IOS Universal Links NSURLAuthenticationMethodServerTrust kAuthenticationErr

Question

I installed Universal Links in our application, and I cannot get the apple-app-site-association association file from my server when installing the application. The device console reports the following error message when trying to extract a file during installation:

Rejecting URL 'https://example.com/apple-app-site-association' for auth method 'NSURLAuthenticationMethodServerTrust': -6754/0xFFFFE59E kAuthenticationErr 

I can get the file successfully in Safari using the same device. It was hosted through https with a standard EV certificate certified by Verisign. I do not get any SSL errors when retrieving the file outside of the application installation, so I am sure that the certificate is configured correctly on the server side.

What can cause this error?

Answer 1

As it turns out, this problem was caused by installing Worx on Citrix on the phone. This application installed the XenMobile profile on the phone, which interfered with the ssl handshake between our server and the apple. This was only in the case of installing test applications on the phone. Our production application, downloaded from the App Store, works just fine. Also, if I uninstall Citrix applications and the associated XenMobile profile, it will work. Very annoying.

Answer 2

For me, the problem was the lack of a feature record: activitycontinuation:com.example.app . For some reason, when the apple-app-site-association file is hosted on the IIS server, this feature should be added in addition to applinks:com.example.app .