{"action":"created","issue":{"url":"https://api.github.com/repos/openhab/openhab/issues/4771","repository_url":"https://api.github.com/repos/openhab/openhab","labels_url":"https://api.github.com/repos/openhab/openhab/issues/4771/labels{/name}","comments_url":"https://api.github.com/repos/openhab/openhab/issues/4771/comments","events_url":"https://api.github.com/repos/openhab/openhab/issues/4771/events","html_url":"https://github.com/openhab/openhab/issues/4771","id":188931837,"number":4771,"title":"Android OpenHab app connects using TLS v1","user":{"login":"iwanzarembo","id":9989906,"avatar_url":"https://avatars.githubusercontent.com/u/9989906?v=3","gravatar_id":"","url":"https://api.github.com/users/iwanzarembo","html_url":"https://github.com/iwanzarembo","followers_url":"https://api.github.com/users/iwanzarembo/followers","following_url":"https://api.github.com/users/iwanzarembo/following{/other_user}","gists_url":"https://api.github.com/users/iwanzarembo/gists{/gist_id}","starred_url":"https://api.github.com/users/iwanzarembo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iwanzarembo/subscriptions","organizations_url":"https://api.github.com/users/iwanzarembo/orgs","repos_url":"https://api.github.com/users/iwanzarembo/repos","events_url":"https://api.github.com/users/iwanzarembo/events{/privacy}","received_events_url":"https://api.github.com/users/iwanzarembo/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-11-12T20:06:14Z","updated_at":"2016-11-12T21:06:23Z","closed_at":"2016-11-12T21:06:23Z","body":"Hi,\r\nI am not sure if this is the correct place to place an enhancement for the Android OpenHab app. Let me know if I need to move it.\r\n\r\n## Issue in short\r\nThe OpenHab Android application running on Android 4.2.x or 4.4.x cannot connect to servers who do not support TLS v1.0.\r\n\r\n## My configuration\r\n\r\n* OpenHab 1.8.3 (running on a Reasberry with Debian 8.0 \r\n* OpenHab Android App (HabDroid) 1.8.0.4 on Android 4.2.x or 4.4.x\r\n* OpenHab server is running behind an Apache2 Reverse Proxy. The proxy is configured to use SSL termination and connect via HTTP to OpenHab. Main reason for that set up is that I want to use the default https port 443.\r\n* Apache is configured to use TLS v1.2 only, due to security reasons (TLS v1.0 can be forced to weaken security to SSL 3.0, which is implemented in TLS v1.0, see also http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r1.pdf ).\r\n\r\n## Current Behavior\r\n\r\nI use the Android OpenHab app on Android 4.2.x or 4.4.x (two devices I have and used for tests) + enabled SSL connection. The application is not able to connect to Apache and displays a blank page without an error message.\r\n\r\nThe Apache log contains entries like:\r\n\r\n> [Sat Nov 12 18:52:55.067526 2016] [ssl:info] [pid 2008:tid 1956639792] [client 192.168.178.24:55122] AH01964: Connection to child 2 established (server myopenhabserver:443)\r\n> [Sat Nov 12 18:52:55.068544 2016] [ssl:info] [pid 2008:tid 1956639792] [client 192.168.178.24:55122] AH02008: SSL library error 1 in handshake (server rb.fritz.box:443)\r\n> [Sat Nov 12 18:52:55.068664 2016] [ssl:info] [pid 2008:tid 1956639792] SSL Library Error: error:14076102:SSL routines:SSL23_GET_CLIENT_HELLO:unsupported protocol\r\n> [Sat Nov 12 18:52:55.068710 2016] [ssl:info] [pid 2008:tid 1956639792] [client 192.168.178.24:55122] AH01998: Connection closed to child 2 with abortive shutdown (server myopenhabserver:443)\r\n\r\nThe app is working on Android 5.x and upwards.\r\n\r\n## Expected Behavior\r\n\r\n* The connection should be able to connect to servers which support TLS v1.2 only.\r\n* The app should display an error with some details why the connection did not work.\r\n\r\n## Possible Solution\r\n\r\nAdjust the OpenHab App to support TLS v1.1 or v1.2. Something like https://blog.dev-area.net/2015/08/13/android-4-1-enable-tls-1-1-and-tls-1-2/ and add a Pop up with details why a connection to OpenHab API did not work.\r\n\r\nIt would also be a very big help to add a logging feature into the app inself. Such issues are hard and time consuming to find.\r\n\r\n## Steps to Reproduce (for bugs)\r\n\r\n1. Set up Apache Reverse Proxy, a sample config is attached [apache_proxy.conf](https://github.com/openhab/openhab/files/587406/apache_proxy.conf.txt)\r\n1. Start OpenHab on the same machine that the proxy can work with the attache configuration.\r\n1. Take the Android OpenHab for Android 4.1/4.2/4.4 and configure it to connect to your proxy\r\n\r\nResult: The app will display a blank page!\r\n\r\nYou can add the lines to the Apache config \r\n\r\n```\r\nErrorLog /var/log/apache2/openhab_apache.log\r\nLogLevel debug\r\n```\r\nThen you will see log entries as described above.\r\n"},"comment":{"url":"https://api.github.com/repos/openhab/openhab/issues/comments/260148371","html_url":"https://github.com/openhab/openhab/issues/4771#issuecomment-260148371","issue_url":"https://api.github.com/repos/openhab/openhab/issues/4771","id":260148371,"user":{"login":"iwanzarembo","id":9989906,"avatar_url":"https://avatars.githubusercontent.com/u/9989906?v=3","gravatar_id":"","url":"https://api.github.com/users/iwanzarembo","html_url":"https://github.com/iwanzarembo","followers_url":"https://api.github.com/users/iwanzarembo/followers","following_url":"https://api.github.com/users/iwanzarembo/following{/other_user}","gists_url":"https://api.github.com/users/iwanzarembo/gists{/gist_id}","starred_url":"https://api.github.com/users/iwanzarembo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iwanzarembo/subscriptions","organizations_url":"https://api.github.com/users/iwanzarembo/orgs","repos_url":"https://api.github.com/users/iwanzarembo/repos","events_url":"https://api.github.com/users/iwanzarembo/events{/privacy}","received_events_url":"https://api.github.com/users/iwanzarembo/received_events","type":"User","site_admin":false},"created_at":"2016-11-12T21:06:23Z","updated_at":"2016-11-12T21:06:23Z","body":"Wrong repository. Created the new issue [249](https://github.com/openhab/openhab.android/issues/249). Closing this one!"}}
{"actor":{"display_login":"iwanzarembo"}}