secure transport - How can I prevent my app from downgrading from TLSv1.2 on iOS 8? -

i trying restrict app communicating server running version of tls prior 1.2. docs, appears should able calling sslsetprotocolversionmin, have done that:

sslcontextref context = sslcreatecontext(null, ksslclientside, ksslstreamtype); sslsetprotocolversionmax(context, ktlsprotocol12); sslsetprotocolversionmin(context, ktlsprotocol12); 

i have verified call sslsetprotocolversionmin not return error, still able connect servers negotiate down sslv3.

sslsetprotocolversionmax appears work correctly, when set tlsv1.1 , server tlsv1.2 only, cannot connect server.

it appears works expected on ios 9. know if not supported in ios 8, or if there other steps need take?

you can configure ios connect servers meeting minimum tls version using apple's new application transport security in ios 9.

you can add code following info.plist file:

<key>nsapptransportsecurity</key> <dict>     <key>nsexceptiondomains</key>     <dict>         <key>mydomain.com</key>         <dict>             <key>nsthirdpartyexceptionminimumtlsversion</key>             <string>1.2<string/>         </dict>     </dict> </dict> 

you can take @ wwdc video.

edit:

i see added question state need accomplish on ios 8, not have ats. answer using ios 9 , need this, since original question did not include limitation.