Comments for Antoine Hauck's blog http://blog.antoine.li blog.antoine.li Mon, 06 Feb 2012 13:16:26 +0000 hourly 1 http://wordpress.org/?v=3.3.1 Comment on Android: Trusting SSL certificates by Pavel http://blog.antoine.li/2010/10/22/android-trusting-ssl-certificates/#comment-808 Pavel Mon, 06 Feb 2012 13:16:26 +0000 http://blog.antoine.li/?p=288#comment-808 I really need it. I really need it.

]]> Comment on Android: Trusting SSL certificates by Pavel http://blog.antoine.li/2010/10/22/android-trusting-ssl-certificates/#comment-804 Pavel Mon, 06 Feb 2012 12:16:15 +0000 http://blog.antoine.li/?p=288#comment-804 Please make me keystore for api.mymobigift.com Please make me keystore for api.mymobigift.com

]]> Comment on Android: Trusting SSL certificates by Maragues http://blog.antoine.li/2010/10/22/android-trusting-ssl-certificates/#comment-551 Maragues Tue, 10 Jan 2012 09:39:07 +0000 http://blog.antoine.li/?p=288#comment-551 Thank you so much, you helped me not only to make my app work, but to understand all this SSL mess. Thank you so much, you helped me not only to make my app work, but to understand all this SSL mess.

]]> Comment on Meine Asia-Pacific Reise beginnt mit einem grossen Vogel by Philippe Schnyder http://blog.antoine.li/2012/01/02/asia-pacific-flight-to-singapore/#comment-473 Philippe Schnyder Mon, 02 Jan 2012 19:08:10 +0000 http://blog.enterpriselab.ch/tahauck/?p=521#comment-473 Hallo Antoine Schön von dir zu hören. Der RSS-Feed funktioniert auf jeden Fall! Freue mich schon auf mehr... Hallo Antoine
Schön von dir zu hören. Der RSS-Feed funktioniert auf jeden Fall!
Freue mich schon auf mehr…

]]> Comment on Android: Trusting SSL certificates by malarprathap http://blog.antoine.li/2010/10/22/android-trusting-ssl-certificates/#comment-125 malarprathap Fri, 09 Dec 2011 15:02:29 +0000 http://blog.antoine.li/?p=288#comment-125 Hi, I have tried above code but i got the following exception. 12-09 14:53:22.657: WARN/System.err(4667): javax.net.ssl.SSLException: Not trusted server certificate 12-09 14:53:22.657: WARN/System.err(4667): at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:371) 12-09 14:53:22.657: WARN/System.err(4667): at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:92) 12-09 14:53:22.657: WARN/System.err(4667): at org.apache.http.conn.ssl.SSLSocketFactory.createSocket(SSLSocketFactory.java:381) 12-09 14:53:22.667: WARN/System.err(4667): at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:164) 12-09 14:53:22.667: WARN/System.err(4667): at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:164) 12-09 14:53:22.667: WARN/System.err(4667): at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:119) 12-09 14:53:22.667: WARN/System.err(4667): at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:348) 12-09 14:53:22.667: WARN/System.err(4667): at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:555) 12-09 14:53:22.667: WARN/System.err(4667): at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:487) 12-09 14:53:22.667: WARN/System.err(4667): at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:465) 12-09 14:53:22.667: WARN/System.err(4667): at com.dev.env.RestJsonClient.connect(RestJsonClient.java:102) 12-09 14:53:22.667: WARN/System.err(4667): at com.dev.env.HttpTestProjectActivity$1.onClick(HttpTestProjectActivity.java:32) 12-09 14:53:22.667: WARN/System.err(4667): at android.view.View.performClick(View.java:2408) 12-09 14:53:22.677: WARN/System.err(4667): at android.view.View$PerformClick.run(View.java:8816) 12-09 14:53:22.677: WARN/System.err(4667): at android.os.Handler.handleCallback(Handler.java:587) 12-09 14:53:22.677: WARN/System.err(4667): at android.os.Handler.dispatchMessage(Handler.java:92) 12-09 14:53:22.677: WARN/System.err(4667): at android.os.Looper.loop(Looper.java:123) 12-09 14:53:22.677: WARN/System.err(4667): at android.app.ActivityThread.main(ActivityThread.java:4627) 12-09 14:53:22.677: WARN/System.err(4667): at java.lang.reflect.Method.invokeNative(Native Method) 12-09 14:53:22.677: WARN/System.err(4667): at java.lang.reflect.Method.invoke(Method.java:521) 12-09 14:53:22.677: WARN/System.err(4667): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:868) 12-09 14:53:22.677: WARN/System.err(4667): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:626) 12-09 14:53:22.677: WARN/System.err(4667): at dalvik.system.NativeStart.main(Native Method) 12-09 14:53:22.677: WARN/System.err(4667): Caused by: java.security.cert.CertificateException: java.security.cert.CertPathValidatorException: IssuerName(CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US) does not match SubjectName(CN=VeriSign Class 3 Extended Validation SSL CA, OU=Terms of use at https://www.verisign.com/rpa (c)06, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US) of signing certificate 12-09 14:53:22.687: WARN/System.err(4667): at org.apache.harmony.xnet.provider.jsse.TrustManagerImpl.checkServerTrusted(TrustManagerImpl.java:168) 12-09 14:53:22.687: WARN/System.err(4667): at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:366) 12-09 14:53:22.687: WARN/System.err(4667): ... 22 more 12-09 14:53:22.687: WARN/System.err(4667): Caused by: java.security.cert.CertPathValidatorException: IssuerName(CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US) does not match SubjectName(CN=VeriSign Class 3 Extended Validation SSL CA, OU=Terms of use at https://www.verisign.com/rpa (c)06, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US) of signing certificate 12-09 14:53:22.697: WARN/System.err(4667): at org.bouncycastle.jce.provider.PKIXCertPathValidatorSpi.engineValidate(PKIXCertPathValidatorSpi.java:373) 12-09 14:53:22.697: WARN/System.err(4667): at java.security.cert.CertPathValidator.validate(CertPathValidator.java:202) 12-09 14:53:22.697: WARN/System.err(4667): at org.apache.harmony.xnet.provider.jsse.TrustManagerImpl.checkServerTrusted(TrustManagerImpl.java:164) 12-09 14:53:22.697: WARN/System.err(4667): ... 23 more Domain name : www.apptivo.com how to resolve this issue? Hi,
I have tried above code but i got the following exception.

12-09 14:53:22.657: WARN/System.err(4667): javax.net.ssl.SSLException: Not trusted server certificate
12-09 14:53:22.657: WARN/System.err(4667): at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:371)
12-09 14:53:22.657: WARN/System.err(4667): at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:92)
12-09 14:53:22.657: WARN/System.err(4667): at org.apache.http.conn.ssl.SSLSocketFactory.createSocket(SSLSocketFactory.java:381)
12-09 14:53:22.667: WARN/System.err(4667): at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:164)
12-09 14:53:22.667: WARN/System.err(4667): at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:164)
12-09 14:53:22.667: WARN/System.err(4667): at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:119)
12-09 14:53:22.667: WARN/System.err(4667): at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:348)
12-09 14:53:22.667: WARN/System.err(4667): at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:555)
12-09 14:53:22.667: WARN/System.err(4667): at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:487)
12-09 14:53:22.667: WARN/System.err(4667): at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:465)
12-09 14:53:22.667: WARN/System.err(4667): at com.dev.env.RestJsonClient.connect(RestJsonClient.java:102)
12-09 14:53:22.667: WARN/System.err(4667): at com.dev.env.HttpTestProjectActivity$1.onClick(HttpTestProjectActivity.java:32)
12-09 14:53:22.667: WARN/System.err(4667): at android.view.View.performClick(View.java:2408)
12-09 14:53:22.677: WARN/System.err(4667): at android.view.View$PerformClick.run(View.java:8816)
12-09 14:53:22.677: WARN/System.err(4667): at android.os.Handler.handleCallback(Handler.java:587)
12-09 14:53:22.677: WARN/System.err(4667): at android.os.Handler.dispatchMessage(Handler.java:92)
12-09 14:53:22.677: WARN/System.err(4667): at android.os.Looper.loop(Looper.java:123)
12-09 14:53:22.677: WARN/System.err(4667): at android.app.ActivityThread.main(ActivityThread.java:4627)
12-09 14:53:22.677: WARN/System.err(4667): at java.lang.reflect.Method.invokeNative(Native Method)
12-09 14:53:22.677: WARN/System.err(4667): at java.lang.reflect.Method.invoke(Method.java:521)
12-09 14:53:22.677: WARN/System.err(4667): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:868)
12-09 14:53:22.677: WARN/System.err(4667): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:626)
12-09 14:53:22.677: WARN/System.err(4667): at dalvik.system.NativeStart.main(Native Method)
12-09 14:53:22.677: WARN/System.err(4667): Caused by: java.security.cert.CertificateException: java.security.cert.CertPathValidatorException: IssuerName(CN=VeriSign Class 3 Public Primary Certification Authority – G5, OU=”(c) 2006 VeriSign, Inc. – For authorized use only”, OU=VeriSign Trust Network, O=”VeriSign, Inc.”, C=US) does not match SubjectName(CN=VeriSign Class 3 Extended Validation SSL CA, OU=Terms of use at https://www.verisign.com/rpa (c)06, OU=VeriSign Trust Network, O=”VeriSign, Inc.”, C=US) of signing certificate
12-09 14:53:22.687: WARN/System.err(4667): at org.apache.harmony.xnet.provider.jsse.TrustManagerImpl.checkServerTrusted(TrustManagerImpl.java:168)
12-09 14:53:22.687: WARN/System.err(4667): at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:366)
12-09 14:53:22.687: WARN/System.err(4667): … 22 more
12-09 14:53:22.687: WARN/System.err(4667): Caused by: java.security.cert.CertPathValidatorException: IssuerName(CN=VeriSign Class 3 Public Primary Certification Authority – G5, OU=”(c) 2006 VeriSign, Inc. – For authorized use only”, OU=VeriSign Trust Network, O=”VeriSign, Inc.”, C=US) does not match SubjectName(CN=VeriSign Class 3 Extended Validation SSL CA, OU=Terms of use at https://www.verisign.com/rpa (c)06, OU=VeriSign Trust Network, O=”VeriSign, Inc.”, C=US) of signing certificate
12-09 14:53:22.697: WARN/System.err(4667): at org.bouncycastle.jce.provider.PKIXCertPathValidatorSpi.engineValidate(PKIXCertPathValidatorSpi.java:373)
12-09 14:53:22.697: WARN/System.err(4667): at java.security.cert.CertPathValidator.validate(CertPathValidator.java:202)
12-09 14:53:22.697: WARN/System.err(4667): at org.apache.harmony.xnet.provider.jsse.TrustManagerImpl.checkServerTrusted(TrustManagerImpl.java:164)
12-09 14:53:22.697: WARN/System.err(4667): … 23 more

Domain name : http://www.apptivo.com

how to resolve this issue?

]]> Comment on Android: Trusting SSL certificates by MarchingHome http://blog.antoine.li/2010/10/22/android-trusting-ssl-certificates/#comment-66 MarchingHome Tue, 29 Nov 2011 16:17:36 +0000 http://blog.antoine.li/?p=288#comment-66 You, sir, are my hero. And hereby I ++ Anna's comment. You, sir, are my hero.

And hereby I ++ Anna’s comment.

]]> Comment on Android: Trusting SSL certificates by ribben http://blog.antoine.li/2010/10/22/android-trusting-ssl-certificates/#comment-65 ribben Thu, 24 Nov 2011 22:03:52 +0000 http://blog.antoine.li/?p=288#comment-65 Hello mate, excellent tutorial... Please check this page's root cert and intermediate https://web.itc.auth.gr/PubCookie.reply And also some noob question i get an error when i am trying to set HttpClient client = new MyHttpClient(getApplicationContext()); the getApplicationContext is the error... I am eagerely waiting for your reply... Once again thanks for the great tutorial!!! Hello mate, excellent tutorial…

Please check this page’s root cert and intermediate
https://web.itc.auth.gr/PubCookie.reply

And also some noob question i get an error when i am trying to set HttpClient client = new MyHttpClient(getApplicationContext());

the getApplicationContext is the error…

I am eagerely waiting for your reply…
Once again thanks for the great tutorial!!!

]]> Comment on Android: Trusting SSL certificates by Android Applications Download http://blog.antoine.li/2010/10/22/android-trusting-ssl-certificates/#comment-64 Android Applications Download Thu, 24 Nov 2011 14:28:58 +0000 http://blog.antoine.li/?p=288#comment-64 I am not sure where you are getting your information, but good topic. I needs to spend some time studying more or figuring out more. Thanks for fantastic info I used to be searching for this info for my mission. I am not sure where you are getting your information, but good topic. I needs to spend some time studying more or figuring out more. Thanks for fantastic info I used to be searching for this info for my mission.

]]> Comment on Android: Trusting SSL certificates by Anna http://blog.antoine.li/2010/10/22/android-trusting-ssl-certificates/#comment-63 Anna Wed, 23 Nov 2011 11:08:12 +0000 http://blog.antoine.li/?p=288#comment-63 Thank you for a great post! I had a problem with having a capital letter in "myKeystore.bks". You might want to change the name in your article. Thank you for a great post!

I had a problem with having a capital letter in “myKeystore.bks”. You might want to change the name in your article.

]]> Comment on Android: Trusting SSL certificates by Antoine Hauck http://blog.antoine.li/2010/10/22/android-trusting-ssl-certificates/#comment-62 Antoine Hauck Thu, 10 Nov 2011 11:33:56 +0000 http://blog.antoine.li/?p=288#comment-62 @Chris When the imported (Root and Intermediate) certs expire, they need to be replaced with newer ones. But AFAIK you must not deploy a new app, you could also implement a mechanism in your app to fetch a new keystore file or certificates and "install" them on the app. But I do not recommend this option due to security reasons. @Chris
When the imported (Root and Intermediate) certs expire, they need to be replaced with newer ones.

But AFAIK you must not deploy a new app, you could also implement a mechanism in your app to fetch a new keystore file or certificates and “install” them on the app. But I do not recommend this option due to security reasons.

]]>