Error map

ATS App Transport Security has blocked a cleartext HTTP resource load

iOS · layer 1, On your device

Open the full error page →

Centre: this error. First ring: errors it is linked with (12). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

ATS — App Transport Security has blocked a cleartext HTTP resource load (iOS)ATSGit SSL certificate problem — fatal: unable to access 'https://…': SSL certificate problem: unable to get local issuer certificate (Git)Git SSL certificate…tlsv1 alert protocol version — SSL error: tlsv1 alert protocol version / unsupported protocol / no protocols available (API)tlsv1 alert protoco…421 — HTTP 421 Misdirected Request (HTTP)421CERTIFICATE_VERIFY_FAILED — SSL: CERTIFICATE_VERIFY_FAILED / unable to get local issuer certificate (API)CERTIFICATE_VERIFY_…password auth removed — remote: Support for password authentication was removed on August 13, 2021. Please use a personal access token instead. (Git)password auth remov…NSURLErrorDomain Code=-1009 — Error Domain=NSURLErrorDomain Code=-1009 "The Internet connection appears to be offline." (iOS)NSURLErrorDomain Co…Mixed Content — Mixed Content: The page was loaded over HTTPS, but requested an insecure resource (API)Mixed Content307 — HTTP 307 Temporary Redirect (HTTP)307497 — 400 Bad Request: The plain HTTP request was sent to HTTPS port (Nginx 497) (HTTP)497Authentication failed — fatal: Authentication failed for 'https://github.com/x/y.git/' (Git)Authentication fail…NSUnknownKeyException — NSUnknownKeyException: this class is not key value coding-compliant for the key x (iOS)NSUnknownKeyExcepti…unable to dequeue a cell with identifier — unable to dequeue a cell with identifier Cell - must register a nib or a class for the identifier or connect a prototype cell in a storyboard (iOS)unable to dequeue a…CLEARTEXT — CLEARTEXT communication to host not permitted by network security policy (Android)CLEARTEXTPKIX path building failed — javax.net.ssl.SSLHandshakeException: PKIX path building failed: unable to find valid certification path to requested target (Java)PKIX path building …ERR_TLS_CERT_ALTNAME_INVALID — Error [ERR_TLS_CERT_ALTNAME_INVALID]: Hostname/IP does not match certificate's altnames (Node.js)ERR_TLS_CERT_ALTNAM…ECONNREFUSED — Error: connect ECONNREFUSED 127.0.0.1:5432 (Node.js)ECONNREFUSED407 — HTTP 407 Proxy Authentication Required (HTTP)407408 — HTTP 408 Request Timeout (HTTP)408400 — HTTP 400 Bad Request (HTTP)400502 — HTTP 502 Bad Gateway (HTTP)502525 — Cloudflare Error 525: SSL Handshake Failed (Cloudflare)525Failed to fetch — TypeError: Failed to fetch / NetworkError when attempting to fetch resource (JavaScript)Failed to fetch520 — Cloudflare Error 520: Web Server Returned an Unknown Error (Cloudflare)520526 — Cloudflare Error 526: Invalid SSL Certificate (Cloudflare)526publickey — Git: Permission denied (publickey). fatal: Could not read from remote repository. (Git)publickeyRepository not found — remote: Repository not found. fatal: repository 'https://github.com/x/y.git/' not found (Git)Repository not foundHost key verification failed — Host key verification failed. fatal: Could not read from remote repository. (Git)Host key verificati…CannotPullContainerError — ECS task stopped: CannotPullContainerError: pull image manifest has been retried ... / ref pull has been retried (AWS)CannotPullContainer…network not found — Error response from daemon: network X not found (Docker)network not foundPool overlaps — Error response from daemon: Pool overlaps with other one on this address space (Docker)Pool overlapsCORS — CORS Error: No 'Access-Control-Allow-Origin' header is present (API)CORSblocked a frame — SecurityError: Blocked a frame with origin "x" from accessing a cross-origin frame. (JavaScript)blocked a frameCSP violation — Refused to load the script because it violates the following Content Security Policy directive (JavaScript)CSP violation301 — HTTP 301 Moved Permanently (HTTP)301302 — HTTP 302 Found (Temporary Redirect) (HTTP)302303 — HTTP 303 See Other (HTTP)303403 — HTTP 403 Forbidden (HTTP)403Primary script unknown — FastCGI sent in stderr: "Primary script unknown" (PHP)Primary script unkn…444 — Nginx 444 No Response (connection closed without response) (HTTP)444AADSTS700016 — Azure AD (Entra ID): AADSTS700016 Application not found in the directory (Azure)AADSTS700016401 — HTTP 401 Unauthorized (HTTP)401TokenExpiredError — JWT Expired / Invalid Token (Authentication)TokenExpiredErrorSIGABRT — Thread 1: signal SIGABRT (app crashes with "libc++abi: terminating") (iOS)SIGABRTMain Thread Checker — Main Thread Checker: UI API called on a background thread: -[UIView setNeedsLayout] (iOS)Main Thread CheckerUnable to simultaneously satisfy constraints — Auto Layout: Unable to simultaneously satisfy constraints. Probably at least one of the constraints in the following list is one you don't want (iOS)Unable to simultane…Could not cast value of type — Swift: Could not cast value of type 'X' to 'Y' (iOS)Could not cast valu…built for iOS, linking for simulator — Building for iOS Simulator, but linking in object file built for iOS, for architecture arm64 (iOS)built for iOS, link…integrity could not be verified — Unable to Install "App": This app cannot be installed because its integrity could not be verified (iOS)integrity could not…

Directly related (12)

Git SSL certificate problemGit

fatal: unable to access 'https://…': SSL certificate problem: unable to get local issuer certificate

Git doesn’t trust the HTTPS server’s certificate — corporate proxy, self-hosted Git with an internal CA, or outdated CA bundle.

tlsv1 alert protocol versionAPI

SSL error: tlsv1 alert protocol version / unsupported protocol / no protocols available

The client and server couldn’t agree on a TLS version or cipher, so the HTTPS handshake failed before any HTTP was exchanged.

421HTTP

HTTP 421 Misdirected Request

The request reached a server that isn’t configured for that host name — usually HTTP/2 connection reuse across domains sharing a…

CERTIFICATE_VERIFY_FAILEDAPI

SSL: CERTIFICATE_VERIFY_FAILED / unable to get local issuer certificate

The client couldn’t verify the server’s TLS certificate chain, so it refused the HTTPS connection.

password auth removedGit

remote: Support for password authentication was removed on August 13, 2021. Please use a personal access token instead.

GitHub no longer accepts account passwords for Git over HTTPS.

NSURLErrorDomain Code=-1009iOS

Error Domain=NSURLErrorDomain Code=-1009 "The Internet connection appears to be offline."

URLSession couldn’t reach the network — the device is offline, the app’s cellular data is disabled, or the simulator lost network…

Mixed ContentAPI

Mixed Content: The page was loaded over HTTPS, but requested an insecure resource

An HTTPS page tried to load a script, API or image over plain HTTP, and the browser blocked (or warned about) it.

307HTTP

HTTP 307 Temporary Redirect

A temporary redirect that keeps the original method and body — a POST stays a POST at the new URL.

497HTTP

400 Bad Request: The plain HTTP request was sent to HTTPS port (Nginx 497)

Plain http:// traffic arrived on a port Nginx expects to be TLS (443 or a custom SSL port).

Authentication failedGit

fatal: Authentication failed for 'https://github.com/x/y.git/'

HTTPS authentication to the Git host failed — wrong or expired credentials, or a password used where a token is required.

NSUnknownKeyExceptioniOS

NSUnknownKeyException: this class is not key value coding-compliant for the key x

A storyboard/XIB has a connection to an outlet or action that no longer exists in the class (renamed or deleted), or the view’s c…

unable to dequeue a cell with identifieriOS

unable to dequeue a cell with identifier Cell - must register a nib or a class for the identifier or connect a prototype cell in a storyboard

The table/collection view was asked for a reusable cell identifier that was never registered.

Two steps away (36)

CLEARTEXTAndroid

CLEARTEXT communication to host not permitted by network security policy

Android 9+ blocks plain `http://` requests by default; the app tried to call a non-HTTPS URL.

PKIX path building failedJava

javax.net.ssl.SSLHandshakeException: PKIX path building failed: unable to find valid certification path to requested target

Java doesn’t trust the server’s certificate chain (self-signed, corporate proxy CA, or missing intermediate).

ERR_TLS_CERT_ALTNAME_INVALIDNode.js

Error [ERR_TLS_CERT_ALTNAME_INVALID]: Hostname/IP does not match certificate's altnames

The server’s certificate doesn’t cover the hostname you connected to.

ECONNREFUSEDNode.js

Error: connect ECONNREFUSED 127.0.0.1:5432

Nothing is listening at that host:port — the target service is down or you’re connecting to the wrong address.

407HTTP

HTTP 407 Proxy Authentication Required

A proxy between you and the server requires credentials before it will forward your request.

408HTTP

HTTP 408 Request Timeout

The server closed the connection because the client took too long to send the complete request.

400HTTP

HTTP 400 Bad Request

The server could not understand the request because its syntax, headers or body are malformed or invalid.

502HTTP

HTTP 502 Bad Gateway

A proxy or gateway (Nginx, load balancer, CDN) got an invalid response — or no response — from the upstream server behind it.

525Cloudflare

Cloudflare Error 525: SSL Handshake Failed

Cloudflare couldn’t complete a TLS handshake with your origin (SSL mode Full / Full strict).

Failed to fetchJavaScript

TypeError: Failed to fetch / NetworkError when attempting to fetch resource

The browser couldn’t complete the request at the network level — CORS, DNS, offline, blocked mixed content, or the server refused…

520Cloudflare

Cloudflare Error 520: Web Server Returned an Unknown Error

Cloudflare connected to your origin, but the origin returned an empty, unknown or invalid response.

526Cloudflare

Cloudflare Error 526: Invalid SSL Certificate

With SSL mode Full (strict), the origin’s certificate is expired, self-signed, or doesn’t match the hostname.

publickeyGit

Git: Permission denied (publickey). fatal: Could not read from remote repository.

SSH authentication to GitHub/GitLab/Bitbucket failed — no key, wrong key, or the key isn’t added to your account.

Repository not foundGit

remote: Repository not found. fatal: repository 'https://github.com/x/y.git/' not found

GitHub/GitLab says the repository doesn’t exist — or you lack access to a private repo.

Host key verification failedGit

Host key verification failed. fatal: Could not read from remote repository.

SSH doesn’t trust the server’s host key — first connection in a non-interactive environment, or the key changed.

CannotPullContainerErrorAWS

ECS task stopped: CannotPullContainerError: pull image manifest has been retried ... / ref pull has been retried

The ECS task couldn’t pull its image — no network route to the registry, missing ECR permissions, or a wrong image tag.

network not foundDocker

Error response from daemon: network X not found

The container or Compose project refers to a Docker network that doesn’t exist (any more).

Pool overlapsDocker

Error response from daemon: Pool overlaps with other one on this address space

Docker tried to create a network whose subnet clashes with an existing Docker network (or a VPN/host route).

CORSAPI

CORS Error: No 'Access-Control-Allow-Origin' header is present

The browser blocked a cross-origin request because the server’s response didn’t include the CORS headers allowing your site’s ori…

blocked a frameJavaScript

SecurityError: Blocked a frame with origin "x" from accessing a cross-origin frame.

Script tried to read or modify an iframe (or window) from another origin.

CSP violationJavaScript

Refused to load the script because it violates the following Content Security Policy directive

The page’s Content-Security-Policy doesn’t allow that script, style, image or connection source.

301HTTP

HTTP 301 Moved Permanently

The resource has a new permanent URL; clients and search engines should use the address in the Location header from now on.

302HTTP

HTTP 302 Found (Temporary Redirect)

The resource is temporarily at another URL; clients should keep using the original URL for future requests.

303HTTP

HTTP 303 See Other

A redirect telling the client to fetch the result from another URL with GET — used after a form POST so refreshing doesn’t resubm…

403HTTP

HTTP 403 Forbidden

The server understood the request but refuses to authorize it — you (or the server process) are not allowed to access this resour…

Primary script unknownPHP

FastCGI sent in stderr: "Primary script unknown"

Nginx passed a script path to PHP-FPM that PHP-FPM couldn’t find — usually a wrong SCRIPT_FILENAME or root.

444HTTP

Nginx 444 No Response (connection closed without response)

An Nginx-specific code: the server deliberately closed the connection without sending anything — a rule is dropping the request.

AADSTS700016Azure

Azure AD (Entra ID): AADSTS700016 Application not found in the directory

The client ID in your sign-in request doesn’t exist in the tenant you’re authenticating against.

401HTTP

HTTP 401 Unauthorized

The request has no valid authentication credentials — you need to log in or send a valid token.

TokenExpiredErrorAuthentication

JWT Expired / Invalid Token

The JSON Web Token sent with the request is expired, malformed or signed with a different key, so the API rejects it (usually wit…

SIGABRTiOS

Thread 1: signal SIGABRT (app crashes with "libc++abi: terminating")

The app deliberately aborted — an uncaught exception, failed assertion or fatalError. The console above the crash has the real me…

Main Thread CheckeriOS

Main Thread Checker: UI API called on a background thread: -[UIView setNeedsLayout]

UIKit was used from a background thread; UI must only be touched on the main thread.

Unable to simultaneously satisfy constraintsiOS

Auto Layout: Unable to simultaneously satisfy constraints. Probably at least one of the constraints in the following list is one you don't want

Two or more Auto Layout constraints conflict; UIKit breaks one to recover and logs this message.

Could not cast value of typeiOS

Swift: Could not cast value of type 'X' to 'Y'

A force cast (as!) failed because the object isn’t the expected type.

built for iOS, linking for simulatoriOS

Building for iOS Simulator, but linking in object file built for iOS, for architecture arm64

A library contains device-only arm64 code; Apple Silicon simulators also run arm64 and need a separate simulator slice.

integrity could not be verifiediOS

Unable to Install "App": This app cannot be installed because its integrity could not be verified

iOS rejected the app because its signature doesn’t validate for this device — expired/revoked certificate, ad-hoc profile without…