В последнее время работаю в iOS ATS. И я перечисляю все серверные API, которые использовались в моем приложении. Я использую /usr/bin/nscurl --ats-diagnostics server_api_url для проверки, и я получу следующий отчет. Но я не знаю, подтверждает ли серверный API ATS или нет.
Starting ATS Diagnostics
Configuring ATS Info.plist keys and displaying the result of HTTPS loads to xxxxx.
A test will "PASS" if URLSession:task:didCompleteWithError: returns a nil error.
Use '--verbose' to view the ATS dictionaries used and to display the error received in URLSession:task:didCompleteWithError:.
================================================================================
Default ATS Secure Connection
---
ATS Default Connection
Result : PASS
---
================================================================================
Allowing Arbitrary Loads
---
Allow All Loads
Result : PASS
---
================================================================================
Configuring TLS exceptions for xxxx
---
......
================================================================================
Configuring PFS exceptions for xxx
---
Disabling Perfect Forward Secrecy
Result : PASS
---
================================================================================
Configuring PFS exceptions and allowing insecure HTTP for xxxx
---
Disabling Perfect Forward Secrecy and Allowing Insecure HTTP
Result : PASS
---
================================================================================
Configuring TLS exceptions with PFS disabled for xxx
---
......
---
================================================================================
Configuring TLS exceptions with PFS disabled and insecure HTTP allowed for xxx
---
TLSv1.3 with PFS disabled and insecure HTTP allowed
2019-06-10 14:05:43.052 nscurl[96230:2204700] NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9858)
Result : FAIL
---
---
......
================================================================================