Skip to content

Instantly share code, notes, and snippets.

@phynet

phynet/server-ats-support.md

Last active March 2, 2017 14:49
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save phynet/94f6e9af545fbdbb7a81e5569ce62770 to your computer and use it in GitHub Desktop.
Save phynet/94f6e9af545fbdbb7a81e5569ce62770 to your computer and use it in GitHub Desktop.
Download ZIP
ATS support
Raw
server-ats-support.md

From Alejandro Ramírez

Does my server supports ATS?

 nscurl --ats-diagnostics https://m.foo.com/bar

The tool will run through several different combinations of ATS exceptions, trying a secure connection to the given host under each ATS configuration and reporting the result. The ATS configuration changes made by nscurl include:

• Turning on the “allow arbitrary loads” flag
• Dropping the minimum required TLS version to 1.1, then 1.0
• Removing the Perfect Forward Secrecy (PFS) requirement

Including the —verbose flag alongside —ats-diagnostics causes nscurl to also output the exact ATS configuration dictionary being used for each connection, as well as the error returned in its internal NSURLSessionDelegate implementation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment