APNS push 伺服器端 SSL3.0 轉 TLS （iPhone蘋果推送服務）

標籤：security   ssl   server   ios   

蘋果的官方發布

Update to the Apple Push Notification Service

October 22, 2014
The Apple Push Notification service will be updated and changes to your servers may be required to remain compatible.


In order to protect our users against a recently discovered security issue with SSL version 3.0 the Apple Push Notification server will remove support for SSL 3.0 on Wednesday, October 29. Providers using only SSL 3.0 will need to support TLS as soon as possible to ensure the Apple Push Notification service continues to perform as expected. Providers that support both TLS and SSL 3.0 will not be affected and require no changes.

"鑒於SSL 3.0最新發現的漏洞，為了保護使用者，APNS決定在下周三也就是10月29號起開始停止對SSL 3.0的支援。所有僅支援SSL 3.0的推送服務需要更換為TLS以確保推送服務能夠正常運行，同時支援了SSL 3.0和TLS的服務不會受到此次更新的影響。（下午我們公司所有的推送服務立馬停止了）


To check for compatibility, we have already disabled SSL 3.0 on the Provider Communication interface in the development environment only. Developers can immediately test in this development environment to make sure push notifications can be sent to applications.

SSL和TLS

 Secure Socket Layer (SSL) and its successorTransport Layer Security (TLS) are protocols which use cryptographic algorithms to secure the communication between 2 entities. It is just a secure layer running on top of HTTP.

系統對SSL和TLS協議的支援情況

如果你的系統不支援，趕緊更新吧。

修改過程很簡單（java和php平台修改方式一樣，目前我們公司是.net的平台）

具體如下：

找到對應檔案：

將SslProtocols.Ssl--改成->SslProtocols.Tls，即可。

將SslProtocols.Ssl--改成->SslProtocols.Tls，即可。

其他語言編寫的push服務，預設類庫中都支援此枚舉類型如：java中是這樣的

final SSLContext sslContext = SSLContext.<span style="color:#ff6666;">getInstance("TLS");</span>sslContext.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);

其他語言做類似修改即可。

希望對大家有協助！

APNS push 伺服器端 SSL3.0 轉 TLS （iPhone蘋果推送服務）