SSL failure. Could not connect to own prosody server (0.12.3-1) unless 3DES cipher was enabled

[terenc3]

I got a crytic ssl error when connection to my server and prosody reported "TLS handshake error: no shared cipher". I've enabled 3DES cipther in prosody and then it worked but i wanted to leave a note here in case someone has the same issue.

ssl {
ciphers = "HIGH+kEDH:HIGH+kEECDH:HIGH:3DES!PSK:!SRP:!aNULL"
}

[ge0rg]

Which Android version are you running on? If it's 4.x or older, then it simply doesn't support modern and secure encryption methods...

[terenc3]

Yes its an ancient LG-H220 with stock Android 4.4.2

[ge0rg]

Is this the official yaxim build or the one from F-Droid? The latter is missing the call to enable TLS 1.2 and thus is even more restricted.

If you are interested in the boring background, https://op-co.de/blog/posts/galaxy_nx/#index3h3

The tables of supported protocol versions and ciphers in https://developer.android.com/reference/javax/net/ssl/SSLSocket