SSLHandshakeException on Android 4.4 and lower

The issue is mostly encountered in devices below lollipop i.e, KitKat and below devices.

javax.net.ssl.SSLHandshakeException: javax.net.ssl.SSLProtocolException: SSL handshake aborted: ssl=0xb7fc9510: Failure in SSL library, usually a protocol error

error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version (external/openssl/ssl/s23_clnt.c:741 0x98960990:0x00000000)

javax.net.ssl.SSLHandshakeException: javax.net.ssl.SSLProtocolException: SSL handshake aborted: ssl=0xb7fc9510: Failure in SSL library, usually a protocol error

error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version (external/openssl/ssl/s23_clnt.c:741 0x98960990:0x00000000)

What Is TLS/SSL and how it works?

Transport Layer Security(TLS) and its predecessor Secure Sockets Layer(SSL) are standard security protocols for establishing a secure connection between a server and a client typically used for web server and mobile device/browser.

How to resolve SSL error on android below lollipop?

We can install a newer security provider using Google Play Services

1. Patch synchronously

class Application : Application() {

    override fun onCreate() {
        super.onCreate()
        if (Build.VERSION.SDK_INT in 17..20) {
            try {
                ProviderInstaller.installIfNeeded(applicationContext)
            } catch (e: GooglePlayServicesRepairableException) {
                e.printStackTrace()
            } catch (e: GooglePlayServicesNotAvailableException) {
                e.printStackTrace()
            } catch (e: NoSuchAlgorithmException) {
                e.printStackTrace()
            } catch (e: KeyManagementException) {
                e.printStackTrace()
            }
        }
    }
}

class Application : Application() {

override fun onCreate() {

super.onCreate()

if (Build.VERSION.SDK_INT in 17..20) {

try {

ProviderInstaller.installIfNeeded(applicationContext)

} catch (e: GooglePlayServicesRepairableException) {

e.printStackTrace()

} catch (e: GooglePlayServicesNotAvailableException) {

e.printStackTrace()

} catch (e: NoSuchAlgorithmException) {

e.printStackTrace()

} catch (e: KeyManagementException) {

e.printStackTrace()

}

2. Patch asynchronously

public class MainActivity extends Activity
    implements ProviderInstaller.ProviderInstallListener {

  private static final int ERROR_DIALOG_REQUEST_CODE = 1;

  private boolean retryProviderInstall;

  //Update the security provider when the activity is created.
  @Override
  protected void onCreate(Bundle savedInstanceState) {
    super.onCreate(savedInstanceState);
        
    if (Build.VERSION.SDK_INT in 17..20) {
        ProviderInstaller.installIfNeededAsync(this, this);
      }
  }

  /**
   * This method is only called if the provider is successfully updated
   * (or is already up-to-date).
   */
  @Override
  protected void onProviderInstalled() {
    // Provider is up-to-date, app can make secure network calls.
  }

  /**
   * This method is called if updating fails; the error code indicates
   * whether the error is recoverable.
   */
  @Override
  protected void onProviderInstallFailed(int errorCode, Intent recoveryIntent) {
    GoogleApiAvailability availability = GoogleApiAvailability.getInstance();
    if (availability.isUserRecoverableError(errorCode)) {
      // Recoverable error. Show a dialog prompting the user to
      // install/update/enable Google Play services.
      availability.showErrorDialogFragment(
          this,
          errorCode,
          ERROR_DIALOG_REQUEST_CODE,
          new DialogInterface.OnCancelListener() {
            @Override
            public void onCancel(DialogInterface dialog) {
              // The user chose not to take the recovery action
              onProviderInstallerNotAvailable();
            }
          });
    } else {
      // Google Play services is not available.
      onProviderInstallerNotAvailable();
    }
  }

  @Override
  protected void onActivityResult(int requestCode, int resultCode,
      Intent data) {
    super.onActivityResult(requestCode, resultCode, data);
    if (requestCode == ERROR_DIALOG_REQUEST_CODE) {
      // Adding a fragment via GoogleApiAvailability.showErrorDialogFragment
      // before the instance state is restored throws an error. So instead,
      // set a flag here, which will cause the fragment to delay until
      // onPostResume.
      retryProviderInstall = true;
    }
  }

  /**
   * On resume, check to see if we flagged that we need to reinstall the
   * provider.
   */
  @Override
  protected void onPostResume() {
    super.onPostResume();
    if (retryProviderInstall) {
      // We can now safely retry installation.
      ProviderInstaller.installIfNeededAsync(this, this);
    }
    retryProviderInstall = false;
  }

  private void onProviderInstallerNotAvailable() {
    // This is reached if the provider cannot be updated for some reason.
    // App should consider all HTTP communication to be vulnerable, and take
    // appropriate action.
  }
}

public class MainActivity extends Activity

implements ProviderInstaller.ProviderInstallListener {

private static final int ERROR_DIALOG_REQUEST_CODE = 1;

private boolean retryProviderInstall;

//Update the security provider when the activity is created.

@Override

protected void onCreate(Bundle savedInstanceState) {

super.onCreate(savedInstanceState);

if (Build.VERSION.SDK_INT in 17..20) {

ProviderInstaller.installIfNeededAsync(this, this);

}

/**

* This method is only called if the provider is successfully updated

* (or is already up-to-date).

@Override

protected void onProviderInstalled() {

// Provider is up-to-date, app can make secure network calls.

}

/**

* This method is called if updating fails; the error code indicates

* whether the error is recoverable.

@Override

protected void onProviderInstallFailed(int errorCode, Intent recoveryIntent) {

GoogleApiAvailability availability = GoogleApiAvailability.getInstance();

if (availability.isUserRecoverableError(errorCode)) {

// Recoverable error. Show a dialog prompting the user to

// install/update/enable Google Play services.

availability.showErrorDialogFragment(

this,

errorCode,

ERROR_DIALOG_REQUEST_CODE,

new DialogInterface.OnCancelListener() {

@Override

public void onCancel(DialogInterface dialog) {

// The user chose not to take the recovery action

onProviderInstallerNotAvailable();

}

});

} else {

// Google Play services is not available.

onProviderInstallerNotAvailable();

}

@Override

protected void onActivityResult(int requestCode, int resultCode,

Intent data) {

super.onActivityResult(requestCode, resultCode, data);

if (requestCode == ERROR_DIALOG_REQUEST_CODE) {

// Adding a fragment via GoogleApiAvailability.showErrorDialogFragment

// before the instance state is restored throws an error. So instead,

// set a flag here, which will cause the fragment to delay until

// onPostResume.

retryProviderInstall = true;

}

/**

* On resume, check to see if we flagged that we need to reinstall the

* provider.

@Override

protected void onPostResume() {

super.onPostResume();

if (retryProviderInstall) {

// We can now safely retry installation.

ProviderInstaller.installIfNeededAsync(this, this);

}

retryProviderInstall = false;

}

private void onProviderInstallerNotAvailable() {

// This is reached if the provider cannot be updated for some reason.

// App should consider all HTTP communication to be vulnerable, and take

// appropriate action.

}

yogendra singh 31 January 2020

. . .

Discuss on Helpdesk

SSLHandshakeException on Android 4.4 and lower

Leave a Comment Cancel Reply

Message Sent!