Trouble with Tiny Tiny RSS App and Andoid 7

Support requests, bug reports, etc. go here. Dedicated servers / VDS hosting only
[email protected]
Bear Rating Trainee
Bear Rating Trainee
Posts: 4
Joined: 27 Mar 2017, 21:42

Trouble with Tiny Tiny RSS App and Andoid 7

Postby [email protected] » 27 Mar 2017, 21:44

Hello,

I bought your Tiny Tiny RSS App from the google Play Store. I get this
week a upgrade to Android 7. The App was broken after the update. I get
this Error in the app:

Fehler E/A Fehler (Server nicht erreichbar?) Handshake failed.

I get the same Error in Access-Log: http-in/IPv4-https-traffic: SSL handshake failure.

The Error was the same after some cipher and TLS version changes. My SSL configuration works great with Android 5 and 6.

Can I get running the Tiny Tiny RSS App again?


Cheers,
Michael

User avatar
fox
^ me reading your posts ^
Posts: 6318
Joined: 27 Aug 2005, 22:53
Location: Saint-Petersburg, Russia
Contact:

Re: Trouble with Tiny Tiny RSS App and Andoid 7

Postby fox » 27 Mar 2017, 22:22

the app has no inherent TLS implementation, it uses system API (HttpsUrlConnection)

>Can I get running the Tiny Tiny RSS App again?

well to me it looks like you either need to adjust the SSL configuration on your server to make it compatible with your device or revert your device firmware

dedioste
Bear Rating Trainee
Bear Rating Trainee
Posts: 6
Joined: 03 Mar 2015, 13:38

Re: Trouble with Tiny Tiny RSS App and Andoid 7

Postby dedioste » 28 Mar 2017, 09:58

App is running fine on Android 7.1.1 on Nexus 5x.

There where some changes in default ciphers with the move to 7.0, see here for details:
https://developer.android.com/about/ver ... ml#tls-ssl

User avatar
fox
^ me reading your posts ^
Posts: 6318
Joined: 27 Aug 2005, 22:53
Location: Saint-Petersburg, Russia
Contact:

Re: Trouble with Tiny Tiny RSS App and Andoid 7

Postby fox » 28 Mar 2017, 10:21

Image

oh dear

cy8aer
Bear Rating Master
Bear Rating Master
Posts: 110
Joined: 19 Apr 2010, 13:29

Re: Trouble with Tiny Tiny RSS App and Andoid 7

Postby cy8aer » 28 Mar 2017, 15:10

Did someone try it with Lineagos 14.1? I now have an unsupported image for Nexus7/grouper and it sometimes crashes when scrolling or selecting an article. Before calling this a "bug" it would be nice to have some responses from users with official Lineageos images.

chantoine
Bear Rating Trainee
Bear Rating Trainee
Posts: 1
Joined: 28 Mar 2017, 16:42

Re: Trouble with Tiny Tiny RSS App and Andoid 7

Postby chantoine » 28 Mar 2017, 16:44

Hi, i use LineageOS 14.1 with 2 phones (HTC m8 / LG G4) and i have no crash.

conrad784
Bear Rating Trainee
Bear Rating Trainee
Posts: 7
Joined: 30 Oct 2016, 23:54

Re: Trouble with Tiny Tiny RSS App and Andoid 7

Postby conrad784 » 28 Mar 2017, 18:56

Android 7.0
TT-RSS Beta Version (Unlocked)

Works perfectly well with Let's Encrypt certificate.

Test your tt-rss instance with https://www.ssllabs.com/ssltest/ , then you can be sure your configuration serverside ist right. Maybe some certificate in the chain is missing or the certificate was purged in Android 7.0 (StartSSL maybe?).

[email protected]
Bear Rating Trainee
Bear Rating Trainee
Posts: 4
Joined: 27 Mar 2017, 21:42

Re: Trouble with Tiny Tiny RSS App and Andoid 7

Postby [email protected] » 30 Mar 2017, 20:36

conrad784 wrote:Android 7.0
TT-RSS Beta Version (Unlocked)

Works perfectly well with Let's Encrypt certificate.

Test your tt-rss instance with https://www.ssllabs.com/ssltest/ , then you can be sure your configuration serverside ist right. Maybe some certificate in the chain is missing or the certificate was purged in Android 7.0 (StartSSL maybe?).



https://www.ssllabs.com/ssltest/analyze ... rpheus.net

It looks good for Android 7.

[email protected]
Bear Rating Trainee
Bear Rating Trainee
Posts: 4
Joined: 27 Mar 2017, 21:42

Re: Trouble with Tiny Tiny RSS App and Andoid 7

Postby [email protected] » 30 Mar 2017, 21:31

I found the problem. I have a ECC certificate instead of a RSA certificate. The tt-rrs App on my Android 7 device don't work with ECC certificates. Now, I serve a RSA and ECC certificate on my IP. This should work.

cy8aer
Bear Rating Master
Bear Rating Master
Posts: 110
Joined: 19 Apr 2010, 13:29

Re: Trouble with Tiny Tiny RSS App and Andoid 7

Postby cy8aer » 30 Mar 2017, 22:54

They applied a special patch for my lineage 14.1 image and now the tt-rss app works stable and crisp again (and some other apps are stable too). So this does not have anything to do with the app.

[email protected]
Bear Rating Trainee
Bear Rating Trainee
Posts: 4
Joined: 27 Mar 2017, 21:42

Re: Trouble with Tiny Tiny RSS App and Andoid 7

Postby [email protected] » 31 Mar 2017, 00:08

Yes, this is a general error in the android 7 firmware of my Huawei P9. Some other Apps has also SSL errors, but all Bowsers works with ECC certificates. Or the Problem is ecdhe secp384r1....

This is my working SSL config (HAProxy)

Code: Select all

        ssl-default-bind-ciphers CHACHA20+EECDH:AES256+ECDHE
        ssl-default-bind-options force-tlsv12 no-tls-tickets

....

        bind [email protected]/var/lib/haproxy/haproxy_ssl_ecc.sock accept-proxy ssl crt /etc/haproxy/certs/san.rennecke.dyndns.dk.pem ecdhe secp384r1 alpn http/1.1 npn http/1.1 user haproxy name ECC-socket
        bind [email protected]/var/lib/haproxy/haproxy_ssl_rsa.sock accept-proxy ssl crt /etc/haproxy/certs/san.0rpheus.net_rsa.pem    alpn http/1.1 npn http/1.1 user haproxy name RSA-socket


User avatar
fox
^ me reading your posts ^
Posts: 6318
Joined: 27 Aug 2005, 22:53
Location: Saint-Petersburg, Russia
Contact:

Re: Trouble with Tiny Tiny RSS App and Andoid 7

Postby fox » 31 Mar 2017, 07:45

i'm not saying i'm right all the time, but


Return to “Support”

Who is online

Users browsing this forum: No registered users and 13 guests