The iTunes Search API doesn't meet the requirements for ATS

Originator:padraig.kennedy
Number:rdar://21350522 Date Originated:11-Jun-2015 05:14 PM
Status:Closed Resolved:8-Jul-2015
Product:iOS SDK Product Version:9.0
Classification:Other Bug Reproducible:Always
 
Summary:
App Transport Security has strict requirements for https. iTunes Search doesn’t meet them

Steps to Reproduce:
Try to connect to iTunes Search using NSURLSession (See attached project) — without adding exceptions, it will fail.

Expected Results:
Apps should be able to connect to the iTunes Search server without exceptions.

Actual Results:
It fails.

Regression:
NSURLSession used to connect to https://itunes.search.com/ without any problems.

Notes:
The iTunes Search API server should be updated or the requirements should be relaxed.

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!