[jira] [Commented] (CB-12654) Cordova release build blocks ajax requests
[ https://issues.apache.org/jira/browse/CB-12654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16016155#comment-16016155 ] Brett Hoyer commented on CB-12654: -- I seem to have the same issue with self-signed certificates. I created bug CB-12832, but figured I'd post device logs here as well to see if this discussion applies. 05-16 22:56:15.311 27623 27807 D NetworkSecurityConfig: No Network Security Config specified, using platform default 05-16 22:56:15.340 27623 27807 I X509Util: Failed to validate the certificate chain, error: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found. > Cordova release build blocks ajax requests > -- > > Key: CB-12654 > URL: https://issues.apache.org/jira/browse/CB-12654 > Project: Apache Cordova > Issue Type: Bug > Components: cordova-android > Environment: cordova-android@4.1.1 , Android Version 7.1.1, Nexus 5X >Reporter: Chandra Sekhar Walajapet Sureshbabu > > Android Cordova Debug Build works fine on Nexus 5X, 7.1.1 , However it fails > to make any ajax requests on Release(Signed) Build. > Tried communicating from native code using a plugin, the connection is > successful > The issue occurs only in Nexus 5X, 7.1.1 and doesn't happen on other devices. > Permissions: > > > Whitelist plugin in config.xml: > > value="org.apache.cordova.whitelist.WhitelistPlugin" /> > > > Even tested with logs in ChromeWebViewImpl.java > Returns true when asked for shouldAllow > CSP: > https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline'; > media-src *; connect-src https://mysubdomain.mydomain.com";> > Please note the CSP works for all Android, iOS devices except for Nexus 5X > 7.1.1, i even tried removing connect-src, but same result. > Did anyone come across similar issue ? -- This message was sent by Atlassian JIRA (v6.3.15#6346) - To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org For additional commands, e-mail: issues-h...@cordova.apache.org
[jira] [Commented] (CB-12654) Cordova release build blocks ajax requests
[ https://issues.apache.org/jira/browse/CB-12654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15970662#comment-15970662 ] Chandra Sekhar Walajapet Sureshbabu commented on CB-12654: -- OK i figured out that, the root cause of the issue is "SSL Exception" , the certificate is not trusted by Android N because of a bug in Chrome, it is now sorted out, thanks [~kerrishotts] https://productforums.google.com/forum/#!topic/chrome/jPsbfBk9JN8;context-place=forum/chrome > Cordova release build blocks ajax requests > -- > > Key: CB-12654 > URL: https://issues.apache.org/jira/browse/CB-12654 > Project: Apache Cordova > Issue Type: Bug > Components: Android > Environment: cordova-android@4.1.1 , Android Version 7.1.1, Nexus 5X >Reporter: Chandra Sekhar Walajapet Sureshbabu > > Android Cordova Debug Build works fine on Nexus 5X, 7.1.1 , However it fails > to make any ajax requests on Release(Signed) Build. > Tried communicating from native code using a plugin, the connection is > successful > The issue occurs only in Nexus 5X, 7.1.1 and doesn't happen on other devices. > Permissions: > > > Whitelist plugin in config.xml: > > value="org.apache.cordova.whitelist.WhitelistPlugin" /> > > > Even tested with logs in ChromeWebViewImpl.java > Returns true when asked for shouldAllow > CSP: > https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline'; > media-src *; connect-src https://mysubdomain.mydomain.com";> > Please note the CSP works for all Android, iOS devices except for Nexus 5X > 7.1.1, i even tried removing connect-src, but same result. > Did anyone come across similar issue ? -- This message was sent by Atlassian JIRA (v6.3.15#6346) - To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org For additional commands, e-mail: issues-h...@cordova.apache.org
[jira] [Commented] (CB-12654) Cordova release build blocks ajax requests
[ https://issues.apache.org/jira/browse/CB-12654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15970595#comment-15970595 ] Chandra Sekhar Walajapet Sureshbabu commented on CB-12654: -- i did get the log, there is nothing except "No Network Security Config specified, using platform default" > Cordova release build blocks ajax requests > -- > > Key: CB-12654 > URL: https://issues.apache.org/jira/browse/CB-12654 > Project: Apache Cordova > Issue Type: Bug > Components: Android > Environment: cordova-android@4.1.1 , Android Version 7.1.1, Nexus 5X >Reporter: Chandra Sekhar Walajapet Sureshbabu > > Android Cordova Debug Build works fine on Nexus 5X, 7.1.1 , However it fails > to make any ajax requests on Release(Signed) Build. > Tried communicating from native code using a plugin, the connection is > successful > The issue occurs only in Nexus 5X, 7.1.1 and doesn't happen on other devices. > Permissions: > > > Whitelist plugin in config.xml: > > value="org.apache.cordova.whitelist.WhitelistPlugin" /> > > > Even tested with logs in ChromeWebViewImpl.java > Returns true when asked for shouldAllow > CSP: > https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline'; > media-src *; connect-src https://mysubdomain.mydomain.com";> > Please note the CSP works for all Android, iOS devices except for Nexus 5X > 7.1.1, i even tried removing connect-src, but same result. > Did anyone come across similar issue ? -- This message was sent by Atlassian JIRA (v6.3.15#6346) - To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org For additional commands, e-mail: issues-h...@cordova.apache.org
[jira] [Commented] (CB-12654) Cordova release build blocks ajax requests
[ https://issues.apache.org/jira/browse/CB-12654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15970531#comment-15970531 ] Chandra Sekhar Walajapet Sureshbabu commented on CB-12654: -- [~kerrishotts] unfortunately i cant do logcat as of now as it is happening in a device which i dont have control over. CA is symantec ok another finding debug.keystore validity has expired (not sure how it works on other devices) i also tried to access another https url with same build(same debug.keystore) - it works but if i try the new https url - it gives me status code -1 , which is / means it didnt even try to connect to the server. any thoughts ? > Cordova release build blocks ajax requests > -- > > Key: CB-12654 > URL: https://issues.apache.org/jira/browse/CB-12654 > Project: Apache Cordova > Issue Type: Bug > Components: Android > Environment: cordova-android@4.1.1 , Android Version 7.1.1, Nexus 5X >Reporter: Chandra Sekhar Walajapet Sureshbabu > > Android Cordova Debug Build works fine on Nexus 5X, 7.1.1 , However it fails > to make any ajax requests on Release(Signed) Build. > Tried communicating from native code using a plugin, the connection is > successful > The issue occurs only in Nexus 5X, 7.1.1 and doesn't happen on other devices. > Permissions: > > > Whitelist plugin in config.xml: > > value="org.apache.cordova.whitelist.WhitelistPlugin" /> > > > Even tested with logs in ChromeWebViewImpl.java > Returns true when asked for shouldAllow > CSP: > https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline'; > media-src *; connect-src https://mysubdomain.mydomain.com";> > Please note the CSP works for all Android, iOS devices except for Nexus 5X > 7.1.1, i even tried removing connect-src, but same result. > Did anyone come across similar issue ? -- This message was sent by Atlassian JIRA (v6.3.15#6346) - To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org For additional commands, e-mail: issues-h...@cordova.apache.org
[jira] [Commented] (CB-12654) Cordova release build blocks ajax requests
[
https://issues.apache.org/jira/browse/CB-12654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15970038#comment-15970038
]
Kerri Shotts commented on CB-12654:
---
Yes, there are differences in how Cordova Android debug and release modes work
with regard to SSL certificates. Debug mode generally lets everything through,
while release mode verifies that the certificate is valid.
You should double check that your certificate authority is trusted by your
device. If it isn't, connections will fail, even if SSLLabs gives it a good
grade. Out of curiosity, who are you using for your CA?
As for why one works and one doesn't, right now the only thing I can think of
is a difference in the trust store.
You should also check {{adb logcat}} while your app is making requests;
certificate issues will be very visible there.
> Cordova release build blocks ajax requests
> --
>
> Key: CB-12654
> URL: https://issues.apache.org/jira/browse/CB-12654
> Project: Apache Cordova
> Issue Type: Bug
> Components: Android
> Environment: cordova-android@4.1.1 , Android Version 7.1.1, Nexus 5X
>Reporter: Chandra Sekhar Walajapet Sureshbabu
>
> Android Cordova Debug Build works fine on Nexus 5X, 7.1.1 , However it fails
> to make any ajax requests on Release(Signed) Build.
> Tried communicating from native code using a plugin, the connection is
> successful
> The issue occurs only in Nexus 5X, 7.1.1 and doesn't happen on other devices.
> Permissions:
>
>
> Whitelist plugin in config.xml:
>
> value="org.apache.cordova.whitelist.WhitelistPlugin" />
>
>
> Even tested with logs in ChromeWebViewImpl.java
> Returns true when asked for shouldAllow
> CSP:
> https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline';
> media-src *; connect-src https://mysubdomain.mydomain.com";>
> Please note the CSP works for all Android, iOS devices except for Nexus 5X
> 7.1.1, i even tried removing connect-src, but same result.
> Did anyone come across similar issue ?
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
-
To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org
For additional commands, e-mail: issues-h...@cordova.apache.org
[jira] [Commented] (CB-12654) Cordova release build blocks ajax requests
[ https://issues.apache.org/jira/browse/CB-12654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15969373#comment-15969373 ] Chandra Sekhar Walajapet Sureshbabu commented on CB-12654: -- [~kerrishotts] SSLLabss shows no signs of certificate issues (Rates it A) my question again is how come only nexus 5X 7.1.1 alone fails and Pixel 7.1.1 is working normally. Between just want to know if there is any association of debug.keystore with the SSL cert? > Cordova release build blocks ajax requests > -- > > Key: CB-12654 > URL: https://issues.apache.org/jira/browse/CB-12654 > Project: Apache Cordova > Issue Type: Bug > Components: Android > Environment: cordova-android@4.1.1 , Android Version 7.1.1, Nexus 5X >Reporter: Chandra Sekhar Walajapet Sureshbabu > > Android Cordova Debug Build works fine on Nexus 5X, 7.1.1 , However it fails > to make any ajax requests on Release(Signed) Build. > Tried communicating from native code using a plugin, the connection is > successful > The issue occurs only in Nexus 5X, 7.1.1 and doesn't happen on other devices. > Permissions: > > > Whitelist plugin in config.xml: > > value="org.apache.cordova.whitelist.WhitelistPlugin" /> > > > Even tested with logs in ChromeWebViewImpl.java > Returns true when asked for shouldAllow > CSP: > https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline'; > media-src *; connect-src https://mysubdomain.mydomain.com";> > Please note the CSP works for all Android, iOS devices except for Nexus 5X > 7.1.1, i even tried removing connect-src, but same result. > Did anyone come across similar issue ? -- This message was sent by Atlassian JIRA (v6.3.15#6346) - To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org For additional commands, e-mail: issues-h...@cordova.apache.org
[jira] [Commented] (CB-12654) Cordova release build blocks ajax requests
[ https://issues.apache.org/jira/browse/CB-12654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15969370#comment-15969370 ] Chandra Sekhar Walajapet Sureshbabu commented on CB-12654: -- [~kerrishotts] SSLLabss shows no signs of certificate issues (Rates it A) my question again is how come only nexus 5X 7.1.1 alone fails and Pixel 7.1.1 is working normally. Between just want to know if there is any association of debug.keystore with the SSL cert? > Cordova release build blocks ajax requests > -- > > Key: CB-12654 > URL: https://issues.apache.org/jira/browse/CB-12654 > Project: Apache Cordova > Issue Type: Bug > Components: Android > Environment: cordova-android@4.1.1 , Android Version 7.1.1, Nexus 5X >Reporter: Chandra Sekhar Walajapet Sureshbabu > > Android Cordova Debug Build works fine on Nexus 5X, 7.1.1 , However it fails > to make any ajax requests on Release(Signed) Build. > Tried communicating from native code using a plugin, the connection is > successful > The issue occurs only in Nexus 5X, 7.1.1 and doesn't happen on other devices. > Permissions: > > > Whitelist plugin in config.xml: > > value="org.apache.cordova.whitelist.WhitelistPlugin" /> > > > Even tested with logs in ChromeWebViewImpl.java > Returns true when asked for shouldAllow > CSP: > https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline'; > media-src *; connect-src https://mysubdomain.mydomain.com";> > Please note the CSP works for all Android, iOS devices except for Nexus 5X > 7.1.1, i even tried removing connect-src, but same result. > Did anyone come across similar issue ? -- This message was sent by Atlassian JIRA (v6.3.15#6346) - To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org For additional commands, e-mail: issues-h...@cordova.apache.org
[jira] [Commented] (CB-12654) Cordova release build blocks ajax requests
[
https://issues.apache.org/jira/browse/CB-12654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15969079#comment-15969079
]
Kerri Shotts commented on CB-12654:
---
Make absolutely certain that your SSL is properly configured on your backend.
You can use an online testing tool like https://www.ssllabs.com/ssltest/ to
verify your server's setup.
Also, check the output of {{adb logcat}} around the time of the failure and see
if there's anything in there regarding network issues. If there is, please post
here.
> Cordova release build blocks ajax requests
> --
>
> Key: CB-12654
> URL: https://issues.apache.org/jira/browse/CB-12654
> Project: Apache Cordova
> Issue Type: Bug
> Components: Android
> Environment: cordova-android@4.1.1 , Android Version 7.1.1, Nexus 5X
>Reporter: Chandra Sekhar Walajapet Sureshbabu
>
> Android Cordova Debug Build works fine on Nexus 5X, 7.1.1 , However it fails
> to make any ajax requests on Release(Signed) Build.
> Tried communicating from native code using a plugin, the connection is
> successful
> The issue occurs only in Nexus 5X, 7.1.1 and doesn't happen on other devices.
> Permissions:
>
>
> Whitelist plugin in config.xml:
>
> value="org.apache.cordova.whitelist.WhitelistPlugin" />
>
>
> Even tested with logs in ChromeWebViewImpl.java
> Returns true when asked for shouldAllow
> CSP:
> https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline';
> media-src *; connect-src https://mysubdomain.mydomain.com";>
> Please note the CSP works for all Android, iOS devices except for Nexus 5X
> 7.1.1, i even tried removing connect-src, but same result.
> Did anyone come across similar issue ?
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
-
To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org
For additional commands, e-mail: issues-h...@cordova.apache.org
[jira] [Commented] (CB-12654) Cordova release build blocks ajax requests
[ https://issues.apache.org/jira/browse/CB-12654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15968049#comment-15968049 ] jcesarmobile commented on CB-12654: --- You are using a very old version of cordova-android. Can you try with latest cordova-android? that's 6.2.1 > Cordova release build blocks ajax requests > -- > > Key: CB-12654 > URL: https://issues.apache.org/jira/browse/CB-12654 > Project: Apache Cordova > Issue Type: Bug > Components: Android > Environment: cordova-android@4.1.1 , Android Version 7.1.1, Nexus 5X >Reporter: Chandra Sekhar Walajapet Sureshbabu > > Android Cordova Debug Build works fine on Nexus 5X, 7.1.1 , However it fails > to make any ajax requests on Release(Signed) Build. > Tried communicating from native code using a plugin, the connection is > successful > The issue occurs only in Nexus 5X, 7.1.1 and doesn't happen on other devices. > Permissions: > > > Whitelist plugin in config.xml: > > value="org.apache.cordova.whitelist.WhitelistPlugin" /> > > > Even tested with logs in ChromeWebViewImpl.java > Returns true when asked for shouldAllow > CSP: > https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline'; > media-src *; connect-src https://mysubdomain.mydomain.com";> > Please note the CSP works for all Android, iOS devices except for Nexus 5X > 7.1.1, i even tried removing connect-src, but same result. > Did anyone come across similar issue ? -- This message was sent by Atlassian JIRA (v6.3.15#6346) - To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org For additional commands, e-mail: issues-h...@cordova.apache.org
