SSLException: encrypted packet oversized

I ran into this error using the Ion library in the last few months, seems like it was introduced by google/conscrypt@61a5351. For the last year we have used these URLs and it worked fine. I filed an issue in ion too.

When trying to fetch an image from an HTTPS url from Amazon S3 like https://s3-ap-southeast-1.amazonaws.com/radius-files/users/58883f0e88b1b1000a2ab5c5.jpg?1485324119111 I get this error:

javax.net.ssl.SSLException: encrypted packet oversized
        at com.google.android.gms.org.conscrypt.OpenSSLEngineImpl.unwrap(:com.google.android.gms:496)
        at com.google.android.gms.org.conscrypt.OpenSSLEngineImpl.unwrap(:com.google.android.gms:458)
        at com.google.android.gms.org.conscrypt.OpenSSLEngineImpl.unwrap(:com.google.android.gms:423)
        at com.koushikdutta.async.AsyncSSLSocketWrapper$5.onDataAvailable(AsyncSSLSocketWrapper.java:194)
        at com.koushikdutta.async.Util.emitAllData(Util.java:23)
        at com.koushikdutta.async.AsyncNetworkSocket.onReadable(AsyncNetworkSocket.java:152)
        at com.koushikdutta.async.AsyncServer.runLoop(AsyncServer.java:789)
        at com.koushikdutta.async.AsyncServer.run(AsyncServer.java:627)
        at com.koushikdutta.async.AsyncServer.access$700(AsyncServer.java:41)
        at com.koushikdutta.async.AsyncServer$13.run(AsyncServer.java:569)

Also if I make a request using a simple HttpUrlConnection it works fine. Fetching it using the browser works fine too. Any idea why it is running into that error?

[deanrobertcook]

@amosyuen Has this issue been fixed for you?

We’re using the Android Async library (upon which Ion is based) and many of our users are experiencing this crash on some of the newest versions of Google Play Services (I’ve only seen it on the beta versions myself).

Pardon my ignorance, but after a fair amount of searching it’s not obvious to me if this is fixed and soon to be released as an update to the beta version or if this will remain as is and we’ll need to bother the Android Async guys for an update (or do something ourselves…). If someone could please enlighten me and perhaps give a rough time estimation, that would be much appreciated!

[amosyuen]

@deanrobertcook unfortunately last I checked a couple of months ago, it seems the problem wasn’t fixed. I’m not entirely sure if it’s an Ion not using the new version or a continued conscrypt problem, but in the end our team decided to use a different library than Ion.