2

For one of my App, I got the security alert in android developer console. I do not use http request. I am not sure about the AD network like Admob and Facebook which uses this.

Any specific code / gradle setup is needed for this ?

How to solve this issue and come out of security alert ?

enter image description here

iappmaker
  • 2,945
  • 9
  • 35
  • 76
  • What is the link to the "Google Help Center article"? –  Feb 18 '16 at 04:04
  • https://support.google.com/faqs/answer/6346016 – iappmaker Feb 18 '16 at 04:05
  • "To properly handle SSL certificate validation, change your code in the checkServerTrusted method of your custom X509TrustManager interface to raise either CertificateException or IllegalArgumentException whenever the certificate presented by the server does not meet your expectations." Tried that? –  Feb 18 '16 at 04:07
  • It could be because of the ads –  Feb 18 '16 at 04:08
  • But I use the Facebook and Admob.. Only admob mediates to facebook. Does it mean i have to remove these ? – iappmaker Feb 18 '16 at 04:10
  • Will there be a logcat for this issue. ? How it will be ? if so I can remove the libraries and test to find which one is causing this issue – iappmaker Feb 18 '16 at 04:15
  • decompile your apk and search there where that class is referred – njzk2 Feb 18 '16 at 04:16
  • Which class I need to look for ? – iappmaker Feb 18 '16 at 04:18
  • duplicate of http://stackoverflow.com/q/35465916/624109 – Muzikant Feb 23 '16 at 20:51

1 Answers1

1

X509TrustManager is an interface which is used to trust all the certificates. If this interface being used anywhere in your app (though you're not using it directly there might be chances that third-party lib using it).So make sure you don't use it which is vulnerable for man-in-the-middle attack.

How to solve this issue and come out of security alert?

Search for X509TrustManager and remove it's corresponding usage and imports.

and ugrade the version code of your app upload it to playstore.

Refer : X509TrustManager and Google help center

Gowtham Kumar
  • 534
  • 8
  • 22