I have implemented a simple HTTPS server using HttpCore 5.0 beta9 on
Android with its default JSSE:

https://github.com/rhashimoto/Android-HttpCore-Protocol-Bug/blob/master/app/src/main/java/com/example/httpcore/WebServer.kt

When running on Android 8.1 (Oreo), requests to the server fail with a TLS
protocol error in the middle of transferring the response body. When I look
at a packet dump (sample attached) the problem is that the server properly
sends some TLS-encrypted data but then sends some plaintext data.

This seems like it might be caused by the Conscrypt bug fixed here:

https://github.com/google/conscrypt/pull/189

I don't entirely understand the description of the bug and fix, but I do
not see the bad behavior when running on Android 10 and the time frame
seems about right.

My guess is that this is not an HttpCore bug but I thought I would document
it here in case someone else encounters it or can suggest a workaround.

Roy
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to