Stack Overflow
Stack Overflow

Questions tagged [boringssl]

BoringSSL is Google's fork of OpenSSL.

BoringSSL is Google's fork of OpenSSL. BoringSSL imports changes from OpenSSL rather than layering Google changes on top of OpenSSL sources. It is a lighter-weight version of OpenSSL that strips out many of the application programing interfaces (APIs) and application binary interfaces (ABIs) found in the latter (reference).

Adam Langley discusses some of Google's design and engineering decisions for BoringSSL on his blog at Imperial Violet.

113 questions
60
votes
4 answers

Xcode 9 iOS 11 BoringSSL SSL_ERROR_ZERO_RETURN

I have a simple program HelloWorld running on iOS. The same code has been running fine for a long time. Recently, I notice that I get the below BoringSSL error when the program runs on my ipad connected to Xcode 9 on my Macbook. I don't see this…
Jason Duan
  • 601
  • 1
  • 5
  • 4
46
votes
2 answers

SSL_ERROR_SSL(1): operation failed within the library

I am getting some SSL Errors (which are causing my project to stop/hang with no crash as I have a DispatchGroup waiting for the request), which I don't know how they are caused, what they are, or what to do about it. I have read numerous pages…
George
  • 25,988
  • 10
  • 79
  • 133
27
votes
0 answers

BoringSSL nw_protocol_boringssl_get_output_frames ... get output frames failed, state 8196 log confusion

We currently have two use cases for our objective-c application that connects to a node.js server. The first case is having our application hosted on a client server where we have our SSL cert directly in node.js. The second is our cloud hosted…
Aaron M.
  • 303
  • 4
  • 7
13
votes
1 answer

Swift boringssl_metrics_log_metric_block_invoke(144) Failed to log metrics

I just get an error "[boringssl] boringssl_metrics_log_metric_block_invoke(144) Failed to log metrics" while to get JSON data from API link. Before it worked and I just updated Xcode version 13.1. I was checking every forum but I couldn't find a way…
baohoang
  • 616
  • 1
  • 5
  • 13
11
votes
1 answer

BoringSSL failed

When i try sign in or sign up in Firebase, I get error 2018-09-20 10:59:15.502959+0300 app[1980:18396] TIC Read Status [3:0x0]: 1:57 2018-09-20 10:59:15.503055+0300 app[1980:18396] TIC Read Status [3:0x0]: 1:57 2018-09-20 11:00:45.911678+0300…
Egor
  • 199
  • 2
  • 12
11
votes
1 answer

Avoid Firebase / BoringSSL Console Logs on iOS

After installing Firebase (Cloud Firestore), I usually get tons of console logs, usually belonging to BoringSSL, such as this: 2018-08-27 13:49:03.747112+0100 VM[25611:371248] [BoringSSL] boringssl_session_errorlog(224) [C2.1:2][0x7f9570c142d0]…
Jacobo Koenig
  • 11,728
  • 9
  • 40
  • 75
11
votes
2 answers

InvalidKeyException: Only SecretKey is supported

I have recently started seeing this error in devices. java.security.InvalidKeyException: Only SecretKey is supported at com.android.org.conscrypt.OpenSSLCipher.checkAndSetEncodedKey(OpenSSLCipher.java:436) at…
M-Wajeeh
  • 17,204
  • 10
  • 66
  • 103
11
votes
0 answers

Add a custom TLS extension on Android

I am developing an Android application and want to add a custom extension on the TLS/SSL ClientHello handshake. Both OpenSSL and BoringSSL support the necessary functionality and callbacks to add custom extensions, but unfortunately Android JSSE…
yiannis
  • 121
  • 3
8
votes
3 answers

Webview HTTPS handshake failed

I'm trying to access a website from an Android application with WebView library, so I have: import android.support.v7.app.AppCompatActivity; import android.os.Bundle; import android.webkit.SslErrorHandler; import android.webkit.WebSettings; import…
Oana Andone
  • 661
  • 2
  • 7
  • 13
6
votes
3 answers

Which JCE provider to use on Android ? Bouncy Castle, Conscrypt,...?

I’m starting the development of an Android App using ECC Cryptography. I have seen that Android embeds some Cryptography (defined here https://developer.android.com/guide/topics/security/cryptography ) but it is limited either in term of algorithm’s…
OlivierGrenoble
  • 3,803
  • 2
  • 18
  • 25
6
votes
1 answer

Make a Android application use FIPS 140-2 valiated cryptography

I have client who wants our application to use FIPS 140-2 validated cryptography. The app uses Okhttp and does some HTTPS requests. AFAIK Android uses OpenSSL C library and uses java wrapper javax/net/ssl. Questions: How to make android Application…
NitZRobotKoder
  • 1,046
  • 8
  • 44
  • 74
5
votes
1 answer

How to build curl with boringssl?

I'm trying to build curl with boringssl on Ubuntu 16.04. I have boringssl built OK. With curl 7.53 I configure using: ./configure --with-ssl=/home/john/dev/boringssl and the output says " SSL support: enabled (BoringSSL)" OK. But when I make,…
user3340499
  • 189
  • 1
  • 10
5
votes
1 answer

Android SSL Handshake Failed when connecting to a web service using HTTPS

My Android app connects to a web service on my server. Everything worked fine yesterday, but today I got the error. I didn't make any changes to the web service, nor to the app. I suspect it's something wrong with my server, but don't know where to…
Shawn
  • 2,675
  • 3
  • 25
  • 48
4
votes
2 answers

pod install in flutter iOS project gives base64: invalid input

After some downtime I'm trying to build my Flutter app for iOS without success. pod intall gives me the following output (even after cleaning the XCode workspace): $ pod install Analyzing dependencies cloud_firestore: Using Firebase SDK version…
tjarvstrand
  • 836
  • 9
  • 20
4
votes
0 answers

Disable TLS 1.3 for GRPC or system-wide in Ubuntu?

I'm trying to use a GRPC client which is TLS 1.3 enabled on my system (Ubuntu 20.04). I'd like to force it to connect over TLS 1.2: I don't see any options to control this, so I thought I'd try disabling TLS 1.3 system-wide. How do I do this? I…
bumbling-tadpole
  • 41
  • 5
1
2 3 4 5 6 7 8