APNS push server SSL3.0 to TLS (iPhone push Service), apnsiphone

APNS push server SSL3.0 to TLS (iPhone push Service), apnsiphone
(Repost this article, please describe the source of the original article) official release of Apple

Update to the Apple Push Notification Service

October 22,201 4
The Apple Push Notification service will be updated and changes to your servers may be required to remain compatible.


In order to protect our users against a recently discovered security issue with SSL version 3.0 the Apple Push Notification server will remove support for SSL 3.0 on Wednesday, October 29. providers using only SSL 3.0 will need to support TLS as soon as possible to ensure the Apple Push Notification service continues to perform as expected. providers that support both TLS and SSL 3.0 will not be affected and require no changes.

"In view of the latest vulnerability detected in SSL 3.0, APNS decided to stop its support for SSL October 29 from March 13, 3.0 next week to protect users. All push services that only support SSL 3.0 must be replaced with TLS to ensure that the PUSH Service runs properly. services that support SSL 3.0 and TLS are not affected by this update. (In the afternoon, all the push services of our company stopped immediately)


To check for compatibility, we have already disabled SSL 3.0 on the Provider Communication interface in the development environment only. developers can immediately test in this development environment to make sure push notifications can be sent to applications.

SSL and TLS

Secure Socket Layer(SSL) And its successorTransport Layer Security(TLS) Are protocols which use cryptographic algorithms to secure the communication between 2 entities. It is just a secure layer running on top of HTTP.

System Support for SSL and TLS protocols

If your system does not support it, update it.

The modification process is very simple (java and php platforms are modified in the same way. Currently, our company is a. net platform)

The details are as follows:

Find the corresponding file:

Change SslProtocols. Ssl -- to-> SslProtocols. Tls.

Change SslProtocols. Ssl -- to-> SslProtocols. Tls.

For push services written in other languages, the default class libraries support this enumeration type, for example, in java.

final SSLContext sslContext = SSLContext.<span style="color:#ff6666;">getInstance("TLS");</span>sslContext.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);

Make similar changes to other languages.

Hope to help you!

Apple Push Notification Service, application server, and ipad client that cannot receive APNS feedback has been uninstalled

Itunes.apple.com/...0? Mt = 8
Download the software and check whether the push is normal. If the problem is solved, use it.
 
What is the traffic for Apple's push (APNs?

Apple's APNs push does not charge traffic. The maximum load for each push notification is 256 bytes. However, the device has a resident process in the background to maintain a Real-Time SSL connection with the Remote Apple push server (or timed reconnection when the pure Wi-Fi environment is in standby mode at the same time ), this requires additional traffic, but not much.