Question

根据behavior-network OpenSSL，似乎Android M正在从BoringSSL移到[BoringSSL]库。但是如何在应用之前处理我的openssl连接？我的应用有问题：

09-30 10:40:54.241    6211-6624/com.hundsun.winner W/System.err﹕ Caused by: javax.net.ssl.SSLProtocolException: SSL handshake aborted: ssl=0xd6dcce00: Failure in SSL library, usually a protocol error
09-30 10:40:54.241    6211-6624/com.hundsun.winner W/System.err﹕ error:100c1069:SSL routines:ssl3_get_server_key_exchange:BAD_DH_P_LENGTH (external/boringssl/src/ssl/s3_clnt.c:1193 0xe93a350f:0x00000000)
09-30 10:40:54.241    6211-6624/com.hundsun.winner W/System.err﹕ at com.android.org.conscrypt.NativeCrypto.SSL_do_handshake(Native Method)
09-30 10:40:54.241    6211-6624/com.hundsun.winner W/System.err﹕ at com.android.org.conscrypt.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:324)
09-30 10:40:54.241    6211-6624/com.hundsun.winner W/System.err﹕ … 5 more

Answer 1

您的服务器使用DH组大小小于1024位？尽量增加它。

https://boringssl.googlesource.com/boringssl/+/a7997f12be358e58aeb2345bb8b88a9d53240024%5E!/

boringSsl在android M中犯了错误

1 个答案: