Enabling specific SSL protocols with Android WebViewClient

java android ssl https webviewclient
user802467 picture user802467 · Feb 4, 2015 · Viewed 19.3k times · Source

My application uses WebViewClient to make SSL connections to the server. The server is configured to only accept TLSv1.1 and above protocols.

1) How do I check which SSL protocols are a) Supported and b) Enabled by default when using Android WebViewClient on a device.
2) How do I enable specific SSL protocols for Android WebViewClient instance used in my application.

On one of the test devices running Android 4.3, WebViewClient throws onReceivedError callback with description "Failed to perform SSL handshake"
Chrome logs are as follows:
01-29 15:58:00.073 5486 5525 W chromium_net: external/chromium/net/http/http_stream_factory_impl_job.cc:865: [0129/155800:WARNING:http_stream_factory_impl_job.cc(865)] Falling back to SSLv3 because host is TLS intolerant: 10.209.126.125:443 01-29 15:58:00.083 5486 5525 E chromium_net: external/chromium/net/socket/ssl_client_socket_openssl.cc:792: [0129/155800:ERROR:ssl_client_socket_openssl.cc(792)] handshake failed; returned 0, SSL error code 5, net_error -107

My application also uses HttpClient and HttpsUrlConnection classes to setup SSL Connections. I was able to use SSLSocket API to enable specific protocols when using these classes. http://developer.android.com/reference/javax/net/ssl/SSLSocket.html#setEnabledProtocols(java.lang.String[])

I need to do the same with WebViewClient.

Answer

M. C. picture M. C. · Nov 17, 2015

As per documenation it is NOT possible to support TLS 1.0 in WebView in Android < 4.3. For Android 4.4 it is disabled by default.

Check this chart for support of TLS 1.0 in different browsers: https://en.wikipedia.org/wiki/Transport_Layer_Security#Web_browsers

Related questions

How to do an HTTPS POST from Android?

I want to do a HTTPS post method to send some data from my android app to my website. I used HttpURLConnection first and it's working fine with my HTTP URL. My production website is on HTTPS and I want …

Read More
Android SSL HttpGet (No peer certificate) error OR (Connection closed by peer) error

I am trying to do a simple HttpGet to read a webpage. I have this working on iOS and working on Android over http, but not https. The url is an internal network IP and custom port, so I can …

Read More
javax.net.ssl.SSLPeerUnverifiedException: Hostname not verified:

I am trying to use HTTPS connection with self-signed certificate. I have followed steps of creating self-signed certificate as mentioned here - Creating Self-signed certificate. Everything works fine even in browser, it only shows me a message that my certificate …

Read More