Issue with GRPC SSL IOS Library

620 views
Skip to first unread message

acor...@gmail.com

unread,
Jan 19, 2017, 8:23:23 PM1/19/17
to grpc.io

Hey Guys i have a problem with the ios library.

I am trying to connect through grpc to a golang server that is running grpc and i keep getting an error:

E0119 16:40:21.466024000 123145477918720 ssl_transport_security.c:945] Handshake failed with fatal error SSL_ERROR_SSL: error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER.

E0119 16:40:21.466290000 123145477918720 handshake.c:128] Security handshake failed: {"created":"@1484872821.466230000","description":"Handshake failed","file":"/Users/adrian/Development/indy-ios/Pods/gRPC-Core/src/core/lib/security/transport/handshake.c","file_line":264,"tsi_code":10,"tsi_error":"TSI_PROTOCOL_FAILURE"}

E0119 16:40:21.467211000 123145477918720 ssl_transport_security.c:945] Handshake failed with fatal error SSL_ERROR_SSL: error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER.

E0119 16:40:21.467376000 123145477918720 handshake.c:128] Security handshake failed: {"created":"@1484872821.467357000","description":"Handshake failed","file":"/Users/adrian/Development/indy-ios/Pods/gRPC-Core/src/core/lib/security/transport/handshake.c","file_line":264,"tsi_code":10,"tsi_error":"TSI_PROTOCOL_FAILURE"}

Message from debugger: Terminated due to signal 15


The server is http2 TLS 1.2 


Is the library doing something different from that by default? I am not able to find any support or help for getting this to work. 


Any help would be greatly appreciated.

mx...@google.com

unread,
Jan 24, 2017, 7:58:03 PM1/24/17
to grpc.io, acor...@gmail.com
This is usually caused by a version mismatch between client and server. Could you provide what versions of client and server are you using?
Message has been deleted

acor...@gmail.com

unread,
Jan 25, 2017, 6:29:52 PM1/25/17
to grpc.io, acor...@gmail.com, mx...@google.com
I did not change anything and it started working once i used a different certificate. Is there a way to bypass the certificate for dev environments? Currently it seems i always have to provide the certificate chain to trust when connecting. 
Reply all
Reply to author
Forward
0 new messages