APNS push 伺服器端 SSL3.0 轉 TLS (iPhone蘋果推送服務),apnsiphone
(轉載此文,請說明原文出處)蘋果的官方發布
Update to the Apple Push Notification Service
October 22, 2014
The Apple Push Notification service will be updated and changes to your servers may be required to remain compatible.
In order to protect our users against a recently discovered security issue with SSL version 3.0 the Apple Push Notification server will remove support for SSL 3.0 on Wednesday, October 29. Providers using only SSL 3.0 will need to support TLS as soon as possible to ensure the Apple Push Notification service continues to perform as expected. Providers that support both TLS and SSL 3.0 will not be affected and require no changes.
"鑒於SSL 3.0最新發現的漏洞,為了保護使用者,APNS決定在下周三也就是10月29號起開始停止對SSL 3.0的支援。所有僅支援SSL 3.0的推送服務需要更換為TLS以確保推送服務能夠正常運行,同時支援了SSL 3.0和TLS的服務不會受到此次更新的影響。(下午我們公司所有的推送服務立馬停止了)
To check for compatibility, we have already disabled SSL 3.0 on the Provider Communication interface in the development environment only. Developers can immediately test in this development environment to make sure push notifications can be sent to applications.
SSL和TLS
Secure Socket Layer (SSL) and its successorTransport Layer Security (TLS) are protocols which use cryptographic algorithms to secure the communication between 2 entities. It is just a secure layer running on top of HTTP.
系統對SSL和TLS協議的支援情況
如果你的系統不支援,趕緊更新吧。
修改過程很簡單(java和php平台修改方式一樣,目前我們公司是.net的平台)
具體如下:
找到對應檔案:
將SslProtocols.Ssl--改成->SslProtocols.Tls,即可。
將SslProtocols.Ssl--改成->SslProtocols.Tls,即可。
其他語言編寫的push服務,預設類庫中都支援此枚舉類型如:java中是這樣的
final SSLContext sslContext = SSLContext.<span style="color:#ff6666;">getInstance("TLS");</span>sslContext.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);
其他語言做類似修改即可。
希望對大家有協助!
Apple Push Notification Service ,應用程式伺服器端,接收不到APNS的反饋資訊ipad的用戶端已經卸載了
itunes.apple.com/...0?mt=8
下載這個軟體,看看推送正不正常再追問一下。如果問題以解決請採納。
蘋果的推送(APNs)費流量?
蘋果的 APNs 推送不費流量。每一條推播通知的最大負載是 256 個位元組。不過裝置後台有常駐進程,保持和遠端蘋果推送伺服器的即時 SSL 串連(或者是純 Wi-Fi 環境同時待機的情況下定時重連),這需要耗費額外的流量,但是不多。