Starting on Friday February 19th our application started having intermittent errors accessing the cloud ocrsdk api. However, it is erroring out each time with what looks like an SSL error. Our application is an Ionic Hybrid application which throws the following error in the Xcode console: NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9813). I can access the ocrsdk api fine when I drop to http, but that is not acceptable for our application. Also, from both an iOS device and an Android device if I go to the https://cloud.ocrsdk.com I get network errors. I have attached screenshots for both.android error ios error

asked 22 Feb '16, 03:09

ericp's gravatar image

ericp
112

I have done further testing with mobile browsers accessing https://cloud.ocrsdk.com on both ios 9.2 and ios 9.2.1. I can reproduce the certificate problem on ios 9.2.1 using both chrome and safari. Chrome errors out and Safari says it cannot verify server identity. Also, the hybrid Ionic app on ios 9.2.1 will work intermittently which might mean you have some servers with the wrong certificate.

(22 Feb '16, 04:46) ericp

Any feedback from the ABBYY team. Our application is failing as users are rapidly upgrading to iOS 9.2.1. Please provide some feedback.

(22 Feb '16, 17:40) ericpres

We're finding problems with the certificates that Abbyy use because they're provided by an ... exotic issuer.

Our issue is that we use Heroku who don't support their certificate and don't allow you to manually add the certificate as we don't have access to the file system.

For $300 Abbyy could buy a fully supported and recognised certificate that would solve a lot of these problems.

link
This answer is marked "community wiki".

answered 22 Feb '16, 16:09

Dan%20Jacobs's gravatar image

Dan Jacobs
111

I checked the certificate at Symantec and it gives an error for https://cloud.ocrsdk.com cert not installed correctly

link

answered 23 Feb '16, 01:53

ericpres's gravatar image

ericpres
112

Dear all,

We are extremely sorry for the delay in our response due to the state holidays in Russia. Indeed, for some reasons an intermediate certificate in a chain becomes invalid from time to time during last few days. We did not update the certificate and did no changes in the service, so we could not affect the validity of the certificate. Our IT and R&D departments are in contact with MS (service host) and GoDaddy (the certificate issuer) to find the cause. As soon as we get some new information, we will let you know.

link

answered 24 Feb '16, 12:46

Oksana%20Serdyuk's gravatar image

Oksana Serdyuk ♦♦
1.5k16

The update of the request:

Yesterday our development team made some changes on our side concerning SSL. An intermediate certificate was installed in addition to the main one on IIS8 used in the service. Also the service was re-deployed on the earlier version of the operating system. The fact is that the newer version has two changes regarding SSL, and we suppose that these changes might have this effect. Moreover the issue did not manifest itself immediately after changing the image of the operating system, it could begin gradually to occur on one user's side till the effect became quite significant.

Please kindly make sure that the issue is already solved on youк side and it has not been reproduced anymore?

Please take our apologies for possible difficulties to your business caused by this issue and thank you for your patience and collaboration!

link

answered 25 Feb '16, 17:18

Oksana%20Serdyuk's gravatar image

Oksana Serdyuk ♦♦
1.5k16

I have tested my application and customers are using it without issue now. We will keep a close eye on it and let you know if the issue resurfaces. Thank you.

(25 Feb '16, 20:24) ericpres

Dear ABBYY users,

Our development team did their best for localization and resolution of the issue. But this case is indeed very special, as only a few customers faced with the issue, and the service actually worked fine and other customers did not have problems. Moreover our own tests did not reveal the problem either, and the service certificate was valid. So, in order to thoroughly validate our resolution we would like to ask you to take part in our testing. For this it is necessary just use our test service https://mcnlds.ocrsdk.com which modulates the problem configuration. We would be very grateful if you are able to reproduce the issue again and inform us about it.

link

answered 04 Mar '16, 20:55

Oksana%20Serdyuk's gravatar image

Oksana Serdyuk ♦♦
1.5k16

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×160
×3

Asked: 22 Feb '16, 03:09

Seen: 1,119 times

Last updated: 04 Mar '16, 20:55

© 2016 ABBYY. All rights Reserved. www.ABBYY.com | Privacy Policy | Legal