Not loading images from HTTPS URLs on lower(!) Android versions but works fine on most recent versions

[theAkito]

Glide Version: 4.11.0

Integration libraries: No.

Device/Android Version: Galaxy Nexus with API 23 Emulator through Android Studio. Works fine on same emulator with currently (as of 2021) most recent Android versions.

Issue details / Repro steps / Use case background: https://github.com/bumptech/glide/issues/1726 https://github.com/bumptech/glide/issues/4563

Glide load line / GlideModule (if any) / list Adapter code (if any):

val glideListener = object : RequestListener<Drawable> {
            override fun onLoadFailed(e: GlideException?, model: Any?, target: com.bumptech.glide.request.target.Target<Drawable>?, isFirstResource: Boolean): Boolean {
              return true
            }

            override fun onResourceReady(resource: Drawable?, model: Any?, target: com.bumptech.glide.request.target.Target<Drawable>?, dataSource: DataSource?, isFirstResource: Boolean): Boolean {
              return true
            }
          }
Glide
              .with(binding.imgLogo.context)
              .load(iconUrlFull)
              .listener(glideListener)
              .diskCacheStrategy(DiskCacheStrategy.RESOURCE)
              .skipMemoryCache(true)
              .apply(RequestOptions.circleCropTransform())
              .into(binding.imgLogo)

Stack trace / LogCat: https://github.com/bumptech/glide/issues/4563

---

I am trying to fetch website icons through URLs that are proven to work. When running Code A and fetching the icons through Glide on most recent Android API versions, all works as expected. However, if running the same exact Code A and doing precisely the same thing on lower Android API versions (for example API 23), then Glide fails with a trust anchor exception.

I am disappointed to see that it is recommended to use unsafe workarounds by making OkHttp disable certificate validation, etc., especially when forcing it upon 3rd party software maintainers, when this is undeniably a bug with Glide. The same implementation works in newer Android versions, but not older ones. So, instead of recommending voodoo or just making it worse, Glide should have this issue fixed, internally, in the best way possible.

P.S.: It's not a bug with Android, because I can fetch the same images on Android API 23 through Apache HTTP Client. So, clearly, this is fixable, without unsafe voodoo workarounds, that make the situation worse, instead of fixing it.

[stale[bot]]

This issue has been automatically marked as stale because it has not had activity in the last seven days. It will be closed if no further activity occurs within the next seven days. Thank you for your contributions.

[theAkito]

Still relevant.

[RStavnager]

I have the same issue - seen this issue on a Nexus and older Samsung tablet. On both devices, Glide works fine outside recycler view.

[BjornLarsen1]

Yup still relevant

[KarlHolch]

I have the exact issue on my Samsung Tablet as well.

[au636574]

This is also an issue for me.

[RStavnager]

This is still an issue, any updates?