From acb869b21cc00a2928e07e05aedfd3e88c33fbb1 Mon Sep 17 00:00:00 2001 From: Albert Vaca Cintora Date: Mon, 24 Apr 2023 19:08:24 +0200 Subject: [PATCH] Bump the TLS version to 1.2 TLSv1.2 is supported on all the Android versions we support now. TLSv1.3 is only supported in API 29+. Although we could conditionally enable it on 29+, it seems to cause problems (disconnects & reconnects when the LanLink gets refreshed) also on newer devices. --- src/org/kde/kdeconnect/Helpers/SecurityHelpers/SslHelper.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/org/kde/kdeconnect/Helpers/SecurityHelpers/SslHelper.java b/src/org/kde/kdeconnect/Helpers/SecurityHelpers/SslHelper.java index 76cfb016..4f1e9c43 100644 --- a/src/org/kde/kdeconnect/Helpers/SecurityHelpers/SslHelper.java +++ b/src/org/kde/kdeconnect/Helpers/SecurityHelpers/SslHelper.java @@ -209,7 +209,7 @@ public class SslHelper { trustManagerFactory.init(keyStore); // Setup custom trust manager if device not trusted - SSLContext tlsContext = SSLContext.getInstance("TLSv1"); //Newer TLS versions are only supported on API 16+ + SSLContext tlsContext = SSLContext.getInstance("TLSv1.2"); // Use TLS up to 1.2, since 1.3 seems to cause issues in some (older?) devices if (isDeviceTrusted) { tlsContext.init(keyManagerFactory.getKeyManagers(), trustManagerFactory.getTrustManagers(), RandomHelper.secureRandom); } else {