box / box/box-android-apptoapp-sdk
Error login in from Gingerbread.
- Dominant language
- Java
- Stars
- 57
- Forks
- 27
- PR merge metrics
- No merged PRs in 30d
Description
I get this error only on a Gingerbread device
W/System.err( 5892): javax.net.ssl.SSLHandshakeException: org.bouncycastle.jce.exception.ExtCertPathValidatorException: Could not validate certificate signature.
W/System.err( 5892): at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:477)
W/System.err( 5892): at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:328)
W/System.err( 5892): at org.apache.harmony.luni.internal.net.www.protocol.http.HttpConnection.setupSecureSocket(HttpConnection.java:185)
W/System.err( 5892): at org.apache.harmony.luni.internal.net.www.protocol.https.HttpsURLConnectionImpl$HttpsEngine.makeSslConnection(HttpsURLConnectionImpl.java:433)
W/System.err( 5892): at org.apache.harmony.luni.internal.net.www.protocol.https.HttpsURLConnectionImpl$HttpsEngine.makeConnection(HttpsURLConnectionImpl.java:387)
W/System.err( 5892): at org.apache.harmony.luni.internal.net.www.protocol.http.HttpURLConnectionImpl.retrieveResponse(HttpURLConnectionImpl.java:1018)
W/System.err( 5892): at org.apache.harmony.luni.internal.net.www.protocol.http.HttpURLConnectionImpl.getResponseCode(HttpURLConnectionImpl.java:726)
W/System.err( 5892): at org.apache.harmony.luni.internal.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:121)
W/System.err( 5892): at com.box.androidlib.BoxSynchronous.saxRequest(BoxSynchronous.java:1239)
W/System.err( 5892): at com.box.androidlib.BoxSynchronous.getTicket(BoxSynchronous.java:146)
W/System.err( 5892): at com.box.androidlib.Box$1.run(Box.java:325)
W/System.err( 5892): Caused by: java.security.cert.CertificateException: org.bouncycastle.jce.exception.ExtCertPathValidatorException: Could not validate certificate signature.
W/System.err( 5892): at org.apache.harmony.xnet.provider.jsse.TrustManagerImpl.checkServerTrusted(TrustManagerImpl.java:161)
W/System.err( 5892): at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.verifyCertificateChain(OpenSSLSocketImpl.java:664)
W/System.err( 5892): at org.apache.harmony.xnet.provider.jsse.NativeCrypto.SSL_do_handshake(Native Method)
W/System.err( 5892): at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:474)
W/System.err( 5892): ... 10 more
W/System.err( 5892): Caused by: org.bouncycastle.jce.exception.ExtCertPathValidatorException: Could not validate certificate signature.
W/System.err( 5892): at org.bouncycastle.jce.provider.RFC3280CertPathUtilities.processCertA(RFC3280CertPathUtilities.java:1504)
W/System.err( 5892): at org.bouncycastle.jce.provider.PKIXCertPathValidatorSpi.engineValidate(PKIXCertPathValidatorSpi.java:399)
W/System.err( 5892): at java.security.cert.CertPathValidator.validate(CertPathValidator.java:197)
W/System.err( 5892): at org.apache.harmony.xnet.provider.jsse.TrustManagerImpl.checkServerTrusted(TrustManagerImpl.java:156)
W/System.err( 5892): ... 13 more
W/System.err( 5892): Caused by: java.security.SignatureException: Signature was not verified
W/System.err( 5892): at org.apache.harmony.security.provider.cert.X509CertImpl.fastVerify(X509CertImpl.java:562)
W/System.err( 5892): at org.apache.harmony.security.provider.cert.X509CertImpl.verify(X509CertImpl.java:487)
W/System.err( 5892): at org.bouncycastle.jce.provider.CertPathValidatorUtilities.verifyX509Certificate(CertPathValidatorUtilities.java:1551)
W/System.err( 5892): at org.bouncycastle.jce.provider.RFC3280CertPathUtilities.processCertA(RFC3280CertPathUtilities.java:1496)
W/System.err( 5892): ... 16 more
Other android flavors work ok (Kindle, KitKat). The issue also affects Box.com official app. Gingerbread was working ok before.
Contributor guide
Research direction
Reproduce the login failure on a Gingerbread device and start from BoxSynchronous.java at saxRequest/getTicket, with the surrounding call in Box.java. Compare the SSL handshake behavior with the working Kindle and KitKat variants; done means login succeeds on Gingerbread without breaking the other Android flavors.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, java
- Domain
- authentication, mobile
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100