Re: SSL Handshake Exception in call from Android

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Be sure that there is at least one cipher suite in common between the 
server and the Android app.  The most likely issue is that all SSL 
protocols and also TLS v1 have been disabled on the server. (required 
for any e-commerce server taking VISA or Mastercard).

There is a **lot** of info about how to do this at:

 https://httpd.apache.org/docs/current/mod/mod_ssl.html#sslciphersuite

John
==============================================

On Fri, 2018-11-02 at 19:10 -0500, Jerry Malcolm wrote:
> Hi Jeffrey,  Thanks for the quick response.
> 
> I set the LogLevel to debug.  I'm getting a ton of debug info 
> everywhere.  However, the https requests from my app are not even 
> showing up in any logs.... not even the virtual host access or error 
> logs or the apache system logs.  Nada... nothing.  As if the calls were 
> never made.  Just to make sure there wasn't something else wrong, I 
> changed https:// to http:// in my app, and everything works, including a 
> ton of debug info in all of the logs.  But as soon as I use https, it 
> looks like the requests aren't even making it into httpd.  But again.... 
> the whole site works fine in https when using a browser.
> 
> Any ideas?  Am I not looking at the right place for the logs?
> 
> Jerry
> 
> 
> On 11/2/2018 4:55 PM, Jeff Cauhape wrote:
> > Jerry,
> > 
> > Have you set LogLevel  to "debug" in httpd.conf and then check the sever
> > error logs?
> > Could be helpful to see what the server is objecting to.
> > 
> > Jeffrey Cauhape – IT Professional III – Linux and Solaris Administrator
> > Nevada Department of Employment, Training and Rehabilitation
> > (775) 684-3804 (office)     jpcauhape@xxxxxxxxxxx
> > 
> > -----Original Message-----
> > From: Jerry Malcolm [mailto:techstuff@xxxxxxxxxxxx]
> > Sent: Friday, November 2, 2018 1:59 PM
> > To: users@xxxxxxxxxxxxxxxx
> > Subject:  SSL Handshake Exception in call from Android
> > 
> > I am writing an Android app that needs to make calls to my httpd server
> > (Apache 2.4.33).  I am getting the following exception in my Android app:
> > 
> > Exception: javax.net.ssl.SSLHandshakeException:
> > javax.net.ssl.SSLProtocolException: SSL handshake aborted:
> > ssl=0x809adc78: Failure in SSL library, usually a protocol error
> >       error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert
> > handshake failure (external/openssl/ssl/s23_clnt.c:744
> > 0x725e0cfc:0x00000000)
> > 
> > The same Android app calls Google Maps https with no problem and also calls
> > another server with https that I do not own with no problem.  So I'm
> > assuming I have something wrong in my httpd config.  But I need some help
> > figuring it out.
> > 
> > The same web site responds just fine to https calls from browsers.  It just
> > doesn't work when called from my Android app. It also works fine if I use
> > http instead of https.  But I need https.
> > 
> > Suggestions as to what might be wrong?
> > 
> > Thx.
> > 
> > Jerry
> > 
> > 
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
> > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
> > 
> > 
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
> > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx





[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux