APNS Push server-side SSL3.0 to TLS (iphone apple push service)

Apple's official release

Update to the Apple Push Notification Service

October 22, 2014
The Apple Push Notification service is updated and changes to your servers could be required to remain compatible.


In order to protect we users against a recently discovered security issue with SSL version 3.0 the Apple Push notificatio n server would remove support for SSL 3.0 on Wednesday, October 29. Providers using only SSL 3.0 would need to support TLS as soon as possible to ensure the Apple Push Notification Service Co Ntinues to perform as expected. Providers that support both TLS and SSL 3.0 would not be affected and require no changes.

"In view of the newly discovered SSL 3.0 vulnerability, in order to protect users, APNs decided to stop support for SSL 3.0 in the next Wednesday, starting October 29. All push services that support SSL 3.0 only need to be replaced with TLS to ensure that the push service is functioning properly, while services that support SSL 3.0 and TLS are not affected by this update. (In the afternoon all of our company's push service stopped immediately)


To check for compatibility, we had already disabled SSL 3.0 on the Provider communication interface in the development EN Vironment only. Developers can immediately test in the development environment to make sure push notifications can is sent to application S.

SSL and TLS

Secure Socket Layer (SSL) and its successorTransport Layer Security (TLS) is protocols which use cryptographic ALG Orithms to secure the communication between 2 entities. It is just a secure layer running on top of HTTP.

System support for SSL and TLS protocols

If your system does not support it, update it quickly.

The modification process is very simple (Java and PHP platform modify the same way, currently our company is the platform of. NET)

Specific as follows:

Locate the corresponding file:

Change the sslprotocols.ssl--to->sslprotocols.tls.

Change the sslprotocols.ssl--to->sslprotocols.tls.

Push services written in other languages, this enumeration type is supported in the default class library, as in Java:

Final Sslcontext sslcontext = Sslcontext.<span style= "color: #ff6666;" >getinstance ("TLS"); </span>sslcontext.init (Kmf.getkeymanagers (), tmf.gettrustmanagers (), NULL);

Make similar changes in other languages.

Hope to help everyone!

APNS Push server-side SSL3.0 to TLS (iphone apple push service)