SSL negotiation issues since app deployment using MAS SDK 2.2, 2.3, 2.4 Android

Products

• CA Mobile API Gateway

Issue/Introduction

Since the rollout of the App using Mobile SDK 2.2, 2.3, 2.4. there is an increased crash rate on Android devices

The crash stack trace looks like :

fatal Exception: java.lang.IllegalArgumentException: protocol SSLv3 is not supported
       at com.android.org.conscrypt.NativeCrypto.checkEnabledProtocols(NativeCrypto.java:1161)

Environment

MAS SDK 2.2, 2.3, 2.4

Cause

There's a commit to the NativeCrypto file in the Android repo on April 10th, which removes support for SSLV3. 

https://android-review.googlesource.com/c/platform/external/conscrypt/+/2526160/50/common/src/main/java/org/conscrypt/NativeCrypto.java#b783

Resolution

We are aware of the issue and this will be resolved in the next version of the MAS SDK.

There is a hotfix available for versions 2.2, 2.3, and 2.4 which can be requested by raising a support case.