air 19 & iOs 9 App Transport Security

Report · Oct 05, 2015

I had downloaded the new air 19 sdk for iOs9 compatibility.

I had found on internet that I need to add the follow code in info.plist:

<key>NSAppTransportSecurity</key> <dict> <key>NSExceptionDomains</key> <dict> <key>facebook.com</key> <dict> <key>NSIncludesSubdomains</key> <true/> <key>NSThirdPartyExceptionRequiresForwardSecrecy</key> <false/> </dict> <key>fbcdn.net</key> <dict> <key>NSIncludesSubdomains</key> <true/> <key>NSThirdPartyExceptionRequiresForwardSecrecy</key> <false/> </dict> <key>akamaihd.net</key> <dict> <key>NSIncludesSubdomains</key> <true/> <key>NSThirdPartyExceptionRequiresForwardSecrecy</key> <false/> </dict> </dict> </dict>

but, I don't any idea about this, info.plist, file in my project.

Everyones now where I may add this code?

I have found this on internet:

Preparing Your Facebook Apps for iOS 9 (Beta) - Documentation - Facebook for Developers

https://developer.apple.com/library/prerelease/ios/technotes/App-Transport-Security-Technote/

but doesn't help me.

Thanks

Report · Oct 06, 2015

I found! I have to change the infoadditions in app.xml

Report · Oct 07, 2015

This might help spank/ — IOError #2032, iOS9, Adobe Air and ATS

Report · Dec 09, 2015

Your solution need a known domain to be specified, but our App let user choose his own ddns or ip address.

In iOS9 (and only in iOS9) when the server is not reachable or mispelled or network is down, the App crash.

If the server is reachable the App works well.

Some workaround for this?

Thank you.

Bye.

Report · Dec 10, 2015

Hi, HomeInnovation‌,

kindly add the following in your app-xml info additions for your iPhone. The below code should allow all the addresses as you need. Same has been mentioned in the Release notes as well:

http://fpdownload.macromedia.com/pub/labs/flashruntimes/shared/air20_flashplayer20_releasenotes.pdf ...

<key>NSAppTransportSecurity</key>

<dict>

<key>NSAllowsArbitraryLoads</key><true/>

</dict>

Regarding the App crash, It is recommended to handle the misspelled and network down conditions in the application code itself.

If you still face problem, kindly send a sample application at CHHETRIatADOBEdotCOM. We will surely try to fix your problem.

-Roshan

Report · Dec 11, 2015

Roshan, thank you for your support.

at the moment our iPhone is not working (we don't like very much Apple devices, we have only one), so we have to buy another one to start a serious test and debug.

When we will able to make this I will report to you.

Meanwhile...

The project is a bit complex so is difficult for me to send you the exact code that fails.

The whole project is developed in AS3 .as class files and some .fla files for graphic elements, the only external code is GreenSock TweenLite (as3 class, not swc), no ANE, the actual ipa file was packaged by our creative consultant using Flash Pro CC on AIR 17.0.0.124 ("publish" button of Flash)

at the moment there is no NSAppTransportSecurity key in the Main-app.xml file.

We use the Loader class to dinamically load some compiled external SWF packaged in the same ipa file (the swfs loaded depend from users needs), the as3 code compiled in the external SWF is the same code compiled in the Main.swf

We use XMLSocket for data transfer to and from the server and URLLoader to retrieve configuration files on http server. Everythings is served by our custom java code (linux or windows host os)

For XMLSocket we handle IOErrorEvent.IO_ERROR and Event.COMPLETE events.

For XMLSocket we handle Event.CONNECT,Event.CLOSE, DataEvent.DATA, IOErrorEvent.IO_ERROR, SecurityErrorEvent.SECURITY_ERROR events.

We can not check for mispelled address, because the server could be every machine name, ip address or fqdn.

We saw the bug on variouscustomers's devices, when the server is not reachable for some reason, the app force close with no warning and no events raised, strange behaviour

The problem was introduced with iOS9, no problem on previous versions and no problem on the same code packaged for Android (AIR 17.0.0.124)

The next release will be packaged with a more recent version of Air.

Sorry for poor English, I will report to you as soon as I will have a device to test with.

Thank you.

Bye