Skip to content

Commit 841c038

Browse files
Merge pull request #109334 from TimShererWithAquent/us1679050br
Change SSL to TLS per 1679050
2 parents 4e04451 + 6bb952c commit 841c038

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

articles/active-directory/develop/ssl-issues.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
2-
title: Troubleshoot SSL issues (MSAL iOS/macOS) | Azure
2+
title: Troubleshoot TLS/SSL issues (MSAL iOS/macOS) | Azure
33
titleSuffix: Microsoft identity platform
4-
description: Learn what to do about various problems using SSL certificates with the MSAL.Objective-C library.
4+
description: Learn what to do about various problems using TLS/SSL certificates with the MSAL.Objective-C library.
55
services: active-directory
66
documentationcenter: ''
77
author: mmacy
@@ -20,23 +20,23 @@ ms.reviewer: ''
2020
ms.custom: aaddev
2121
---
2222

23-
# How to: Troubleshoot MSAL for iOS and macOS SSL issues
23+
# How to: Troubleshoot MSAL for iOS and macOS TLS/SSL issues
2424

2525
This article provides information to help you troubleshoot issues that you may come across while using the [Microsoft Authentication Library (MSAL) for iOS and macOS](reference-v2-libraries.md)
2626

2727
## Network issues
2828

2929
**Error -1200**: "An SSL error has occurred and a secure connection to the server can't be made."
3030

31-
This error means that the connection isn't secure. It occurs when a certificate is invalid. For more information, including which server is failing the SSL check, refer to `NSURLErrorFailingURLErrorKey` in the `userInfo` dictionary of the error object.
31+
This error means that the connection isn't secure. It occurs when a certificate is invalid. For more information, including which server is failing the TLS check, refer to `NSURLErrorFailingURLErrorKey` in the `userInfo` dictionary of the error object.
3232

3333
This error is from Apple's networking library. A full list of NSURL error codes is in NSURLError.h in the macOS and iOS SDKs. For more details about this error, see [URL Loading System Error Codes](https://developer.apple.com/documentation/foundation/1508628-url_loading_system_error_codes?language=objc).
3434

3535
## Certificate issues
3636

37-
If the URL providing an invalid certificate connects to the server that you intend to use as part of the authentication flow, a good start to diagnosing the problem is to test the URL with a SSL validation service such as [Qualys SSL Labs Analyzer](https://www.ssllabs.com/ssltest/analyze.html). It tests the server against a wide array of scenarios and browsers and checks for many known vulnerabilities.
37+
If the URL providing an invalid certificate connects to the server that you intend to use as part of the authentication flow, a good start to diagnosing the problem is to test the URL with an SSL validation service such as [SSL Server Test](https://www.ssllabs.com/ssltest/analyze.html). It tests the server against a wide array of scenarios and browsers and checks for many known vulnerabilities.
3838

39-
By default, Apple's new [App Transport Security (ATS)](https://developer.apple.com/library/archive/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW35) feature applies more stringent security policies to apps that use SSL certificates. Some operating systems and web browsers have started enforcing some of these policies by default. For security reasons, we recommend you not disable ATS.
39+
By default, Apple's new [App Transport Security (ATS)](https://developer.apple.com/library/archive/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW35) feature applies more stringent security policies to apps that use TLS/SSL certificates. Some operating systems and web browsers have started enforcing some of these policies by default. For security reasons, we recommend you not disable ATS.
4040

4141
Certificates using SHA-1 hashes have known vulnerabilities. Most modern web browsers don't allow certificates with SHA-1 hashes.
4242

0 commit comments

Comments
 (0)