‘No peer certificate’ error in Android 2.3 but NOT in 4

by

This thread was really helpful when I debugged a similar issue.

Summary Android 2.3 HTTPS/SSL checklist:

  • If your CA is in Android’s 2.3 list of trusted CA’s — and Thawte is — there’s no need to include the certificate in the app.
  • Android 2.3 does not support Server Name Indication so if your server is relying on it for SSL handshaking, Android may not be getting the certificates you’re expecting.
  • Do you have certificate chain on the server installed, and is it ordered correctly? Most browsers handle out-of-order certificate chains but Android 2.3 does not. bdc’s answer in the thread I mentioned above describes how to check the validity of your SSL certificate and chain with “openssl s_client -connect yourserver.com:443”.
  • When digging up that old 2.3 device you have in your bottom drawer, please ensure its date and time are set correctly after being powerless for too long.

More Related Contents:

  1. Trust Anchor not found for Android SSL Connection
  2. accepting HTTPS connections with self-signed certificates
  3. Javax.net.ssl.SSLHandshakeException: javax.net.ssl.SSLProtocolException: SSL handshake aborted: Failure in SSL library, usually a protocol error
  4. How to install trusted CA certificate on Android device?
  5. Self-signed SSL acceptance on Android
  6. How to enable TLS 1.2 support in an Android application (running on Android 4.1 JB)
  7. SSLHandshakeException: Handshake failed on Android N/7.0
  8. javax.net.ssl.SSLException: Read error: ssl=0x9524b800: I/O error during system call, Connection reset by peer
  9. Trusting all certificates with okHttp
  10. Android SSL – SNI support
  11. Custom SSL handling stopped working on Android 2.2 FroYo
  12. Apache HttpClient on Android producing CertPathValidatorException (IssuerName != SubjectName)
  13. Does Android Volley support SSL?
  14. Glide – javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found
  15. Android volley self signed HTTPS trust anchor for certification path not found
  16. CertPathValidatorException : Trust anchor for certificate path not found – Retrofit Android
  17. How to get charles proxy work with Android 7 nougat?
  18. android webview with client certificate
  19. SSL certificate is not trusted – on mobile only [closed]
  20. CLEARTEXT communication not supported on Retrofit
  21. Google Play security alert for insecure TrustManager
  22. Reusing SSL Sessions in Android with HttpClient
  23. Xamarin Android issue connecting via HTTPS to site with self-signed certificate: “Trust anchor for certification path not found.”
  24. javax.net.ssl.sslpeerunverifiedexception no peer certificate
  25. Error “Could not load SSL library” on Android with TidHTTP
  26. How can I set SignalR in Android Studio to ignore SSL issues for delvelopement
  27. How can I implement SSL Certificate Pinning while using React Native
  28. Android HttpClient and HTTPS
  29. How can I make Android Volley perform HTTPS request, using a certificate self-signed by an Unknown CA?
  30. android Google Play Warning: SSL Error Handler Vulnerability

Leave a Comment