Android :: Httpclient And Selfsigned Certificates
Jun 25, 2010
I am using httpclient for my android app and I have a local site which has a few https pages. Since default httpclient doesnot allow self-signed certificates I am using "EasySSLFactory" and "EasyX509TrustManager", which are mentioned in httpclient documentation.
CODE:.......
The problem is if I use this SSLFactory in my android app, I am getting correct response from my site's https pages, but I get "SSL handshake failure: I/O error during system call, Unknown error: 0" for sites such as "gmail.com", "ymail.com". If I don't use. "EasySSLSocketFactory" I get response from these sites but get exception for my site.
This page fetch code works fine as a standalone java application.
View 1 Replies
Apr 15, 2010
Trying to get HTTPS working with the HttpClient. I can't seem to find an example anywhere that works for me. Basically, I want my client to accept any certificate (because I'm only ever pointing to one server) but I keep getting a javax.net.ssl.SSLException: Not trusted server certificate exception.
So this is what I have:
CODE:.............
And here's the error I'm getting:
CODE:................
View 2 Replies
View Related
Jul 2, 2009
I got one blog which interacts with servlets... Link as follows
http://groups.google.com/group/android-developers/browse_thread/threa...
In that program 2 libraries were used..
1---> import org.apache.commons.httpclient.HttpClient; 2---> import org.apache.commons.httpclient.methods.GetMethod;
When i check these libraries in my program, its show error....how to resolve this error?
View 11 Replies
View Related
Mar 23, 2009
I'm looking for a way to get the certificates from a package that are used to sign it. Using the PackageInfo class it is possible to get the signatures. But what can I do with signatures if I don't get the public keys to verify these.
The next question I have where does the PackageInstaller verify the signed APK file? The PackageParser class loads the APK file into a JarFile object but does this automatically verify the signature?
View 3 Replies
View Related
Oct 23, 2008
I'm using the Email application. I get a "non-trusted certificate" error when setting up mail for IMAP. This is expected because I generally self-sign my certs. Though, what is not expected is that there seems to be no mechanism to accept non-trusted server certificates. No self-sign certs? That's a deal breaker. There has got to be a work-a-round.
View 9 Replies
View Related
Aug 12, 2010
Is there a way to view the Pre-Installed Root CA SSL Certificates in the Android OS? That is VeriSign, GeoTrust, Etc.
View 3 Replies
View Related
Apr 21, 2010
From the signing documentation at http://developer.android.com/intl/zh-TW/guide/publishing/app-signing.html:
When the system is installing an update to an application, if any of the certificates in the new version match any of the certificates in the old version, then the system allows the update.
This indicates that an application can be signed with multiple certificates.
This is an interesting option to allow multiple entities to sign an application. e.g: A system application which was initially signed by the device's manufacturer. Further updates could be signed by the developer.
Am I misreading the documentation or is this really possible? If so, how?
Is there any other way for an application to support different certificates and with that, having two or more entities sign it?
View 1 Replies
View Related
Mar 24, 2010
I recently formatted my computer and updated to Windows 7. I backed up my keystore and tried to sign my apk with it but it gave me an error that said my certificate expires in 22yrs. which is just shy of what the market requires to upload the apk. So now I am stuck not being able to update my app... Is there a way to extend the lifetime of certificates so that I can update my app?
View 1 Replies
View Related
Oct 31, 2010
I'm working on an Android app that requires both client and server certificate authentication. I have an SSLClient class that I created that works beautifully on regular desktop Java SE 6. I've moved it into my Android project and I'm getting the following error: "KeyStore JKS implementation not found".I've looked online a bit and it looks like there's a possibility that Java Keystores are not supported on Android (awesome!) but I have a feeling there's more to it than that because none of the sample code I've found resembles what I'm trying to do at all. Everything I found talks about using an http client rather than raw SSL sockets. I need SSL sockets for this application.
View 1 Replies
View Related
Nov 28, 2009
My work has free Wifi available for patients and whoever but you must first sign in on a main page it redirects to if your not already. Here to sign in you must accept a security certificate to be able to do this. It worked on my Droid the first day I did this and now I cannot get it to work, says it cannot redirect with no connection. Now this has happened before with my laptop and I just remove the certificate and it gets a new one and off I go. My question is where can I find these so I can delete it on the droid?
View 2 Replies
View Related
Jan 14, 2010
I tried very hard but could not find an answer anywhere. I am attempting to install a security certificates (a pfx file) to get wifi access in my office but in the Samsung Galaxy (at least the one selling in Israel) I dont have an add a certificate option in the advanced wifi settings menu.
View 6 Replies
View Related
Oct 23, 2009
I did some modification about the java code and AndroidManifest.xml of "com.android.settings" package.
Then I ran the emulator like this: make; lunch 1; emulator &
When PackageManagerService was scanning the "/system/app/Settings.apk" packages at boot time, it reported an error that "com.android.settings has no certificates at entry AndroidManifest.xml".
I guess my modified "Settings.apk" could not pass the signature verify.
How can I run my modified "Settings.apk" successfully?
View 3 Replies
View Related
Oct 6, 2010
I am attempting to connect to a local HTTPS server using the apache DefaultHttpClient on a Android device.
CODE:.......
I am getting an error of "javax.net.ssl SSLException: Not trusted server certificate" when the .execute runs. I want to simply allow any certificate to work, regardless of if it is or is not in the android key chain.
I have spent about 40 hours researching and trying to figure out a workaround for this issue. I have seen many examples of how to do this but none so far have worked in Android; they seem to only work for JAVA. Does anyone know how to configure, or override the certificate validation used by the Apache HttpClient in Android so that it will just approve all certificates for a DefaultHttpClient connection?
View 1 Replies
View Related
Aug 24, 2010
I haven't used the Java HttpClient before and the documentation is confusing. Say I want to send a POST to the URL "https://domain/foo/ bar". I'm accessing a server with an XML API that defines the message to send like this:
code:.........
And the response to expect like this:
code:..........
Now, I can build and parse the portion inside the serverapi tags but I'm not sure how the HttpClient handles the header. If I use the standard code like this:
code:...........
In the area shown as "not sure", should I pre-pend the entire header in front of the xml section, just as it's shown in the server API document or does the client take care of the first line, since it knows the URL?
Is there a way to see exactly what is about to be sent right before I call HttpClient.execute?
As for parsing the response, I believe I can just do this:
code:..........
Or do I need to strip anything off the response content before I start parsing the xml? I took a few stabs at this and it looks like there's some HTTP bookkeeping information at the start of the response content.
View 13 Replies
View Related
Jun 21, 2010
I'm writing a small application which needs httpclient lib, basically to manage the cookie/session automatically. The website I'm targeting needs a valid session, so, between each http call, I need to send the cookie. Httpclient does it well. This is a tv stream application and I have to fetch the channel url, the url has a token parameter and I have to be logged / authenticated / (=> have a valid cookie/sessionid) to fetch the channel url.
I got the first cookie/sessionid with the first connection to the website. The cookie is valid for a certain amount of time, there is no "expires" but I don't know if there is any server cron to cleanup the sessions. I assume I have to "ping" every x secondes to maintain the session valid.
Between each http call, the time could be from 1 sec to several minutes, it depends if the user wants to change the watched tv channel. The http call (to fetch the url) is not made by the UI Thread.
There are several possibilities to manage the httpclient : - a single httpclient static singleton instance accessed by a custom synchronized getClient() on an helper class => when / how to release the http connection ? How to handle that correctly if the user got a phone call / does not use the application for now (unvalidate during onResume, etc)? - Save the cookie (String serialized into SharedPreferences) and create every time a new httpclient instance (then set the cookie to the new instance) => overhead to get the http connection - other ?
View 5 Replies
View Related
May 26, 2010
By default HttpClient use HTTP/1.1 protocol, is there any way to change it to HTTP/1.0?
View 4 Replies
View Related
May 28, 2009
I had configure a Tomcat webserver with SSL and client autification. So I need a clienKey.p12 File to visit the site. If I import the key into Firefox, it works fine.
So I tried to develop a Client from "normal" Java. That works:
CODE:..........
Now I try to develope a Client into Android and I am getting crazy....
Here my two Android implementation:
CODE:...........
I always geht the following Exception:
CODE:................
But the key is the same that I use for the "normal" java Client and for the import into firefox. So the key is valid. But it is signed by me... I don't want to sign it by a commercial Company like verisign.
View 2 Replies
View Related
Apr 8, 2010
I'm new to implementing HTTPS connections in Android. Essentially, I'm trying to connect to a server using the org.apache.http.client.HttpClient. I believe, at some point, I'll need to access the application's keystore in order to authorize my client with a private key. But, for the moment, I'm just trying to connect and see what happens; I keep getting an HTTP/1.1 400 Bad Request error.
I can't seem to make heads or tails of this despite many examples (none of them seem to work for me). My code looks like this (the BODY constant is XmlRPC):
CODE:.......................
View 1 Replies
View Related
Jun 19, 2010
For example: Say I searched something on the Walmart homepage. Like this. How would I retrieve the information from the first product listed. Information like product name, price, details, rating, model. And how would I search in the box.
The only way it seems like to me is to replace http://www.walmart.com/search/search-ng.do?
search_constraint=0&ic=48_0&search_query=someProduct&Find.x=0&Find.y=0&Find=Find.
Then replace someProduct with the seach and call it in an HttpClient.
View 1 Replies
View Related
Aug 26, 2010
Has anyone tried to use a newer version of Apache HttpClient on Android? There's an annoying bug in the HttpClient used by Android and I was wondering if I would run into problems trying to redistribute HttpClient 4.1 with my app.
View 2 Replies
View Related
May 7, 2010
I'm connecting to a REST service using HttpClient under Android. I'd like to be able to write code where I could pull the host, port, etc. out of a properties file and not have to write fake Schemes and other things like that in order to do the development work. In other words, the live site will have a cert. The dev site will have a self-signed cert or a CA cert. Either way, I need the code to seamlessly work with both kinds of certs if possible. Can someone point me in the right direction?
View 2 Replies
View Related
Apr 21, 2009
Does anyone know how to avoid the XSL transforming that is taking place in the HTTPClient? I just want the raw xml.
View 5 Replies
View Related
Nov 16, 2010
I am having a hugely annoying issue with delays using HTTPClient and post the first time I call execute on the client the response takes 5 seconds to come back. Subsequent calls take around 100 to 200 ms. I am using the Apache client so does anyone know why this takes so long? The client setup looks like below
CODE:.........
The timing for this look like below.
CODE:......................
View 8 Replies
View Related
Nov 9, 2010
I'm trying to call a web server that is using relative URL redirects for some of the calls. This of course isn't working with DefaultHttpClient as it isn't treating it as a relative URL. I've gotten as far as implementing a RedirectHandler in an attempt to catch the redirect and add in the base call but I can't work out how to get the location of the redirect.
With the following method how do I go about finding out where I am being redirected to? I can't find any fields on either response or context that have what I need and I don't know where else to look.
public URI getLocationURI(HttpResponse response, HttpContext context)
View 1 Replies
View Related
Oct 23, 2009
Until recently, our app shared a single Apache HttpClient instance using the ThreadSafeClientConnManager across the whole application. The http client instance was held by a singleton class.
Since I dislike the singleton pattern for its numerous problems, I refactored our API accessor to be a per-thread object, but now for every thread (which mostly means per Activity/Service in our case) a new HttpClient instance is created.
It's not that I have problems with this new approach, but I've read that the Apache folks suggest to only have one instance per app for performance reasons.
Visually, what we did before was this:
HttpClient (thread safe)
|
|
/
/
Activity1...ActivityN
Now, we do this:
Activity1 ... ActivityN
| |
| |
HttpClient1 HttpClientN
How do you guys do this in your applications? If you share one single HttpClient across your app and potentially many concurrent threads, how do you handle access to it?
View 1 Replies
View Related
Mar 16, 2010
I am trying to use a certain wrapper of HttpClient, called HTTPRequestHelper with an associated responseHandler as the basic class for my wrapper to a web service which is implemented as a singleton.
HTTPRequestHelper and samples of usage are described in chapter 6 of "Unlocking Android" published by Manning.
My problem is that invoking both the helper and the handler from a thread started on the main UI thread (either from an AsyncTask or directly) works only sporadically.
Here is the basic setup.
public class APIService { private ArrayList<Something> myThing;
CODE:.................
View 2 Replies
View Related
Jun 9, 2009
HttpClient 4 doesn't have that included anymore. The upstream project didn't integrate it from the 3.x client. I had to do exactly the same today. Basically I solved it by including some additional jars: mime4j httpmime This question was already on the list and there's some better explanation: http://groups.google.com/group/android-developers/msg/1ea124b384da9dc2 -- Urs My problem is that while i know what i have to include, i can't find a sensible download link for httpmime. the page points back to httpcore for downloads, but of course it's not in there any more (i checked). i was up for compiling it, but the source link takes me to the javadoc! something is definitely screwed up.
View 14 Replies
View Related
Jun 2, 2009
I'm trying to do multipart form upload using the 4.x httpclient on android. all the 4.x code samples I'm seeing use org.apache.http.entity.mime.MultipartEntity, but I'm running into a roadblock trying to find it. It's supposed to be in the httpmime project, but the download link for that project leads me back to httpcore, and the httpcore download doesn't contain that class. anyone else get multi part form upload to work?
View 2 Replies
View Related
Oct 26, 2010
I am trying to upload a image file to server and get back a JSON Object. But an IOException was thrown out. Following is my codes, can anybody have a look at them?
CODE:.....................
View 4 Replies
View Related
Nov 9, 2009
I'm working on an application that does an upload to a webserver, but struggling with the actual fileupload.. code:
CODE:............
Now, I have this working with what is no longer supported in MultipartEntity as follows:
CODE:...........
Problem is MultipartEntity is apparently no longer supported, although I found the libraries I can include in my project.
View 12 Replies
View Related
