box / box/box-android-apptoapp-sdk

Error login in from Gingerbread.

Open
#17 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
57
Forks
27
PR merge metrics
No merged PRs in 30d

Description

I get this error only on a Gingerbread device

W/System.err( 5892): javax.net.ssl.SSLHandshakeException: org.bouncycastle.jce.exception.ExtCertPathValidatorException: Could not validate certificate signature.
W/System.err( 5892): at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:477)
W/System.err( 5892): at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:328)
W/System.err( 5892): at org.apache.harmony.luni.internal.net.www.protocol.http.HttpConnection.setupSecureSocket(HttpConnection.java:185)
W/System.err( 5892): at org.apache.harmony.luni.internal.net.www.protocol.https.HttpsURLConnectionImpl$HttpsEngine.makeSslConnection(HttpsURLConnectionImpl.java:433)
W/System.err( 5892): at org.apache.harmony.luni.internal.net.www.protocol.https.HttpsURLConnectionImpl$HttpsEngine.makeConnection(HttpsURLConnectionImpl.java:387)
W/System.err( 5892): at org.apache.harmony.luni.internal.net.www.protocol.http.HttpURLConnectionImpl.retrieveResponse(HttpURLConnectionImpl.java:1018)
W/System.err( 5892): at org.apache.harmony.luni.internal.net.www.protocol.http.HttpURLConnectionImpl.getResponseCode(HttpURLConnectionImpl.java:726)
W/System.err( 5892): at org.apache.harmony.luni.internal.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:121)
W/System.err( 5892): at com.box.androidlib.BoxSynchronous.saxRequest(BoxSynchronous.java:1239)
W/System.err( 5892): at com.box.androidlib.BoxSynchronous.getTicket(BoxSynchronous.java:146)
W/System.err( 5892): at com.box.androidlib.Box$1.run(Box.java:325)
W/System.err( 5892): Caused by: java.security.cert.CertificateException: org.bouncycastle.jce.exception.ExtCertPathValidatorException: Could not validate certificate signature.
W/System.err( 5892): at org.apache.harmony.xnet.provider.jsse.TrustManagerImpl.checkServerTrusted(TrustManagerImpl.java:161)
W/System.err( 5892): at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.verifyCertificateChain(OpenSSLSocketImpl.java:664)
W/System.err( 5892): at org.apache.harmony.xnet.provider.jsse.NativeCrypto.SSL_do_handshake(Native Method)
W/System.err( 5892): at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:474)
W/System.err( 5892): ... 10 more
W/System.err( 5892): Caused by: org.bouncycastle.jce.exception.ExtCertPathValidatorException: Could not validate certificate signature.
W/System.err( 5892): at org.bouncycastle.jce.provider.RFC3280CertPathUtilities.processCertA(RFC3280CertPathUtilities.java:1504)
W/System.err( 5892): at org.bouncycastle.jce.provider.PKIXCertPathValidatorSpi.engineValidate(PKIXCertPathValidatorSpi.java:399)
W/System.err( 5892): at java.security.cert.CertPathValidator.validate(CertPathValidator.java:197)
W/System.err( 5892): at org.apache.harmony.xnet.provider.jsse.TrustManagerImpl.checkServerTrusted(TrustManagerImpl.java:156)
W/System.err( 5892): ... 13 more
W/System.err( 5892): Caused by: java.security.SignatureException: Signature was not verified
W/System.err( 5892): at org.apache.harmony.security.provider.cert.X509CertImpl.fastVerify(X509CertImpl.java:562)
W/System.err( 5892): at org.apache.harmony.security.provider.cert.X509CertImpl.verify(X509CertImpl.java:487)
W/System.err( 5892): at org.bouncycastle.jce.provider.CertPathValidatorUtilities.verifyX509Certificate(CertPathValidatorUtilities.java:1551)
W/System.err( 5892): at org.bouncycastle.jce.provider.RFC3280CertPathUtilities.processCertA(RFC3280CertPathUtilities.java:1496)
W/System.err( 5892): ... 16 more

Other android flavors work ok (Kindle, KitKat). The issue also affects Box.com official app. Gingerbread was working ok before.

Contributor guide

Open the contributing guide

Research direction

Reproduce the login failure on a Gingerbread device and start from BoxSynchronous.java at saxRequest/getTicket, with the surrounding call in Box.java. Compare the SSL handshake behavior with the working Kindle and KitKat variants; done means login succeeds on Gingerbread without breaking the other Android flavors.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, java
Domain
authentication, mobile
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.