ibm mobilefirst - Mobilelfirst 7.1 - ios9 An SSL error has occurred and a secure connection to the server cannot be made -

while using https connection mobile device mfp server getting ssl handshake error. same url if tried in browser works perfectly.

the certificate using tls version 1.2 standard , encrypted , authenticated using aes_128_gcm , uses rsa key exchange mechanism

here logs xcode

2016-04-06 00:13:21.870 ssmobileapp[5742:3715304] [debug] [nosslne] establishsslclientauth 2016-04-06 00:13:21.873 ssmobileapp[5742:3715317] [debug] [none] after: initoptions.onsuccess 2016-04-06 00:13:21.876 ssmobileapp[5742:3715303] [debug] [none] added onpause , onresume event handlers 2016-04-06 00:13:21.879 ssmobileapp[5742:3715301] [debug] [none] wlclient init success 2016-04-06 00:13:21.881 ssmobileapp[5742:3715258] thread warning: ['userauth'] took '13.794922' ms. plugin should use background thread. 2016-04-06 00:13:22.082 ssmobileapp[5742:3715258] [debug] [worklight] +[wlclient sharedinstance] in wlclient.m:165 :: ibmmobiliefirstfoundation.framework version = 7.1-2015/12/27 17:46:32 2016-04-06 00:13:22.085 ssmobileapp[5742:3715317] [debug] [none] request [/apps/services/api/ssmobileapp/iphone/init] 2016-04-06 00:13:22.088 ssmobileapp[5742:3715304] [trace] [none] application details header: {"applicationdetails":{"platformversion":"7.1.0.0","nativeversion":"2929140589","skinname":"default","skinchecksum":284837888,"skinloaderchecksum":"(null)"}} 2016-04-06 00:13:22.090 ssmobileapp[5742:3715303] [debug] [none] establishsslclientauth iscertificateexists:  false 2016-04-06 00:13:22.094 ssmobileapp[5742:3715258] thread warning: ['wlauthorizationmanagerplugin'] took '14.354980' ms. plugin should use background thread. 2016-04-06 00:13:22.109 ssmobileapp[5742:3715258] thread warning: ['wlauthorizationmanagerplugin'] took '11.534180' ms. plugin should use background thread. 2016-04-06 00:13:22.111 ssmobileapp[5742:3715258] [trace] [wl_splash] -[wlsplashview hide] in wlsplashview.m:73 ::  2016-04-06 00:13:22.122 ssmobileapp[5742:3715304] [trace] [wlnativexhr] open method post url /apps/services/api/ssmobileapp/iphone/init 2016-04-06 00:13:22.124 ssmobileapp[5742:3715317] [trace] [wlnativexhr] setrequestheader name x-requested-with value xmlhttprequest 2016-04-06 00:13:22.126 ssmobileapp[5742:3715303] [trace] [wlnativexhr] constructing 2016-04-06 00:13:22.129 ssmobileapp[5742:3715333] [trace] [wlnativexhr] setrequestheader name accept-language value en-us 2016-04-06 00:13:22.132 ssmobileapp[5742:3715337] [trace] [wlnativexhr] setrequestheader name content-type value application/x-www-form-urlencoded; charset=utf-8 2016-04-06 00:13:22.135 ssmobileapp[5742:3715304] [trace] [wlnativexhr] setrequestheader name x-wl-app-version value 1.0 2016-04-06 00:13:22.138 ssmobileapp[5742:3715338] [trace] [wlnativexhr] setrequestheader name x-wl-app-details value {"applicationdetails":{"platformversion":"7.1.0.0","nativeversion":"2929140589","skinname":"default","skinchecksum":284837888,"skinloaderchecksum":"(null)"}} 2016-04-06 00:13:22.141 ssmobileapp[5742:3715339] [trace] [wlnativexhr] setrequestheader name x-wl-clientlog-deviceid value 62413470-564e-4012-96e9-8c13ca4e50f5 2016-04-06 00:13:22.144 ssmobileapp[5742:3715301] [trace] [wlnativexhr] setrequestheader name accept value text/javascript, text/html, application/xml, text/xml, */* 2016-04-06 00:13:22.147 ssmobileapp[5742:3715341] [trace] [wlnativexhr] setrequestheader name x-wl-clientlog-appname value ssmobileapp 2016-04-06 00:13:22.150 ssmobileapp[5742:3715340] [trace] [wlnativexhr] setrequestheader name x-wl-clientlog-appversion value 1.0 2016-04-06 00:13:22.153 ssmobileapp[5742:3715343] [trace] [wlnativexhr] setrequestheader name x-wl-clientlog-osversion value 9.1 2016-04-06 00:13:22.156 ssmobileapp[5742:3715342] [trace] [wlnativexhr] setrequestheader name x-wl-clientlog-env value iphone 2016-04-06 00:13:22.159 ssmobileapp[5742:3715344] [trace] [wlnativexhr] setrequestheader name x-wl-clientlog-model value iphone8,1 2016-04-06 00:13:22.162 ssmobileapp[5742:3715345] [trace] [wlnativexhr] setrequestheader name x-wl-clientid value 535fecc2c8e0262fea1d44449283d940443060d4 2016-04-06 00:13:22.165 ssmobileapp[5742:3715317] [trace] [wlnativexhr] setrequestheader name x-wl-s-clientid value eyjhbgcioijsuzi1niisimpwayi6eyjhbgcioijsu0eilcjtb2qioijbskswuvvts2hsahhqte5hm0wxthdoamg4zhbtwxbxczzovelbzu9ssdd4nfozd0nuthjtmwm2ru9qdjfmvjnhdme2cdlprm1ybdvsb204cmdrykhfs2s9iiwizxhwijoiqvfbqij9fq==.eyjjbgllbnrjzci6ijuznwzly2myyzhlmdi2mmzlytfkndq0ndkyodnkotqwndqzmdywzdqifq==.dzry2wm8kixrmis52vqopnauoewgps1vfix4koj0ygm-udqbinimckps6vbzf97ltvld2fw7-zptf73wpiaicq== 2016-04-06 00:13:22.168 ssmobileapp[5742:3715346] [trace] [wlnativexhr] setrequestheader name x-wl-session value 7453de78-568f-4186-90fc-c7aa1f131b13 2016-04-06 00:13:22.171 ssmobileapp[5742:3715347] [trace] [wlnativexhr] send 2016-04-06 00:13:22.174 ssmobileapp[5742:3715348] [debug] [wl_afhttprequestoperationmanagerwrapper_package] +[wlafhttprequestoperationmanagerwrapper requestwithurl:] in wlafhttprequestoperationmanagerwrapper.m:52 :: request url https://myhostname:443/ssproject/apps/services/api/ssmobileapp/iphone/init 2016-04-06 00:13:22.181 ssmobileapp[5742:3715348] [debug] [wl_afhttprequestoperationmanagerwrapper_package] -[wlafhttprequestoperationmanagerwrapper start] in wlafhttprequestoperationmanagerwrapper.m:320 :: starting request url https://myhostname:443/ssproject/apps/services/api/ssmobileapp/iphone/init 2016-04-06 00:13:22.297 ssmobileapp[5742:3715308] cfnetwork sslhandshake failed (-9824) 2016-04-06 00:13:22.297 ssmobileapp[5742:3715308] nsurlsession/nsurlconnection http load failed (kcfstreamerrordomainssl, -9824) 2016-04-06 00:13:22.298 ssmobileapp[5742:3715258] [debug] [wl_afhttprequestoperationmanagerwrapper_package] -[wlafhttprequestoperationmanagerwrapper requestfailed:error:] in wlafhttprequestoperationmanagerwrapper.m:352 :: request failed 2016-04-06 00:13:22.299 ssmobileapp[5742:3715258] [debug] [wl_afhttprequestoperationmanagerwrapper_package] -[wlafhttprequestoperationmanagerwrapper requestfailed:error:] in wlafhttprequestoperationmanagerwrapper.m:353 :: response status code : 0 2016-04-06 00:13:22.302 ssmobileapp[5742:3715258] [debug] [wl_afhttprequestoperationmanagerwrapper_package] -[wlafhttprequestoperationmanagerwrapper requestfailed:error:] in wlafhttprequestoperationmanagerwrapper.m:354 :: response error : ssl error has occurred , secure connection server cannot made. 2016-04-06 00:13:22.310 ssmobileapp[5742:3715317] [error] [none] [/apps/services/api/ssmobileapp/iphone/init] host not responsive. 2016-04-06 00:13:22.311 ssmobileapp[5742:3715317] [debug] [none] failed connecting mobilefirst server. 2016-04-06 00:13:22.329 ssmobileapp[5742:3715258] thread warning: ['notification'] took '19.496826' ms. plugin should use background thread. 2016-04-06 00:13:33.259 ssmobileapp[5742:3715258] [debug] [worklight] +[wlclient sharedinstance] in wlclient.m:165 :: ibmmobiliefirstfoundation.framework version = 7.1-2015/12/27 17:46:32 2 

i tried running command mac diagnose if ssl handshake completes same thing failed. not sure if right way test.

nscurl --ats-diagnostics https://ourhostname --verbose

default ats secure connection --- ats default connection ats dictionary: { } 2016-04-06 00:45:50.326 nscurl[49333:2857308] cfnetwork sslhandshake failed (-9824) 2016-04-06 00:45:50.327 nscurl[49333:2857308] nsurlsession/nsurlconnection http load failed (kcfstreamerrordomainssl, -9824) result : fail error : error domain=nsurlerrordomain code=-1200 "an ssl error has occurred , secure connection server cannot made." userinfo={_kcfstreamerrorcodekey=-9824, nslocalizedrecoverysuggestion=would connect server anyway?, nsunderlyingerror=0x7fcc68405f90 {error domain=kcferrordomaincfnetwork code=-1200 "(null)" userinfo={_kcfstreampropertysslclientcertificatestate=0, _kcfnetworkcfstreamsslerrororiginalvalue=-9824, _kcfstreamerrordomainkey=3, _kcfstreamerrorcodekey=-9824}}, nslocalizeddescription=an ssl error has occurred , secure connection server cannot made., nserrorfailingurlkey=https://hostname/, nserrorfailingurlstringkey=https://hostname/, _kcfstreamerrordomainkey=3} 

can me missing here? required put certificate mobile app ssl handshake doesn't fail?

make sure have configured mobilefirst server tls 1.2 support following instructions provided in blog post (too long post answer): https://mobilefirstplatform.ibmcloud.com/blog/2015/09/07/preparing-ibm-mobilefirst-platform-server-app-transport-security-ios-9/