okhttp 3 ssl handshake exception

Dealing with ssl handshake exception in okhttp


javax.net.ssl.SSLHandshakeException: Handshake failed
       at com.android.org.conscrypt.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:374)


Solution


SampleTransferLayerSecurity

/**
 *
 */
package com.belazy.okhttp;

import java.util.ArrayList;
import java.util.List;

import javax.net.ssl.SSLContext;

import okhttp3.ConnectionSpec;
import okhttp3.HttpUrl;
import okhttp3.OkHttpClient;
import okhttp3.Request;
import okhttp3.Response;
import okhttp3.TlsVersion;

/**
 * @author secure socket layer
 *
 */
public class SampleTransferLayerSecurity {

/**
* @param args
*/
public static void main(String[] args) {
// TODO Auto-generated method stub

OkHttpClient client = new OkHttpClient();
client = SampleTransferLayerSecurity.enableTls12OVersion(client).build();
Response response = client.newCall("httpUrl").execute();

}

public static OkHttpClient.Builder enableTls12OVersion(OkHttpClient okHttpClient) {
OkHttpClient.Builder client = okHttpClient.newBuilder();
try {
SSLContext sc = SSLContext.getInstance("TLSv1.2");
sc.init(null, null, null);
client.sslSocketFactory(new Tls12SocketFactory(sc.getSocketFactory()));
ConnectionSpec connectionSpec = new ConnectionSpec.Builder(ConnectionSpec.MODERN_TLS)
.tlsVersions(TlsVersion.TLS_1_2).build();
List<ConnectionSpec> specs = new ArrayList<>();
specs.add(connectionSpec);
specs.add(ConnectionSpec.COMPATIBLE_TLS);
specs.add(ConnectionSpec.CLEARTEXT);
client.connectionSpecs(specs);
} catch (Exception exc) {
exc.printStackTrace();
}
return client;
}

}

Tls12SocketFactory.java

package com.belazy.okhttp;

import java.io.IOException;

import java.net.InetAddress;

import java.net.Socket;

import java.net.UnknownHostException;

import javax.net.ssl.SSLSocket;

import javax.net.ssl.SSLSocketFactory;

/**

 * Enables TLS v1.2 when creating SSLSockets.

 * <p/>

 * For some reason, android supports TLS v1.2 from API 16, but enables it by

 * default only from API 20.

 * @link https://developer.android.com/reference/javax/net/ssl/SSLSocket.html

 * @see SSLSocketFactory

 */

public class Tls12SocketFactory extends SSLSocketFactory {

    private static final String[] TLS_V12_ONLY = {"TLSv1.2"};

    final SSLSocketFactory delegate;

    public Tls12SocketFactory(SSLSocketFactory base) {

        this.delegate = base;

    }

    @Override

    public String[] getDefaultCipherSuites() {

        return delegate.getDefaultCipherSuites();

    }

    @Override

    public String[] getSupportedCipherSuites() {

        return delegate.getSupportedCipherSuites();

    }

    @Override

    public Socket createSocket(Socket s, String host, int port, boolean autoClose) throws IOException {

        return patch(delegate.createSocket(s, host, port, autoClose));

    }

    @Override

    public Socket createSocket(String host, int port) throws IOException, UnknownHostException {

        return patch(delegate.createSocket(host, port));

    }

    @Override

    public Socket createSocket(String host, int port, InetAddress localHost, int localPort) throws IOException, UnknownHostException {

        return patch(delegate.createSocket(host, port, localHost, localPort));

    }

    @Override

    public Socket createSocket(InetAddress host, int port) throws IOException {

        return patch(delegate.createSocket(host, port));

    }

    @Override

    public Socket createSocket(InetAddress address, int port, InetAddress localAddress, int localPort) throws IOException {

        return patch(delegate.createSocket(address, port, localAddress, localPort));

    }

    private Socket patch(Socket s) {

        if (s instanceof SSLSocket) {

            ((SSLSocket) s).setEnabledProtocols(TLS_V12_ONLY);

        }

        return s;

    }

}

Thanks to @steffi

http://javabelazy.blogspot.in/