Android Question OkHttpUtils2 and SSL-Problem (maybe TLS?) [SOLVED]

[W. Graf]

Hi!

I want to download a text-file from a webserver via https (unfortunally the server doesn't support http).
I'm using the library: OkHttpUtils2 on Android 4.4.2

This is my code:

Dim j As HttpJob
j.Initialize("", Me)
j.Download("https://services.swpc.noaa.gov/text/geoalert.txt")
Wait For (j) JobDone(j As HttpJob)
If j.Success Then
   Log("Inhalt: " & j.GetString)
End If
j.Release

This file has a size of ~450 bytes and is only plain text (... about space wheater).

I'm getting the following error:

ResponseError. Reason: javax.net.ssl.SSLHandshakeException: javax.net.ssl.SSLProtocolException: SSL handshake aborted: ssl=0x6328e530: Failure in SSL library, usually a protocol error
error:1407743E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert inappropriate fallback (external/openssl/ssl/s23_clnt.c:744 0x5e64a7e8:0x00000000), Response:

Because of the text-sequence "SSL23_GET_SERVER_HELLO:tlsv1", I think that the cause of this issue is TLS.

I was searching the web the last few hours, but I only found the hint, that it may be necessary to enable TLS on a phone (it is installed but disabled).
But if I open the textfile with my default browser on my phone, the textfile is displayed without any problems (and it tells me that the connection uses TLS 1.1).

Do you have any ideas, what I can do to successfully download this file?

Thank you and BR!

 

[Erel]

Works fine here. Probably related to the old Android OS that doesn't support the protocol.
Test it on a newer Android device and it will work.

You can update the security provider as done here: https://www.b4x.com/android/forum/threads/ssl-websocket-client.88472/page-2#post-560044

 

[W. Graf]

Thank you for testing it and for your advice!

I imported the subs from your link into my app and tried it. But "TryToFix" crashes:

Public Sub TryToFix
    Dim jo As JavaObject
    jo.InitializeStatic("com.google.android.gms.security.ProviderInstaller")
    Dim context As JavaObject
    context.InitializeContext
    
    DisableStrictMode

    Dim listener As Object = jo.CreateEventFromUI("com.google.android.gms.security.ProviderInstaller.ProviderInstallListener", _
        "ProviderInstall", Null)
    Log("Installing security provider if needed...")
    jo.RunMethod("installIfNeededAsync", Array(context, listener))
End Sub

The instruction

jo.InitializeStatic("com.google.android.gms.security.ProviderInstaller")

fails with error

java.lang.ClassNotFoundException: com.google.android$gms$security$ProviderInstaller

Do you think, that the reason is the same (old Android Version)?

Thanks again!

 

[W. Graf]

I also found the following thread:
https://www.b4x.com/android/forum/threads/network-v1-50-adds-support-for-ssl-sockets.55871/

In this thread, you posted the following Code:

Dim r As Reflector
r.Target = so 'socket variable
r.Target = r.GetField("socket")
r.RunMethod4("setEnabledProtocols", Array(Array As String("TLSv1", "SSLv3")), _
     Array As String("[Ljava.lang.String;"))

Is it possible to try this for OkHttpUtils2 too? But I have no socket variable with OkHttpUtils2?
Sorry for my missing knowledge ...

 

[Erel]

also found the following thread:
https://www.b4x.com/android/forum/threads/network-v1-50-adds-support-for-ssl-sockets.55871/

This will not help.

Do you think, that the reason is the same (old Android Version)?

No. Have you added this line to the main module:

#AdditionalJar: com.google.android.gms:play-services-base

?

 

[W. Graf]

No, the line was missing. After adding it, it works.
EVERYTHING WORKS!!! THANK YOU VERY MUCH.

But one last question:
What I have done??
I mean, what is SSL_TryToFix() and SSL_DisableStrictMode() doing?

 

[Erel]

It uses a Google Play service that updates the security provider and adds support for newer protocols on old devices.

SSL_DisableStrictMode() doing?

This disables a check for network calls on the main thread. It is a workaround for an issue with the updated provider.

 

[W. Graf]

Thank you!

 

[KMatle]

It uses a Google Play service that updates the security provider and adds support for newer protocols on old devices.


This disables a check for network calls on the main thread. It is a workaround for an issue with the updated provider.

Good to know