Graph Api doesn't work on Android 4.4.4 (kitkat)

[Kurnosov]

Checklist before submitting a bug report

• [X] I've updated to the latest released version of the SDK
• [X] I've searched for existing Github issues
• [X] I've looked for existing answers on Stack Overflow, the Facebook Developer Community Forum and the Facebook Developers Group
• [X] I've read the Code of Conduct
• [X] This issue is not security related and can safely be disclosed publicly on GitHub

Java version

1.8

Android version

API 19, KitKat

Android SDK version

16.0.0

Installation platform & version

Gradle

Package

Login

Goals

GraphRequest request = new GraphRequest(AccessToken.getCurrentAccessToken(), graphPath, parameters, HttpMethod.GET, cb);

Expected results

should work correctly as FB SDK 16.0.0 has minSdkVersion = 15 object Config { const val minSdk = 15 const val compileSdk = 31 const val targetSdk = 31 }

Actual results

failed as KitKat doesn't support TLS 1.2 with next error:

E/com.facebook.GraphResponse(25378): {HttpStatus: 403, errorCode: 8, subErrorCode: -1, errorType: GraphInsecureException, errorMessage: TLS versions older than v1.2 are not supported.}

Steps to reproduce

calling any GraphRequest i.e. "me", "profile"

Code samples & details

// INSERT YOUR CODE HERE

E/com.facebook.GraphResponse(25378): {HttpStatus: 403, errorCode: 8, subErrorCode: -1, errorType: GraphInsecureException, errorMessage: TLS versions older than v1.2 are not supported.}

[pavakalyankillari]

@Kurnosov did you get any resolution on this bug?

we are also facing a similar issue. In our application, we are trying to pull the adAccounts using the graph APIs & getting below GraphInsecureException:

com.facebook.ads.sdk.APIException$FailedRequestException: {"error":{"message":"The cipher AES128-GCM-SHA256 is not supported for TLSv1.2.","type":"GraphInsecureException","code":8,"fbtrace_id":"Avl7lDpYwvbUQ-wo8jPQKAm"}}

The fun fact is when we try this in our local machine, its giving us the results. The issue comes when we run the same piece of code on the dev/qa servers. Is it due to graph apis blocking requests from those servers or what could be the issue?

@facebook-github-bot