[Interest] Ignore SSL errors on Android 6.0+

Jan 'Koviš' Struhár jan.struhar at cs-soft.cz
Wed Mar 29 17:57:06 CEST 2017


On 03/29/2017 05:53 PM, Thiago Macieira wrote:
> On quarta-feira, 29 de março de 2017 02:32:45 PDT Richard Moore wrote:
>> Your ciphers are too good for the server - it wants terrible ones.
>> eg. RC4-MD5:
>>
>> openssl s_client -connect www.webnotes.cz:443 -cipher RC4-MD5
> Ah. I see.
>
> Well, the OP can then connect to the server by using setCiphers. I recommend
> trying first the default and, only if that fails, retry with unsafe ciphers.
>
> And send a nastygram to the the server admin saying that it needs to be
> updated to support more secure ciphers.
>
The pain in the back is, that the server admin is a not cooperating 
fellow, otherwise I do not need to solve this kind of issues...

Many thanks for detailed analysis.

Jan




More information about the Interest mailing list