title: Android <= 4.4.2 and TLS 1.2
body: <p>I did an app for a company and it supported API level 13+ (3.0+). It collects data from their CMS via XML and displays it on the app. This is done over HTTPS which worked fine until they upgraded their server to TLS 1.2. Now android versions below API level 20 won't fetch the XML because of <code>SSLPeerUnverifiedException</code> and a whole lot of phones can't see this app anymore.</p>
  
  <p>Is there a way to get past <code>SSLPeerUnverified</code> while leaving TLS 1.2 enabled?</p>
  
  <p>Note: The current SSL certificates are as follows:</p>
  
  <pre><code>AddTrust External CA Root
  --&gt; COMODO High-Assurance Secure Server CA
    --&gt; *.appdomain.com
  </code></pre>
  
  <p>Most helpful SOF article so far:
  <a href="https://stackoverflow.com/questions/5950178/implementing-tls-1-2-on-android-2-3-3">Implementing TLS 1.2 on Android 2.3.3</a></p>