Does OkHttpChannelBuilder work with TLS/NPN protocol for android 4.1.2

[王 梓佳]

Hi team,

I tested the example TesterOkHttpChannelBuilder.java, it worked for android 4.4+ with TLS/ALPN, but I encountered following exception when i test it on 4.1.2 TLS/ALPN or NPN. Could you pls give me a clue to resolve this issue?

public static ManagedChannel build(String host, int port,
                                   @Nullable String serverHostOverride, boolean useTls,
                                   @Nullable InputStream testCa,
                                   @Nullable String androidSocketFactoryTls)

javax.net.ssl.SSLHandshakeException: javax.net.ssl.SSLProtocolException: SSL handshake aborted: ssl=0x5f338c30: Failure in SSL library, usually a protocol error
error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure (external/openssl/ssl/s23_clnt.c:741 0x5805d76a:0x00000000)


Thanks,
Benson

[Carl Mastrangelo]

I believe we get our TLS implementation from Google Play Services (as it is usually the most up to date).  Is your version up to date?

[Eric Anderson]

Please enable the Google Play Services Dynamic Security Provider. There are a few links to how to do that in our public SECURITY.md. It's my understanding that every Google property should be using the provider for security reasons, independent of gRPC.

--
You received this message because you are subscribed to the Google Groups "grpc.io" group.
To unsubscribe from this group and stop receiving emails from it, send an email to grpc-io+unsubscribe@googlegroups.com.
To post to this group, send email to grp...@googlegroups.com.
Visit this group at https://groups.google.com/group/grpc-io.
To view this discussion on the web visit https://groups.google.com/d/msgid/grpc-io/a957b824-5d9f-4bf0-9059-846cab32c153%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[王 梓佳]

Thanks Eric and Carl for your suggestion!

Best Regards,

Benson