服務器不支持Android 5.0的默認密碼套件

更新至android 5.0棒棒糖後，HttpsURLConnection發生握手錯誤。服務器不支持Android 5.0的默認密碼套件

05-05 14:54:08.821 10855-11793/com.soonoo.mobilecampus E/INFO﹕ javax.net.ssl.SSLHandshakeException: Handshake failed 
    at com.android.org.conscrypt.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:374) 
    at com.android.okhttp.Connection.upgradeToTls(Connection.java:238) 
    at com.android.okhttp.Connection.connect(Connection.java:158) 
    at com.android.okhttp.Connection.connect(Connection.java:170) 
    at com.android.okhttp.internal.http.HttpEngine.connect(HttpEngine.java:309) 
    at com.android.okhttp.internal.http.HttpEngine.sendRequest(HttpEngine.java:242) 
    at com.android.okhttp.internal.http.HttpURLConnectionImpl.execute(HttpURLConnectionImpl.java:388) 
    at com.android.okhttp.internal.http.HttpURLConnectionImpl.connect(HttpURLConnectionImpl.java:118) 
    at com.android.okhttp.internal.http.HttpURLConnectionImpl.getOutputStream(HttpURLConnectionImpl.java:220) 
    at com.android.okhttp.internal.http.DelegatingHttpsURLConnection.getOutputStream(DelegatingHttpsURLConnection.java:218) 
    at com.android.okhttp.internal.http.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:25) 
    at com.soonoo.mobilecampus.User.login(User.java:72) 
    at com.soonoo.mobilecampus.LoginView$Login.doInBackground(LoginView.java:112) 
    at com.soonoo.mobilecampus.LoginView$Login.doInBackground(LoginView.java:84) 
    at android.os.AsyncTask$2.call(AsyncTask.java:288) 
    at java.util.concurrent.FutureTask.run(FutureTask.java:237) 
    at android.os.AsyncTask$SerialExecutor$1.run(AsyncTask.java:231) 
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1112) 
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:587) 
    at java.lang.Thread.run(Thread.java:818) 
Caused by: javax.net.ssl.SSLProtocolException: SSL handshake aborted: ssl=0xaaaf8a00: Failure in SSL library, usually a protocol error 
error:1407743E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert inappropriate fallback (external/openssl/ssl/s23_clnt.c:765 0xa9295b25:0x00000000) 
     at com.android.org.conscrypt.NativeCrypto.SSL_do_handshake(Native Method) 
     at com.android.org.conscrypt.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:302) 
     ... 19 more

我想連接到使用HttpsURLConnection服務器支持以下密碼套件。問題是，android 5.0不支持以下密碼套件的任何一個...

SSL_CK_RC4_128_EXPORT40_WITH_MD5 
SSL_CK_RC2_128_CBC_EXPORT40_WITH_MD5 
TLS_RSA_EXPORT_WITH_RC4_40_MD5 
TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 
SSL_CK_DES_64_CBC_WITH_MD5 
SSL_CK_RC4_128_WITH_MD5 
SSL_CK_RC2_128_CBC_WITH_MD5 
SSL_CK_IDEA_128_CBC_WITH_MD5 
TLS_RSA_WITH_RC4_128_MD5 
SSL_CK_DES_192_EDE3_CBC_WITH_MD5

那麼是不是有什麼我可以從一個客戶端嗎？

來源

2015-05-08 soonoo

您可以發佈完整的例外呢？ – nikis

@nikis我編輯我的帖子 – soonoo

通常Android支持更多的密碼，那些啓用。但是從異常消息中，我感覺到服務器僅支持SSLv3，並嘗試從TLS撤回到SSl，而Android會拒絕（因此密碼不是您的問題）。無論如何，所使用的服務器應該升級，因爲它是問題的根源。 – Robert

-1

你應該嘗試指定以下密碼套件：

CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, 
        CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, 
        CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, 
        CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, 
        CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA, 
        CipherSuite.TLS_DHE_RSA_WITH_AES_256_CBC_SHA, 
        CipherSuite.TLS_DHE_DSS_WITH_AES_128_CBC_SHA, 
        CipherSuite.TLS_DHE_DSS_WITH_AES_256_CBC_SHA, 
        CipherSuite.TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, 
        CipherSuite.TLS_ECDHE_RSA_WITH_RC4_128_SHA, 
        CipherSuite.TLS_RSA_WITH_AES_128_GCM_SHA256, 
        CipherSuite.TLS_RSA_WITH_AES_256_GCM_SHA384, 
        CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA, 
        CipherSuite.TLS_RSA_WITH_AES_256_CBC_SHA

來源

2015-10-22 21:02:35

鏈接已損壞。 –

服務器不支持Android 5.0的默認密碼套件

回答

相關問題