The Movie Database Support
Support → API Support
SSLException on older Android devices.
posted by oksterSTAFFMOD on February 8, 2014 at 6:46 PM
Heeey, so heres the problem: Older devices are throwing an SSL Exception which says: "Not trusted server certificate". Most get requests are no problems. Firstly i recognized this trying to open the authenticate url in a browser (already at the first GET request): ->https://www.themoviedb.org/authenticate/REQUEST_TOKEN An other thing im currently experiencing it is while setting a rating. So probably by any POST request?
Currently i am ignoring those errors but that's not really the sense of SSL ;p
My knowledge with authenticates is limited so i can not make any more assumptions. So my question now: Could that be an error with your authenticates?
Thanks for any advice :)
Reply by Travis Bell
on February 8, 2014 at 7:32 PM
I believe this has to do with the different TLS protocols. There's some tech talk about Android/Java here.
Basically, I believe it comes down to what versions of TLS our server supports and then what the clients support. All modern clients should support TLS 1.1 and above, and it sounds like older Android devices don't (stuck at 1.0). I think... there's a lot of different version stuff going on here with SSL. The industry is trying to move to 1.2 as it has the previously reported vulnerabilities fixed.