Apple Announced new iOS TLS network security requirements for network connected apps

Solar2D iOS
#1

It appears Apple has blocked cleartext network protocols by default on iOS 9 forcing secure transport (TLS) for all network connections. This seems to directly impact any Corona SDK and Enterprise builds deployed for iOS 9.

 

Server connectivity via HTTP, REST and WebSockets (including WAMP, or other sub-protocols) seem to be affected. There is a workaround by disabling network security in the app or whitelisting URL’s / URI’s via NSAppTransportSecurity flag. This isn’t practical for deployment and is outside Apple’s intended security focused roadmap to “protect their customers", nor works for any app with a data feed from external services.

 

In my situation, I have a server that is properly secured with certs and works fine with the Corona Simulator for both https:// REST API and wss:// WAMP calls. However, once deployed to a real iOS device via Corona SDK Builder or Enterprise, the app fails with errors (see: “An SSL error has occurred and a secure connection to the serve cannot be made.”) Any help figuring this out is appreciated.

 

APPLE TALKS ABOUT THE NEW REQUIREMENTS HERE:

At WWDC 2015 Session 711, Luke Case talked about the new iOS security model. By default, iOS blocks all cleartext communication with an external URL and they are requiring HTTPS for all communications out of the box.

https://developer.apple.com/videos/wwdc/2015/?id=711

 

HACK WORKAROUND:

http://stackoverflow.com/questions/31216758/how-can-i-add-nsapptransportsecurity-to-my-info-plist-file

#2

I think you can find your answer here: https://coronalabs.com/blog/2015/09/17/about-app-transport-security-ats/

Good luck.

#3

Thanks @springmorning! That should solve the SDK build process. Enterprise is being used and need to compile in the openssl plugin, but can’t seem to get a working Xcode 7 project. The Github reference project doesn’t compile and docs in this area are thin. Are you aware of any sample Xcode projects that are up to date, or more comprehensive docs to get it the plugin included and building?

#4

I wish I could help you there, but I have no clue :slight_smile: Good luck anyways!

#5

I think you can find your answer here: https://coronalabs.com/blog/2015/09/17/about-app-transport-security-ats/

Good luck.

#6

Thanks @springmorning! That should solve the SDK build process. Enterprise is being used and need to compile in the openssl plugin, but can’t seem to get a working Xcode 7 project. The Github reference project doesn’t compile and docs in this area are thin. Are you aware of any sample Xcode projects that are up to date, or more comprehensive docs to get it the plugin included and building?

#7

I wish I could help you there, but I have no clue :slight_smile: Good luck anyways!