Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

IllegalArgumentException: Not a Conscrypt trust manager: android.security.net.config.RootTrustManager

See original GitHub issue

since release 4.7.0 and also for 4.7.1 i get the following exception when using the OkHttpClient.

2020-05-19 13:15:39.061 13971-14060/fr.gaulupeau.apps.InThePoche.debug E/ArticleUpdateWorker: updateArticles() exception
    java.lang.IllegalArgumentException: Not a Conscrypt trust manager: android.security.net.config.RootTrustManager
        at org.conscrypt.Conscrypt.toConscrypt(Conscrypt.java:736)
        at org.conscrypt.Conscrypt.setHostnameVerifier(Conscrypt.java:769)
        at okhttp3.internal.platform.ConscryptPlatform.platformTrustManager(ConscryptPlatform.kt:53)
        at okhttp3.OkHttpClient.<init>(OkHttpClient.kt:237)
        at okhttp3.OkHttpClient$Builder.build(OkHttpClient.kt:1069)
        at fr.gaulupeau.apps.Poche.network.WallabagConnection.createClient(WallabagConnection.java:123)
        at fr.gaulupeau.apps.Poche.network.WallabagConnection.createWallabagService(WallabagConnection.java:107)
        at fr.gaulupeau.apps.Poche.network.WallabagConnection.getWallabagService(WallabagConnection.java:38)
        at fr.gaulupeau.apps.Poche.service.workers.BaseNetworkWorker.getWallabagService(BaseNetworkWorker.java:86)
        at fr.gaulupeau.apps.Poche.service.workers.ArticleUpdateWorker.updateArticles(ArticleUpdateWorker.java:76)
        at fr.gaulupeau.apps.Poche.service.workers.ArticleUpdateWorker.update(ArticleUpdateWorker.java:37)
        at fr.gaulupeau.apps.Poche.service.tasks.UpdateArticlesTask.run(UpdateArticlesTask.java:17)
        at fr.gaulupeau.apps.Poche.service.tasks.ActionRequestTask.run(ActionRequestTask.java:25)
        at fr.gaulupeau.apps.Poche.service.-$$Lambda$Eg7UQkyPgCNRHvigqxzb-ridugA.run(Unknown Source:2)
        at fr.gaulupeau.apps.Poche.service.TaskService.run(TaskService.java:158)
        at fr.gaulupeau.apps.Poche.service.TaskService.lambda$gjfracnqY8x0_-mrxsx0oqjQmgk(Unknown Source:0)
        at fr.gaulupeau.apps.Poche.service.-$$Lambda$TaskService$gjfracnqY8x0_-mrxsx0oqjQmgk.run(Unknown Source:2)
        at java.lang.Thread.run(Thread.java:919)

We create the client like this (simplified from here):

OkHttpClient.Builder b = new OkHttpClient.Builder()
                .readTimeout(45, TimeUnit.SECONDS);
b.build();

This issue does not occur with release 4.6.0 or 4.5.0.

Is this a bug? Or do you have an idea how i can fix this exception?

Issue Analytics

State:
Created 3 years ago
Comments:6 (1 by maintainers)

Top GitHub Comments

1reaction

swankjessecommented, May 20, 2020

Released in 4.7.2. https://square.github.io/okhttp/changelog/#version-472

1reaction

yschimkecommented, May 20, 2020

Just found the env details on the linked bug, thanks.

wallabag app version: master f37abc7
wallabag app installation source (e.g. Gplay, F-Droid, manual): manual
Android OS version: 10
Android ROM (e.g. stock, LineageOS, SlimRom,…): stock
Android hardware: Samsung S9
wallabag server version: 2.3.8
Do you have Two-Factor-Authentication enabled?: no

Top Results From Across the Web

core/java/android/security/net/config/RootTrustManager.java

// only for use in checking server trust not client trust. NetworkSecurityConfig config = mConfig.getConfigForHostname("");.

Certificate not trusted of SSL website in Android with custom ...

You have error at Apache server config, SSL Labs says server's certificate chain is incomplete. Server config must contain these lines:

Trust anchor for certification path not found. [37113879 ...

Push W/System.err: javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.

In Vuforia View, Experiences are not displayed when using a ...

In Vuforia View, Experiences are not displayed when using a CA SSL certificate and with HTTPS enabled in Vuforia Experience Service ...

Conscrypt - Android Open Source Project

The Conscrypt module accelerates security improvements and improves device security without relying on OTA updates. It uses Java code and a native library ......