WAI
Status Update
Comments
kr...@android.com <kr...@android.com> #3
Is this using Microsoft Exchange on a Windows server without MS14-066 v2 applied? The first patch causes some TLS incompatibility problems and the second revision of the patch is supposed to fix those.
et...@htc.com <et...@htc.com> #4
sorry that I don't have the server side information.
I can 100% reproduce similar issue of SSLHandshakeException on Nexus4 with 5.0.1.
the same apk can run on Nexus4_KK with no SSLHandshakeException.
attachment is the sample app, source code and pcap file.
and below is log capturing from Nexus4 with 5.0.1
12-30 21:07:39.871 W/System.err( 4171): javax.net.ssl.SSLHandshakeException: Handshake failed
12-30 21:07:39.871 W/System.err( 4171): at com.android.org.conscrypt.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:374)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.Connection.upgradeToTls(Connection.java:197)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.Connection.connect(Connection.java:151)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.internal.http.HttpEngine.connect(HttpEngine.java:276)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.internal.http.HttpEngine.sendRequest(HttpEngine.java:211)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.internal.http.HttpURLConnectionImpl.execute(HttpURLConnectionImpl.java:373)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.internal.http.HttpURLConnectionImpl.connect(HttpURLConnectionImpl.java:106)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.internal.http.HttpURLConnectionImpl.getOutputStream(HttpURLConnectionImpl.java:208)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.internal.http.DelegatingHttpsURLConnection.getOutputStream(DelegatingHttpsURLConnection.java:218)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.internal.http.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:25)
12-30 21:07:39.873 W/System.err( 4171): at com.htc.httpconnectiontest.SoapTransport$SoapServiceConnection.openOutputStream(SoapTransport.java:92)
12-30 21:07:39.873 W/System.err( 4171): at com.htc.httpconnectiontest.SoapTransport.call(SoapTransport.java:183)
12-30 21:07:39.873 W/System.err( 4171): at com.htc.httpconnectiontest.SoapTransport.call(SoapTransport.java:148)
12-30 21:07:39.873 W/System.err( 4171): at org.ksoap2.transport.Transport.call(Transport.java:208)
12-30 21:07:39.873 W/System.err( 4171): at com.htc.httpconnectiontest.ConnectionService.onHandleIntent(ConnectionService.java:64)
12-30 21:07:39.873 W/System.err( 4171): at android.app.IntentService$ServiceHandler.handleMessage(IntentService.java:65)
12-30 21:07:39.873 W/System.err( 4171): at android.os.Handler.dispatchMessage(Handler.java:102)
12-30 21:07:39.873 W/System.err( 4171): at android.os.Looper.loop(Looper.java:135)
12-30 21:07:39.874 W/System.err( 4171): at android.os.HandlerThread.run(HandlerThread.java:61)
12-30 21:07:39.874 W/System.err( 4171): Caused by: javax.net.ssl.SSLProtocolException: SSL handshake aborted: ssl=0xb91f3df0: Failure in SSL library, usually a protocol error
12-30 21:07:39.874 W/System.err( 4171): error:14077102:SSL routines:SSL23_GET_SERVER_HELLO:unsupported protocol (external/openssl/ssl/s23_clnt.c:735 0xace1ae61:0x00000000)
12-30 21:07:39.874 W/System.err( 4171): at com.android.org.conscrypt.NativeCrypto.SSL_do_handshake(Native Method)
12-30 21:07:39.874 W/System.err( 4171): at com.android.org.conscrypt.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:302)
I can 100% reproduce similar issue of SSLHandshakeException on Nexus4 with 5.0.1.
the same apk can run on Nexus4_KK with no SSLHandshakeException.
attachment is the sample app, source code and pcap file.
and below is log capturing from Nexus4 with 5.0.1
12-30 21:07:39.871 W/System.err( 4171): javax.net.ssl.SSLHandshakeException: Handshake failed
12-30 21:07:39.871 W/System.err( 4171): at com.android.org.conscrypt.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:374)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.Connection.upgradeToTls(Connection.java:197)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.Connection.connect(Connection.java:151)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.internal.http.HttpEngine.connect(HttpEngine.java:276)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.internal.http.HttpEngine.sendRequest(HttpEngine.java:211)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.internal.http.HttpURLConnectionImpl.execute(HttpURLConnectionImpl.java:373)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.internal.http.HttpURLConnectionImpl.connect(HttpURLConnectionImpl.java:106)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.internal.http.HttpURLConnectionImpl.getOutputStream(HttpURLConnectionImpl.java:208)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.internal.http.DelegatingHttpsURLConnection.getOutputStream(DelegatingHttpsURLConnection.java:218)
12-30 21:07:39.872 W/System.err( 4171): at com.android.okhttp.internal.http.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:25)
12-30 21:07:39.873 W/System.err( 4171): at com.htc.httpconnectiontest.SoapTransport$SoapServiceConnection.openOutputStream(SoapTransport.java:92)
12-30 21:07:39.873 W/System.err( 4171): at com.htc.httpconnectiontest.SoapTransport.call(SoapTransport.java:183)
12-30 21:07:39.873 W/System.err( 4171): at com.htc.httpconnectiontest.SoapTransport.call(SoapTransport.java:148)
12-30 21:07:39.873 W/System.err( 4171): at org.ksoap2.transport.Transport.call(Transport.java:208)
12-30 21:07:39.873 W/System.err( 4171): at com.htc.httpconnectiontest.ConnectionService.onHandleIntent(ConnectionService.java:64)
12-30 21:07:39.873 W/System.err( 4171): at android.app.IntentService$ServiceHandler.handleMessage(IntentService.java:65)
12-30 21:07:39.873 W/System.err( 4171): at android.os.Handler.dispatchMessage(Handler.java:102)
12-30 21:07:39.873 W/System.err( 4171): at android.os.Looper.loop(Looper.java:135)
12-30 21:07:39.874 W/System.err( 4171): at android.os.HandlerThread.run(HandlerThread.java:61)
12-30 21:07:39.874 W/System.err( 4171): Caused by: javax.net.ssl.SSLProtocolException: SSL handshake aborted: ssl=0xb91f3df0: Failure in SSL library, usually a protocol error
12-30 21:07:39.874 W/System.err( 4171): error:14077102:SSL routines:SSL23_GET_SERVER_HELLO:unsupported protocol (external/openssl/ssl/s23_clnt.c:735 0xace1ae61:0x00000000)
12-30 21:07:39.874 W/System.err( 4171): at com.android.org.conscrypt.NativeCrypto.SSL_do_handshake(Native Method)
12-30 21:07:39.874 W/System.err( 4171): at com.android.org.conscrypt.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:302)
et...@htc.com <et...@htc.com> #5
update more information.
By adding log in SSL23_GET_SERVER_HELLO(), Handshake fail is due to p[2] = 1 and options = 9d1a4bff.
SSL is set to allow only SSLv3.
It seems caused by okhttp.
com.android.org.conscrypt.OpenSSLSocketImpl.setEnabledProtocols(OpenSSLSocketImpl.java:837)
com.android.okhttp.internal.Platform.supportTlsIntolerantServer(Platform.java:93)
com.android.okhttp.Connection.upgradeToTls(Connection.java:177)
By adding log in SSL23_GET_SERVER_HELLO(), Handshake fail is due to p[2] = 1 and options = 9d1a4bff.
SSL is set to allow only SSLv3.
It seems caused by okhttp.
com.android.org.conscrypt.OpenSSLSocketImpl.setEnabledProtocols(OpenSSLSocketImpl.java:837)
com.android.okhttp.internal.Platform.supportTlsIntolerantServer(Platform.java:93)
com.android.okhttp.Connection.upgradeToTls(Connection.java:177)
nf...@google.com <nf...@google.com> #6
would love it
nf...@google.com <nf...@google.com> #7
Just got first Android 2 days ago (Sony Xperia Z Ultra), and this already bothers the hell out of me. It seems like it would be a no brainer to include this as an option.
aw...@gmail.com <aw...@gmail.com> #8
Please, fix that!
nf...@google.com <nf...@google.com>
[Deleted User] <[Deleted User]> #9
Yes,please,add the option for the volume rocker to always just adjust media volume.
I always want my ringer on vibrate, but my desired media volume depends on my surroundings. It is a hassle to often have to adjust media volume (down) from within the system settings before starting an app.
I always want my ringer on vibrate, but my desired media volume depends on my surroundings. It is a hassle to often have to adjust media volume (down) from within the system settings before starting an app.
a3...@gmail.com <a3...@gmail.com> #10
Yes please address thug issue who really needs to constantly adjust the ringer!?!?
Description
Recently, we meet a SSLHandshakeException on L version.
12-17 20:53:12.161 32010 3162 I EmailServiceController: enter IOException
12-17 20:53:12.161 32010 3162 I EmailServiceController: javax.net.ssl.SSLHandshakeException: Handshake failed
12-17 20:53:12.161 32010 3162 I EmailServiceController: at com.android.org.conscrypt.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:374)
…
12-17 20:53:12.161 32010 3162 I EmailServiceController: Caused by: javax.net.ssl.SSLProtocolException: SSL handshake aborted: ssl=0xaf779000: Failure in SSL library, usually a protocol error
It seems like a side effect when enable TLSv1.1 and TLSv1.2.