[Bug Report] CRL list over the network and auto-refresh

[MasterOfStar]

1. Loading keybox.xml from file reports a format error or the presence of unsupported features.
   (java.security.cert.CertificateParsingException: No attestation extensions found)

2. When fetching the CRL list over the network, if the network environment is restricted (e.g., mainland China network), the system will keep retrying until 80 seconds later (8 timeouts?) before falling back to the local cache list.
   Suggestion: reduce the number of retries, prioritize using the local cache, and refresh the UI only after a successful network update.

[VisionR1]

1. Loading keybox.xml from file reports a format error or the presence of unsupported features.
   (java.security.cert.CertificateParsingException: No attestation extensions found)
2. When fetching the CRL list over the network, if the network environment is restricted (e.g., mainland China network), the system will keep retrying until 80 seconds later (8 timeouts?) before falling back to the local cache list.
   Suggestion: reduce the number of retries, prioritize using the local cache, and refresh the UI only after a successful network update.

Thanks for details.

I'll see what I can do.

[VisionR1]

@MasterOfStar

Can you try this ? is about the CRL list over the network.
Rename the zip to apk.

KeyAttestation-v2.0.2-Vision-Test.zip

[MasterOfStar]

It is now working normally. Whether online or offline, it prioritizes using the cached list.
When online, after a manual refresh, it uses the online list (CRL up-to-date).
I think it should probably auto-refresh after successfully fetching the online list.

[VisionR1]

@MasterOfStar
Can you try this ? Now auto-refresh, when the app is open and enable or disable the internet

KeyAttestation-v2.0.2-Vision-Test.zip

[MasterOfStar]

auto-refresh now is work

[VisionR1]

@MasterOfStar

That's good.

So, with the latest app test, the CRL list over the network and auto-refresh is works ?

[MasterOfStar]

@MasterOfStar

That's good.

So, with the latest app test, the CRL list over the network and auto-refresh is works ?

yes it's all work

[VisionR1]

@MasterOfStar

The final version, which fixed the CRL list over the network and auto-refresh.

In fact the auto-refresh for the Revocation list not even blink when enable or disable the internet when you are inside the app, it is instant.

KeyAttestation-v2.0.2(248)-Vision-Test.zip

[MasterOfStar]

@MasterOfStar

The final version, which fixed the CRL list over the network and auto-refresh.

In fact the auto-refresh for the Revocation list not even blink when enable or disable the internet when you are inside the app, it is instant.

KeyAttestation-v2.0.2(248)-Vision-Test.zip

The "CRL list over the network" function of v248 seems to have crashed 😂

On the Chinese mainland network, it's not that there is no network connection; rather, there is a network connection but access to the Google CRL list is not possible.

When opening the app with VPN already started
The online list can be retrieved normally. Versions 248 and Release seem to work instantly; version 247 first uses the local cache and then refreshes instantly.

When opening the app without VPN started
Versions 248 and Release behave the same: after multiple timeouts, they fall back to the locally cached CRL list. Before the timeouts end, nothing is shown—only a loading spinner (at this point, turning off all network connections forces the app to use the local cache).

Version 247 falls back directly to the local cache without waiting for request timeouts before displaying content.

[VisionR1]

@MasterOfStar

Oh sorry for that.

Try this.

KeyAttestation-v2.0.2(248)-Vision-Test.zip

[MasterOfStar]

@MasterOfStar

Oh sorry for that.

Try this.

KeyAttestation-v2.0.2(248)-Vision-Test.zip

It works very well. When there is a network connection, it can switch instantly.

[VisionR1]

@MasterOfStar

Finally, good to know.

So, now can close this issue.

Now about the XML issue, if you want can open a new issue, so to i can be track proper.