Community not found in App Android Version 7


(Ingrid Peters) #24

Are you running Android V7?

(Joffrey Jaffeux) #29

Hi, we have done more tests and can reproduce it, however we can’t reproduce it with sites we host, we suspect something wrong in your configuration (probably SSL configuration). We are at our annual meeting for the next week, and I wanted to give you the latest info we have on the subject.

(Ingrid Peters) #30

Thanks so much for looking into this Joffrey! That’s good news. Harm is the technical person so he will have to look at the installation. Anything in particular he should check out?

(Gerhard Schlager) #31

I’d start by comparing the test results of your domain and at SSL Labs.
Oh, and I’d definitely fix the issue with your certificate chain. You’ll find a warning in the test results…

(Harm van den Heurik) #32

Hello Gerhard,

I’ve fixed the chain issue (removed the CA root from ssl.crt) but the app still doesn’t work on a Samsung Phone with Android 7.x.

(Rafael dos Santos Silva) #35

It’s working fine for me:

Android 8 on Nexus 6p

(Harm van den Heurik) #36

The problem can only be reproduced on Samsung phones with Android 7.x. On other Android devices everything works fine.

(Harm van den Heurik) #37

Hello Gerhard,

The problem is solved. After looking at the SSLLabs results again i noticed a difference between the Android 7.0 handhake. Our site gave ECDH secp384r1 while your site gave ECDH secp256r1. After some googling i landed on the following site:

So there seems to be a bug in Android 7.0. I now changed the line “ssl_ecdh_curve secp384r1” to “ssl_ecdh_curve prime256v1” in “web.ssl.template.yml” and after a rebuild the app started working.

Requirements to run the Android App
(Joffrey Jaffeux) #38

I read some things about samsung needing older ciphers but it was for older phones. Glad you sorted it out!

(Jeff Atwood) #39

Wow excellent sleuthing! Sure glad that someone created Stack Overflow so we could use it to figure this out :wink:

(Ingrid Peters) #40

Thanks everybody for your time and energy! :grinning:

(Joffrey Jaffeux) #41

This topic was automatically closed 5 days after the last reply. New replies are no longer allowed.