无法使用分发证书发送APNS消息

本文关键字:证书 APNS 消息 | 更新日期: 2023-09-27 18:21:52

我已经使用开发证书和gateway.sandbox.push.apple.com设置并成功测试了APNS消息传递
当我切换到我的分发证书和gateway.push.apple.com时,消息无法通过,我得到一个异常:

无法将数据写入传输连接:主机中的软件中止了已建立的连接。

我已经按照这些教程生成了p12证书:

http://www.raywenderlich.com/32960/apple-push-notification-services-in-ios-6-tutorial-part-1http://code.google.com/p/apns-sharp/wiki/HowToCreatePKCS12Certificate

我发送通知的服务器软件是一个使用SslStreamX509Certificate2类的.NET应用程序。

以下是连接代码:

    /// <summary>
    /// Establish connection to Apple's Push Notification System using the variables in the config file.
    /// </summary>
    public void ConnectToAPNS()
    {
        try
        {
            int port = Convert.ToInt32(Config.SSL_PORT ); // 2195
                // pick the target address
            String hostname = Config.SSL_PATH;  // gateway.push.apple.com
            //load certificate
            string certificatePath = Config.CERT_FILE; //.p12 certification file
            string certificatePassword = Config.CERT_PASS;
            byte[] p12Data = System.IO.File.ReadAllBytes(certificatePath);
            X509Certificate2 clientCertificate = new X509Certificate2(p12Data, certificatePassword, X509KeyStorageFlags.MachineKeySet | X509KeyStorageFlags.PersistKeySet | X509KeyStorageFlags.Exportable);
            X509Certificate2Collection certificatesCollection = new X509Certificate2Collection();
            certificatesCollection.Add(clientCertificate);
            RemoteCertificateValidationCallback remote = new RemoteCertificateValidationCallback(ValidateServerCertificate);
            client = new TcpClient(hostname, port);
            sslStream = new SslStream(
                    client.GetStream(),
                    false,
                    remote,
                    null
            );
            try
            {
                sslStream.AuthenticateAsClient(hostname, certificatesCollection, SslProtocols.Tls, true);
            }
            catch (AuthenticationException e)
            {
                IQLogger.Logger.LogError("Push NotifyMessenger ConnectToAPNS: " + e.Message);
                client.Close();
                sslStream = null;
                client = null;
                return;
            }
        }catch (Exception e)
        {
            IQLogger.Logger.LogError("PushNotifyMessenger ConnectToAPNS: " + e.Message);
            sslStream = null;
            client = null;
            return;
        }
        return;
    }
    /// <summary>
    /// Call back checks for validation error
    /// </summary>
    /// <returns></returns>
    public static bool ValidateServerCertificate( object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors sslPolicyErrors)
    {
        try{
            if (sslPolicyErrors == SslPolicyErrors.None)
                return true;
        }
        catch 
        {
        }
        IQLogger.Logger.LogError("PushNotifyMessenger ValidateServerCertificate: sslPolicyErrors" + sslPolicyErrors);
        // Do not allow this client to communicate with unauthenticated servers. 
        return false;
    }

这是发送消息的代码:

    /// <summary>
    /// I send a text message to a specified device ID. I provide an example of how to format a message for the APNS system. 
    /// The message must be formatted in Json and be sent as a byte array.
    /// </summary>
    /// <param name="deviceId"> A string containing 64 characters representing hexidecimal values of a 32 byte device code</param>
    /// <param name="msgPrompt">The text that will popup on the device </param>
    /// <param name="msgData"> XML that will be put in the XML json Section. This data will be invisible to the recipient's user, 
    /// but will be accessible by the recipient program</param>
    public void SendMessage(string deviceId, string msgPrompt, string msgData)
    {
        try{
            if (client == null || sslStream == null)
            {
                ConnectToAPNS();
            }
            // Encode a test message into a byte array.
            MemoryStream memoryStream = new MemoryStream();
            BinaryWriter writer = new BinaryWriter(memoryStream);
            writer.Write((byte)0);  //The command
            writer.Write((byte)0);  //The first byte of the deviceId length (big-endian first byte)
            writer.Write((byte)32); //The deviceId length (big-endian second byte)
            byte[] arDeviceID = ConvertDeviceID(deviceId);//System.Text.Encoding.UTF8.GetBytes(deviceId);
            writer.Write(arDeviceID);
            String payload = "{'"aps'":{'"alert'":'"" + msgPrompt + "'",'"badge'":1,'"xml'":'"" + msgData + "'"}}";
            writer.Write((byte)0); //First byte of payload length; (big-endian first byte)
            writer.Write((byte)payload.Length); //payload length (big-endian second byte)
            byte[] b1 = System.Text.Encoding.UTF8.GetBytes(payload);
            writer.Write(b1);
            writer.Flush();
            byte[] array = memoryStream.ToArray();
            sslStream.Write(array);   // <<<<<<<<<< exception thrown here
            sslStream.Flush();
        }
        catch (Exception e)
        {
            IQLogger.Logger.LogError("PushNotifyMessenger.SendMessage: " + e.Message);
            return;
        }
    }

在第2次或第3次尝试发送APNS消息时引发异常。然而,没有一条消息能传到设备上。我可以换回我的开发证书,这个代码运行得很好(APNS消息到达设备)。

在我寻找解决问题的过程中,我遇到了一些帖子,称开发证书在某种程度上干扰了部署,但我不明白这是如何发生的,也不知道我应该怎么解决。

提前感谢您提供的任何帮助。

无法使用分发证书发送APNS消息

确保您使用的是APNS实时服务器URLssl://gateway.push.apple.com:2195