSv1.3 with PFS disabled
2018-05-17 13:50:31.938 nscurl[2021:12478129] NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9800)
Result : FAIL
---

Configuring TLS exceptions with PFS disabled and insecure HTTP allowed for <my-server>

---
TLSv1.3 with PFS disabled and insecure HTTP allowed
2018-05-17 13:50:32.217 nscurl[2021:12478105] NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9800)
Result : FAIL
---

I have no idea what is causing this error or how to mitigate this situation. I am not going to add NSArbitraryLoad to the info.plist because this is not the solution I am looking for, plus it does not really work in my case.

Please provide any feedbacks and help me through this.

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.