Tuesday, 15 September 2015

ssl - android - https with server having self-signed certificate -



ssl - android - https with server having self-signed certificate -

i next android's tutorial of https untrusted certificate. see here.

they have provided sample code of scenario when ca untrusted. have scenario of self-signed certificate on server. can't figure out replace next in sample code :

inputstream cainput = new bufferedinputstream(new fileinputstream("load-der.crt")); // can't figure out crt ? // don't have access path straight url

for self signed certificate :

you can create own trustmanager, time trusting server certificate directly.

do have separately server's self-signed certificate ? api not me automatically in way ?

do have separately server's self-signed certificate ?

i don't know "separately" means in context, need keystore containing self-signed certificate purposes of validation.

will api not me automatically in way ?

how it? point behind validating certificate confirm indeed correct, , user not victim of man-in-the-middle attack. self-signed certificate, need relevant details create validation.

fwiw, if find stuff bit complex set up, have a trustmanagerbuilder in my cwac-security library can help bit.

android ssl

No comments:

Post a Comment