You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cordova.apache.org by "Aaron (JIRA)" <ji...@apache.org> on 2016/03/31 01:14:25 UTC

[jira] [Updated] (CB-10995) Android cannot load site with insecure content

     [ https://issues.apache.org/jira/browse/CB-10995?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Aaron updated CB-10995:
-----------------------
    Component/s: Plugin InAppBrowser

> Android cannot load site with insecure content
> ----------------------------------------------
>
>                 Key: CB-10995
>                 URL: https://issues.apache.org/jira/browse/CB-10995
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: Android, Plugin InAppBrowser
>            Reporter: Aaron
>
> Environment: Samsung S3 (Android 4.3), Crosswalk 17, Cordova-Android 5.1.1
> Issue: I'm trying to open the Sandbox PayPal page with this plugin with the following code:
> {code:java}
> var ref = cordova.InAppBrowser.open('http://www.sandbox.paypal.com' , '_blank', 'location=yes');
> {code}
> But this causes a in-app-browser instance to open with "Webpage not available" and "The webpage at https://www.sandbox.paypal.com/ might be temporarily down or it may have moved permanently to a new web address.". 
> In my debug console, I see the following:
> {code}
> 03-30 15:34:16.196 13936-14669/com.switch168.kosmos V/chromium_net: external/chromium/net/socket/ssl_client_socket_openssl.cc:302: [0330/153416:INFO:ssl_client_socket_openssl.cc(302)] [cac_debug_log][ssl_client_socket_openssl.cc] GetInstance() cac_state_: 0 CAC_CONTEXT_CAC: 3
> 03-30 15:34:16.196 13936-14669/com.switch168.kosmos V/chromium_net: external/chromium/net/socket/ssl_client_socket_openssl.cc:312: [0330/153416:INFO:ssl_client_socket_openssl.cc(312)] ssl_ctx_ is used
> 03-30 15:34:16.256 13936-14669/com.switch168.kosmos E/chromium_net: external/chromium/net/socket/ssl_client_socket_openssl.cc:905: [0330/153416:ERROR:ssl_client_socket_openssl.cc(905)] handshake failed; returned -1, SSL error code 1, net_error -107
> 03-30 15:34:16.256 13936-14669/com.switch168.kosmos V/chromium_net: external/chromium/net/socket/ssl_client_socket_openssl.cc:514: [0330/153416:INFO:ssl_client_socket_openssl.cc(514)] ~SSLClientSocketOpenSSL()
> 03-30 15:34:16.256 13936-14669/com.switch168.kosmos W/chromium_net: external/chromium/net/http/http_stream_factory_impl_job.cc:865: [0330/153416:WARNING:http_stream_factory_impl_job.cc(865)] Falling back to SSLv3 because host is TLS intolerant: 
> 03-30 15:34:16.316 13936-14669/com.switch168.kosmos V/chromium_net: external/chromium/net/socket/ssl_client_socket_openssl.cc:302: [0330/153416:INFO:ssl_client_socket_openssl.cc(302)] [cac_debug_log][ssl_client_socket_openssl.cc] GetInstance() cac_state_: 0 CAC_CONTEXT_CAC: 3
> 03-30 15:34:16.316 13936-14669/com.switch168.kosmos V/chromium_net: external/chromium/net/socket/ssl_client_socket_openssl.cc:312: [0330/153416:INFO:ssl_client_socket_openssl.cc(312)] ssl_ctx_ is used
> 03-30 15:34:16.366 13936-14669/com.switch168.kosmos E/chromium_net: external/chromium/net/socket/ssl_client_socket_openssl.cc:905: [0330/153416:ERROR:ssl_client_socket_openssl.cc(905)] handshake failed; returned -1, SSL error code 1, net_error -107
> 03-30 15:34:16.366 13936-14669/com.switch168.kosmos V/chromium_net: external/chromium/net/socket/ssl_client_socket_openssl.cc:514: [0330/153416:INFO:ssl_client_socket_openssl.cc(514)] ~SSLClientSocketOpenSSL()
> 03-30 15:34:16.376 13936-14653/com.switch168.kosmos V/webkit: reportError errorCode(-11) desc(Couldn't establish a secure connection.)
> 03-30 15:34:16.386 13936-13936/com.switch168.kosmos W/Web Console: The page displayed insecure content!
> {code}
> The strange part is that this same page and code works on my other Samsung S3 running Android 4.4.1. It seems to be related to the SSL certificates ( https://www.paypal-knowledge.com/infocenter/index?page=content&id=FAQ1766 ).
> How do I make this work with that webpage?



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org