无法使用分发证书发送APNS消息
本文关键字:证书 APNS 消息 | 更新日期: 2023-09-27 18:21:52
我已经使用开发证书和gateway.sandbox.push.apple.com
设置并成功测试了APNS消息传递
当我切换到我的分发证书和gateway.push.apple.com
时,消息无法通过,我得到一个异常:
无法将数据写入传输连接:主机中的软件中止了已建立的连接。
我已经按照这些教程生成了p12证书:
http://www.raywenderlich.com/32960/apple-push-notification-services-in-ios-6-tutorial-part-1http://code.google.com/p/apns-sharp/wiki/HowToCreatePKCS12Certificate
我发送通知的服务器软件是一个使用SslStream
和X509Certificate2
类的.NET应用程序。
以下是连接代码:
/// <summary>
/// Establish connection to Apple's Push Notification System using the variables in the config file.
/// </summary>
public void ConnectToAPNS()
{
try
{
int port = Convert.ToInt32(Config.SSL_PORT ); // 2195
// pick the target address
String hostname = Config.SSL_PATH; // gateway.push.apple.com
//load certificate
string certificatePath = Config.CERT_FILE; //.p12 certification file
string certificatePassword = Config.CERT_PASS;
byte[] p12Data = System.IO.File.ReadAllBytes(certificatePath);
X509Certificate2 clientCertificate = new X509Certificate2(p12Data, certificatePassword, X509KeyStorageFlags.MachineKeySet | X509KeyStorageFlags.PersistKeySet | X509KeyStorageFlags.Exportable);
X509Certificate2Collection certificatesCollection = new X509Certificate2Collection();
certificatesCollection.Add(clientCertificate);
RemoteCertificateValidationCallback remote = new RemoteCertificateValidationCallback(ValidateServerCertificate);
client = new TcpClient(hostname, port);
sslStream = new SslStream(
client.GetStream(),
false,
remote,
null
);
try
{
sslStream.AuthenticateAsClient(hostname, certificatesCollection, SslProtocols.Tls, true);
}
catch (AuthenticationException e)
{
IQLogger.Logger.LogError("Push NotifyMessenger ConnectToAPNS: " + e.Message);
client.Close();
sslStream = null;
client = null;
return;
}
}catch (Exception e)
{
IQLogger.Logger.LogError("PushNotifyMessenger ConnectToAPNS: " + e.Message);
sslStream = null;
client = null;
return;
}
return;
}
/// <summary>
/// Call back checks for validation error
/// </summary>
/// <returns></returns>
public static bool ValidateServerCertificate( object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors sslPolicyErrors)
{
try{
if (sslPolicyErrors == SslPolicyErrors.None)
return true;
}
catch
{
}
IQLogger.Logger.LogError("PushNotifyMessenger ValidateServerCertificate: sslPolicyErrors" + sslPolicyErrors);
// Do not allow this client to communicate with unauthenticated servers.
return false;
}
这是发送消息的代码:
/// <summary>
/// I send a text message to a specified device ID. I provide an example of how to format a message for the APNS system.
/// The message must be formatted in Json and be sent as a byte array.
/// </summary>
/// <param name="deviceId"> A string containing 64 characters representing hexidecimal values of a 32 byte device code</param>
/// <param name="msgPrompt">The text that will popup on the device </param>
/// <param name="msgData"> XML that will be put in the XML json Section. This data will be invisible to the recipient's user,
/// but will be accessible by the recipient program</param>
public void SendMessage(string deviceId, string msgPrompt, string msgData)
{
try{
if (client == null || sslStream == null)
{
ConnectToAPNS();
}
// Encode a test message into a byte array.
MemoryStream memoryStream = new MemoryStream();
BinaryWriter writer = new BinaryWriter(memoryStream);
writer.Write((byte)0); //The command
writer.Write((byte)0); //The first byte of the deviceId length (big-endian first byte)
writer.Write((byte)32); //The deviceId length (big-endian second byte)
byte[] arDeviceID = ConvertDeviceID(deviceId);//System.Text.Encoding.UTF8.GetBytes(deviceId);
writer.Write(arDeviceID);
String payload = "{'"aps'":{'"alert'":'"" + msgPrompt + "'",'"badge'":1,'"xml'":'"" + msgData + "'"}}";
writer.Write((byte)0); //First byte of payload length; (big-endian first byte)
writer.Write((byte)payload.Length); //payload length (big-endian second byte)
byte[] b1 = System.Text.Encoding.UTF8.GetBytes(payload);
writer.Write(b1);
writer.Flush();
byte[] array = memoryStream.ToArray();
sslStream.Write(array); // <<<<<<<<<< exception thrown here
sslStream.Flush();
}
catch (Exception e)
{
IQLogger.Logger.LogError("PushNotifyMessenger.SendMessage: " + e.Message);
return;
}
}
在第2次或第3次尝试发送APNS消息时引发异常。然而,没有一条消息能传到设备上。我可以换回我的开发证书,这个代码运行得很好(APNS消息到达设备)。
在我寻找解决问题的过程中,我遇到了一些帖子,称开发证书在某种程度上干扰了部署,但我不明白这是如何发生的,也不知道我应该怎么解决。
提前感谢您提供的任何帮助。
确保您使用的是APNS实时服务器URLssl://gateway.push.apple.com:2195