iOS UIWebView上的客户端证书身份验证适用于iOS 6.1但不适用于iOS 7

我使用连接：willSendRequestForAuthenticationChallenge处理程序来检查身份验证方法并提供客户端证书.

我的代码是：

- (void)connection: (NSURLConnection *)connection willSendRequestForAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge
{

    if ([challenge.protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust])
    {
        NSLog(@"Trust Challenge");
        SecTrustResultType trustResultType;
        OSStatus err = SecTrustEvaluate(challenge.protectionSpace.serverTrust,&trustResultType);

        NSLog(@"SecTrustResult %u %d",trustResultType,(int)err);

        if (trustResultType == kSecTrustResultProceed || trustResultType == kSecTrustResultConfirm || trustResultType == kSecTrustResultUnspecified) {
            [challenge.sender useCredential:[NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust] forAuthenticationChallenge:challenge];
        }
        else{
            [challenge.sender cancelAuthenticationChallenge:challenge];
        }

    } else {
        NSString *path = [[NSBundle mainBundle]pathForResource:@"mycert" ofType:@"pfx"];
        NSData *p12data = [NSData dataWithContentsOfFile:path];

        CFDataRef inP12data = (__bridge CFDataRef)p12data;

        SecIdentityRef myIdentity;
        SecTrustRef myTrust;
        extractIdentityAndTrust(inP12data,&myIdentity,&myTrust);
        assert(myIdentity != nil);
        assert(myTrust != nil);

        long count = SecTrustGetCertificateCount(myTrust);
        NSMutableArray* myCertificates = nil;
        if(count > 1) {
            myCertificates = [NSMutableArray arrayWithCapacity:count];
            for(int i = 1; i < count; ++i) {
                [myCertificates addObject:(__bridge id)SecTrustGetCertificateAtIndex(myTrust,i)];
            }
        }

        NSURLCredential *credential = [NSURLCredential credentialWithIdentity:myIdentity certificates:myCertificates persistence:NSURLCredentialPersistenceNone];
        assert(credential != nil);

        NSLog(@"User: %@,certificates %@ identity:%@",[credential user],[credential certificates],[credential identity]);
        [[challenge sender] useCredential:credential forAuthenticationChallenge:challenge];
    }
}

我使用此函数来提取证书的内容：

OSStatus extractIdentityAndTrust(CFDataRef inP12data,SecIdentityRef *identity,SecTrustRef *trust)
{
    OSStatus securityError = errSecSuccess;

    CFStringRef password = CFSTR("password");
    const void *keys[] = { kSecImportExportPassphrase };
    const void *values[] = { password };

    CFDictionaryRef options = CFDictionaryCreate(NULL,keys,values,1,NULL,NULL);

    CFArrayRef items = CFArrayCreate(NULL,NULL);
    securityError = SecPKCS12Import(inP12data,options,&items);

    if (securityError == 0) {
        CFDictionaryRef myIdentityAndTrust = CFArrayGetValueAtIndex(items,0);
        const void *tempIdentity = NULL;
        tempIdentity = CFDictionaryGetValue(myIdentityAndTrust,kSecImportItemIdentity);
        *identity = (SecIdentityRef)tempIdentity;
        const void *tempTrust = NULL;
        tempTrust = CFDictionaryGetValue(myIdentityAndTrust,kSecImportItemTrust);
        *trust = (SecTrustRef)tempTrust;

        CFIndex count = CFArrayGetCount(items);
        NSLog(@"Certificates found: %ld",count);
    }

    if (options) {
        CFRelease(options);
    }

    return securityError;
}

mycert.pfx文件包含中间证书以及客户端证书.

连接：didFailWithError函数永远不会被调用.

-(void)connection:(NSURLConnection *)connection didFailWithError:(NSError *)error {
        NSLog(@"Error: %@",[error userInfo]);
    }

所以看起来证书协商在某种程度上成功了.

我的问题类似于SSL – behaves differently in iOS7?,但我使用的是带有IIS 7.5的Windows Server 2008 R2.已在服务器上启用TLS 1.1和TLS 1.2协议.

WireShark跟踪显示使用iOS 7时TLS握手期间的证书框架为空.使用iOS 6.1时会发送和验证证书.

我可以使用Safari访问iOS 7中的网站.

任何帮助是极大的赞赏.