java.security.KeyStoreException: BKS not found

[mayananand369]

Checklist

• The issue can be reproduced in the auth0_flutter sample app (or N/A).
• I have looked into the Readme, Examples, and FAQ and have not found a suitable solution or answer.
• I have looked into the API documentation and have not found a suitable solution or answer.
• I have searched the issues and have not found a suitable solution or answer.
• I have searched the Auth0 Community forums and have not found a suitable solution or answer.
• I agree to the terms within the Auth0 Code of Conduct.

Description

We are experiencing this 'BKS not found exception' which seems to be coming from the AuthO . It is causing the app to crash. After the crash, we are not able to run the app without uninstalling. After uninstalling the app , we are able to run the app again for around 2-3 times. After 2-3 times, it crashes again and the cycle repeats.
Following is the stack trace:

E/AndroidRuntime(21793): FATAL EXCEPTION: main
E/AndroidRuntime(21793): Process: mobile.trade.sky.dev, PID: 21793
E/AndroidRuntime(21793): java.lang.AssertionError: No System TLS: java.security.KeyManagementException: java.security.KeyStoreException: BKS not found
E/AndroidRuntime(21793): at okhttp3.internal.platform.Platform.newSslSocketFactory(Platform.kt:171)
E/AndroidRuntime(21793): at okhttp3.OkHttpClient.<init>(OkHttpClient.kt:238)
E/AndroidRuntime(21793): at okhttp3.OkHttpClient$Builder.build(OkHttpClient.kt:1069)
E/AndroidRuntime(21793): at com.auth0.android.request.DefaultClient.<init>(DefaultClient.kt:109)
E/AndroidRuntime(21793): at com.auth0.android.request.DefaultClient.<init>(DefaultClient.kt:44)
E/AndroidRuntime(21793): at com.auth0.android.request.DefaultClient.<init>(DefaultClient.kt:39)
E/AndroidRuntime(21793): at com.auth0.android.Auth0.<init>(Auth0.kt:43)
E/AndroidRuntime(21793): at com.auth0.android.Auth0.<init>(Auth0.kt:26)
E/AndroidRuntime(21793): at com.auth0.auth0_flutter.request_handlers.MethodCallRequest$Companion.fromCall(MethodCallRequest.kt:34)
E/AndroidRuntime(21793): at com.auth0.auth0_flutter.CredentialsManagerMethodCallHandler.onMethodCall(CredentialsManagerMethodCallHandler.kt:29)
E/AndroidRuntime(21793): at io.flutter.plugin.common.MethodChannel$IncomingMethodCallHandler.onMessage(MethodChannel.java:267)
E/AndroidRuntime(21793): at io.flutter.embedding.engine.dart.DartMessenger.invokeHandler(DartMessenger.java:292)
E/AndroidRuntime(21793): at io.flutter.embedding.engine.dart.DartMessenger.lambda$dispatchMessageToQueue$0$io-flutter-embedding-engine-dart-DartMessenger(DartMessenger.java:319)
E/AndroidRuntime(21793): at io.flutter.embedding.engine.dart.DartMessenger$ExternalSyntheticLambda0.run(D8$SyntheticClass:0)
E/AndroidRuntime(21793): at android.os.Handler.handleCallback(Handler.java:959)
E/AndroidRuntime(21793): at android.os.Handler.dispatchMessage(Handler.java:100)
E/AndroidRuntime(21793): at android.os.Looper.loopOnce(Looper.java:249)
E/AndroidRuntime(21793): at android.os.Looper.loop(Looper.java:337)
E/AndroidRuntime(21793): at android.app.ActivityThread.main(ActivityThread.java:9608)
E/AndroidRuntime(21793): at java.lang.reflect.Method.invoke(Native Method)
E/AndroidRuntime(21793): at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:615)
E/AndroidRuntime(21793): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:936)
E/AndroidRuntime(21793): Caused by: java.security.KeyManagementException: java.security.KeyStoreException: BKS not found
E/AndroidRuntime(21793): at com.android.org.conscrypt.SSLParametersImpl.createDefaultX509KeyManager(SSLParametersImpl.java:631)
E/AndroidRuntime(21793): at com.android.org.conscrypt.SSLParametersImpl.getDefaultX509KeyManager(SSLParametersImpl.java:612)
E/AndroidRuntime(21793): at com.android.org.conscrypt.SSLParametersImpl.<init>(SSLParametersImpl.java:136)
E/AndroidRuntime(21793): at com.android.org.conscrypt.OpenSSLContextImpl.engineInit(OpenSSLContextImpl.java:123)
E/AndroidRuntime(21793): at javax.net.ssl.SSLContext.init(SSLContext.java:326)
E/AndroidRuntime(21793): at okhttp3.internal.platform.Platform.newSslSocketFactory(Platform.kt:168)
E/AndroidRuntime(21793): ... 21 more
E/AndroidRuntime(21793): Caused by: java.security.KeyStoreException: BKS not found
E/AndroidRuntime(21793): at java.security.KeyStore.getInstance(KeyStore.java:904)
E/AndroidRuntime(21793): at com.android.org.conscrypt.KeyManagerFactoryImpl.engineInit(KeyManagerFactoryImpl.java:66)
E/AndroidRuntime(21793): at javax.net.ssl.KeyManagerFactory.init(KeyManagerFactory.java:272)
E/AndroidRuntime(21793): at com.android.org.conscrypt.SSLParametersImpl.createDefaultX509KeyManager(SSLParametersImpl.java:620)
E/AndroidRuntime(21793): ... 26 more
E/AndroidRuntime(21793): Caused by: java.security.NoSuchAlgorithmException: BKS KeyStore not available
E/AndroidRuntime(21793): at sun.security.jca.GetInstance.getInstance(GetInstance.java:159)
E/AndroidRuntime(21793): at java.security.Security.getImpl(Security.java:628)
E/AndroidRuntime(21793): at java.security.KeyStore.getInstance(KeyStore.java:901)
E/AndroidRuntime(21793): ... 29 more
W/e.trade.sky.dev(21793): type=1400 audit(0.0:173639): avc: denied { search } for name="miuilog" dev="dm-68" ino=547 scontext=u:r:untrusted_app:s0:c225,c257,c512,c768 tcontext=u:object_r:data_log_file:s0 tclass=dir permissive=0 app=mobile.trade.sky.dev
W/e.trade.sky.dev(21793): type=1400 audit(0.0:173640): avc: denied { search } for name="miuilog" dev="dm-68" ino=547 scontext=u:r:untrusted_app:s0:c225,c257,c512,c768 tcontext=u:object_r:data_log_file:s0 tclass=dir permissive=0 app=mobile.trade.sky.dev
W/ScoutUtils(21793): Failed to mkdir /data/miuilog/stability/hprof/
W/e.trade.sky.dev(21793): type=1400 audit(0.0:173641): avc: denied { search } for name="miuilog" dev="dm-68" ino=547 scontext=u:r:untrusted_app:s0:c225,c257,c512,c768 tcontext=u:object_r:data_log_file:s0 tclass=dir permissive=0 app=mobile.trade.sky.dev
W/e.trade.sky.dev(21793): type=1400 audit(0.0:173642): avc: denied { search } for name="miuilog" dev="dm-68" ino=547 scontext=u:r:untrusted_app:s0:c225,c257,c512,c768 tcontext=u:object_r:data_log_file:s0 tclass=dir permissive=0 app=mobile.trade.sky.dev
W/e.trade.sky.dev(21793): type=1400 audit(0.0:173643): avc: denied { search } for name="miuilog" dev="dm-68" ino=547 scontext=u:r:untrusted_app:s0:c225,c257,c512,c768 tcontext=u:object_r:data_log_file:s0 tclass=dir permissive=0 app=mobile.trade.sky.dev
W/e.trade.sky.dev(21793): type=1400 audit(0.0:173644): avc: denied { getattr } for path="/data/miuilog" dev="dm-68" ino=547 scontext=u:r:untrusted_app:s0:c225,c257,c512,c768 tcontext=u:object_r:data_log_file:s0 tclass=dir permissive=0 app=mobile.trade.sky.dev
W/e.trade.sky.dev(21793): type=1400 audit(0.0:173645): avc: denied { search } for name="miuilog" dev="dm-68" ino=547 scontext=u:r:untrusted_app:s0:c225,c257,c512,c768 tcontext=u:object_r:data_log_file:s0 tclass=dir permissive=0 app=mobile.trade.sky.dev
W/e.trade.sky.dev(21793): type=1400 audit(0.0:173646): avc: denied { search } for name="miuilog" dev="dm-68" ino=547 scontext=u:r:untrusted_app:s0:c225,c257,c512,c768 tcontext=u:object_r:data_log_file:s0 tclass=dir permissive=0 app=mobile.trade.sky.dev
I/Process (21793): Process is going to kill itself!
I/Process (21793): java.lang.Exception
I/Process (21793): at android.os.Process.killProcess(Process.java:1495)
I/Process (21793): at com.android.internal.os.RuntimeInit$KillApplicationHandler.uncaughtException(RuntimeInit.java:215)
I/Process (21793): at com.google.firebase.crashlytics.internal.common.CrashlyticsUncaughtExceptionHandler.uncaughtException(CrashlyticsUncaughtExceptionHandler.java:63)
I/Process (21793): at java.lang.ThreadGroup.uncaughtException(ThreadGroup.java:1071)
I/Process (21793): at java.lang.ThreadGroup.uncaughtException(ThreadGroup.java:1066)
I/Process (21793): at io.flutter.embedding.engine.dart.DartMessenger.handleError(DartMessenger.java:415)
I/Process (21793): at io.flutter.embedding.engine.dart.DartMessenger.invokeHandler(DartMessenger.java:297)
I/Process (21793): at io.flutter.embedding.engine.dart.DartMessenger.lambda$dispatchMessageToQueue$0$io-flutter-embedding-engine-dart-DartMessenger(DartMessenger.java:319)
I/Process (21793): at io.flutter.embedding.engine.dart.DartMessenger$ExternalSyntheticLambda0.run(D8$SyntheticClass:0)
I/Process (21793): at android.os.Handler.handleCallback(Handler.java:959)
I/Process (21793): at android.os.Handler.dispatchMessage(Handler.java:100)
I/Process (21793): at android.os.Looper.loopOnce(Looper.java:249)
I/Process (21793): at android.os.Looper.loop(Looper.java:337)
I/Process (21793): at android.app.ActivityThread.main(ActivityThread.java:9608)
I/Process (21793): at java.lang.reflect.Method.invoke(Native Method)
I/Process (21793): at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:615)
I/Process (21793): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:936)
I/Process (21793): Sending signal. PID: 21793 SIG: 9
I/libc (21793): kill: send 9 to pid 21793
Lost connection to device.
The Dart compiler exited unexpectedly.

Reproduction

Running the app 2-3 times causes this crash to happen.

Additional context

No response

auth0_flutter version

1.14.0

Flutter version

3.35.7

Platform

Android

Platform version(s)

No response

[pmathew92]

Hi @mayananand369 ,
Thanks for sharing this issue. Could you share few more details like during which API are you getting this issue ? Is this occuring across all Android platforms ? If not, which platform in particular ? A code snippet of your implementation ?
Thanks

[mayananand369]

Hi @pmathew92,

Thanks for looking into this. Here are the details:

Which API: This is not occurring during a specific API call. The crash happens during the CredentialsManager/Auth0 client initialization itself (as shown in the stack trace at CredentialsManagerMethodCallHandler.onMethodCall). The app crashes before any authentication API is invoked.

Looking at the stack trace, it fails when the Auth0 package tries to initialize:

Code

at com.auth0.android.Auth0.<init>(Auth0.kt:43)
at com.auth0.auth0_flutter.request_handlers.MethodCallRequest$Companion.fromCall(MethodCallRequest.kt:34)
at com.auth0.auth0_flutter.CredentialsManagerMethodCallHandler.onMethodCall(CredentialsManagerMethodCallHandler.kt:29)

Android Platforms: This is affecting all Android platforms we've tested:

Physical devices:
Poco M6 Pro 6G (Android 15)
Realme 7 Pro (Android 12)
Emulator:
Pixel 8 Pro (Android 14)
Multiple teammates' devices (various Android versions)
Code Implementation: We're using Auth0 in our authentication repository where we call various Auth0 methods:

Dart

// Auth0 instance is injected into the repository
final Auth0 _auth0;

  @override
  Future<Either<Auth0AuthenticationFailure, Auth0UserEntity>>
      authenticateUserWithAuth0() =>
          handleData<Auth0AuthenticationFailure, Auth0UserEntity>(
            dataSourceOperation: () async {
              final credentials = await _auth0.webAuthentication().login();

              return Auth0UserEntity(
                idToken: credentials.idToken,
                email: credentials.user.email,
                emailVerified: credentials.user.isEmailVerified,
              );
            },
            onSuccess: (auth0UserEntity) => auth0UserEntity,
            onFailure: (e) => switch (e is WebAuthenticationException) {
              true
                  when (e as WebAuthenticationException)
                      .isUserCancelledException =>
                Auth0AuthenticationCanceledFailure(),
              _ => Auth0AuthenticationUnknownFailure(),
            },
          );

  @override
  Future<Either<Auth0RenewCredentialsFailure, Auth0UserEntity>>
      renewAuth0UserCredentials() =>
          handleData<Auth0RenewCredentialsFailure, Auth0UserEntity>(
            dataSourceOperation: () async {
              final credentials =
                  await _auth0.credentialsManager.renewCredentials();

              return Auth0UserEntity(
                idToken: credentials.idToken,
                email: credentials.user.email,
                emailVerified: credentials.user.isEmailVerified,
              );
            },
            onSuccess: (auth0UserEntity) => auth0UserEntity,
            onFailure: (_) => Auth0RenewCredentialsUnknownFailure(),
          );

  @override
  Future<Either<Auth0ValidCredentialsFailure, Auth0CredentialEntity>>
      checkAuth0UserHasValidCredentials() =>
          handleData<Auth0ValidCredentialsFailure, Auth0CredentialEntity>(
            dataSourceOperation: () async {
              final hasValidCredentials =
                  await _auth0.credentialsManager.hasValidCredentials();

              return Auth0CredentialEntity(
                isCredentialsValid: hasValidCredentials,
              );
            },
            onSuccess: (auth0CredentialEntity) => auth0CredentialEntity,
            onFailure: (_) => Auth0ValidCredentialsFailure(),
          );

  @override
  Future<Either<Auth0UserFailure, Auth0UserEntity>> get auth0User =>
      handleData<Auth0UserFailure, Auth0UserEntity>(
        dataSourceOperation: () async {
          final credentials = await _auth0.credentialsManager.credentials();

          return Auth0UserEntity(
            idToken: credentials.idToken,
            email: credentials.user.email,
            emailVerified: credentials.user.isEmailVerified,
          );
        },
        onSuccess: (auth0UserEntity) => auth0UserEntity,
        onFailure: (_) => Auth0UserUnknownFailure(),
      );

The crash occurs when any of the CredentialsManager methods are called (renewCredentials(), hasValidCredentials(), or credentials()).

Root Cause: The error is java.security.NoSuchAlgorithmException: BKS KeyStore not available occurring when OkHttp tries to initialize SSL/TLS during the Auth0 client instantiation. This appears to be an issue with the BKS (BouncyCastle KeyStore) provider not being available in the security providers.

The intermittent nature (works 2-3 times after fresh install, then crashes) suggests there might be some state corruption or ProGuard/R8 optimization issue removing necessary security provider classes.

I also have a screen recording of the app crash if it helps:

Screen.Recording.2025-11-07.at.9.29.30.PM.mov

[pmathew92]

HI @mayananand369 ,
Thanks for sharing the code snippet and the stack trace. This is the first time we are encountering this issue on flutter hence would need to investigate this is depth. Please allow us some time. Meanwhile does this crash occur on the sample app in the auth0-flutter repo ? If possible, could you try the sample app and check ?

[mayananand369]

Hey @pmathew92 I tried running the sample app. The issue is not occurring in the sample app. Is there any updates on this issue?

[pmathew92]

Hi @mayananand369 ,
I tried reproducing this on my end too but wasn't successful. Would it be possible for you to share a minimum reproducible for us to debug this further ?

[mayananand369]

@pmathew92 I don't have exact reproducible steps, but I can point to where the issue originates:

Stack trace shows:

Code

java.lang.AssertionError: No System TLS: java.security.KeyManagementException: java.security.KeyStoreException: BKS not found
at okhttp3.internal.platform. Platform.newSslSocketFactory(Platform.kt:171)
at okhttp3.OkHttpClient.<init>(OkHttpClient. kt:238)
at com. auth0.android.request. DefaultClient.<init>(DefaultClient. kt:109)
at com. auth0.android.Auth0. <init>(Auth0.kt:43)

The crash occurs in OkHttp's Platform.kt (line 171):

Kotlin

open fun newSslSocketFactory(trustManager: X509TrustManager): SSLSocketFactory {
    try {
      return newSSLContext().apply {
        init(null, arrayOf<TrustManager>(trustManager), null)
      }.socketFactory
    } catch (e: GeneralSecurityException) {
      throw AssertionError("No System TLS: $e", e) // Crashes here
    }
}

The Android security provider (BKS/BouncyCastle) is not available when Auth0 initializes OkHttpClient. This is intermittent and device-dependent (I'm on Xiaomi/MIUI).

Pattern observed:

Works 2-3 times after fresh install
Then crashes consistently
Only works again after uninstalling
No workarounds have worked for me yet. Let me know if you need any other specific logs or information.

[pmathew92]

Hi @mayananand369 , Thanks for the exact point of error. Let me look into this class . one thing ,are you observing this only on chinese OEMs or on any other OEM like samsung or pixel

[mayananand369]

@pmathew92 We have observed this on Pixel 7 pro simulator as well.

[pmathew92]

Hi @mayananand369 ,
Apologies on the silence on this. We have released a new version of the auth0-flutter SDK
https://github.com/auth0/auth0-flutter/releases/tag/af-v2.0.0-beta.1
Could you please check this version and see if the issue is occuring in this or not ?