Enabling Specific Ssl Protocols with Android Webviewclient

Android 4.3 WebView https error: Falling back to SSLv3 because host is TLS intolerant

It's not possible to support TLS 1.0 in WebView on Android < 4.3. For Android 4.4 it is disabled by default.

According to: https://stackoverflow.com/a/33763737/4409113

It is(SSL 3.0) enabled by default for:

Android 1.0, 1.1, 1.5, 1.6, 2.0–2.1, 2.2–2.2.3

And:

Android 2.3–2.3.7, 3.0–3.2.6, 4.0–4.0.4

And:

Android 5.0-5.0.2

But, seems like, it is not enabled for:

Android 5.1-5.1.1

Android 6.0-6.0.1

So, yes, it should work.you can trust the following link:

https://en.wikipedia.org/wiki/Template:TLS/SSL_support_history_of_web_browsers

Hope that helps.

SSL Issue with Android

How are you accessing this site? Through the Android browser? WebView? Or HttpClient/HTTPSURLConnection? It seems it only responds to SSL3, you have to force your client to use it.

SSL/TLS protocols and cipher suites with the AndroidHttpClient

When using the AndroidHttpClient to make REST requests via HTTPS, how can I specify which SSL protocols and ciphers to use?

I don't believe you can do it with AndroidHttpClient. Everything I've done to harden the channel (like cipher lists, certificate pinning, and public key pinning) required a custom class somewhere, whether it was SSLSocketFactory or X509TrustManager. That's Java and that's Android. See How to override the cipherlist sent to the server by Android when using HttpsURLConnection?.

---

Related Topics