SSL changes in kitkat android that support connection from work?

Have you made any changes to SSL settings for Android in kitkat? We have an application (phonegap, angularjs and jquery mobile) that works fine with all previous versions of Android, but now in 4.4 we get an SSL error.

12-23 19:25:24.915: WARN/chromium(18378): [WARNING:ssl_client_socket_openssl.cc(182)] Unmapped error reason: 1000
12-23 19:25:24.915: ERROR/chromium(18378): [ERROR:ssl_client_socket_openssl.cc(870)] handshake failed; returned -1, SSL error code 1, net_error -2

I used webkit debugging mode and sent XMLhttpRequests to different servers. https://www.google.de works fine, but our server does not only work with http.

So, here are some details of our (client) certificate: SSL3.0 with RC4_128. Auth - SHA1 and RSA. It does not support TLS-Renegotiation.

I found this: https://code.google.com/p/k9mail/issues/detail?id=6046

I don’t know how relevant this is.

My guess: Android kitkat no longer supports ssl 3.0 and requires TLS 1.x

But I have no way of knowing for sure, and I do not want to tell the client about changing my certificate, and then it does not work, because in the end it was our mistake.

Any ideas? Thanks!

+4
source share

All Articles