diff --git a/pkgs/ok_http/CHANGELOG.md b/pkgs/ok_http/CHANGELOG.md
index 93d5e13c28..f3d011414f 100644
--- a/pkgs/ok_http/CHANGELOG.md
+++ b/pkgs/ok_http/CHANGELOG.md
@@ -7,6 +7,7 @@
 - `OKHttpClient` supports client certificates.
 - Support `package:web_socket` 1.0.0.
 - Set `minSdk=24`.
+- Add a missing call to `TrustManagerFactory.init`.
 
 ## 0.1.0
 
diff --git a/pkgs/ok_http/lib/src/ok_http_client.dart b/pkgs/ok_http/lib/src/ok_http_client.dart
index 7d96671216..e9114b4893 100644
--- a/pkgs/ok_http/lib/src/ok_http_client.dart
+++ b/pkgs/ok_http/lib/src/ok_http_client.dart
@@ -260,9 +260,10 @@ class OkHttpClient extends BaseClient {
       if (!configuration.validateServerCertificates) {
         trustManagers[0] = _allAllTrustManager;
       } else {
-        final tms = bindings.TrustManagerFactory.getInstance(
-                bindings.TrustManagerFactory.getDefaultAlgorithm())!
-            .getTrustManagers()!;
+        final tmf = bindings.TrustManagerFactory.getInstance(
+            bindings.TrustManagerFactory.getDefaultAlgorithm())!
+          ..init(null);
+        final tms = tmf.getTrustManagers()!;
         if (tms.length != 1) {
           throw StateError('unexpected XXX');
         }