SSL handshake exception retrofit android

Question

I am getting unusual exception suddenly after base url got changed from http:// to https://. Every time I hit API with https:// I can see log flashing "HTTP FAILED: javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found." this error.

I thought retrofit auto imports the certificate most times (as I have tried connecting https:// many times using retrofit. I didn't faced this issue earlier)

Follow that link : https://stackoverflow.com/a/46969809/6740130 — Muhammad Saad Rafique, Oct 27 '17 at 07:40

score 1 · Answer 1 · answered Oct 27 '17 at 07:11

1

Your server may use an auto-signed certificate for https.

If this is true, you can avoid the exception by disabling retrofit to check the certificate.

Please, read this:

Disable SSL certificate check in retrofit library

answered Oct 27 '17 at 07:11

Yusef Maali

2,201
2
23
29

It is happening for Android 5.0 on retrofit version 2.9.0 – Harsh Sep 23 '20 at 07:41

score 0 · Answer 2 · answered Oct 27 '17 at 07:07

0

The problem is not on app side absolutely. Tell your supervisor that your HTTP clients can’t connect to fatally insecure HTTPS servers. You can say it's a limitation of computers and your only option is to update the server.

Once you’ve done that you can add a development-only debug mode. To do it, enable a cipher suite that your server supports. You can get the list from the Qualys tool.

answered Oct 27 '17 at 07:07

Sunil P

3,698
3
13
20

Won't it be possible to use the ssl certificate in retrofit which they are using right now on server? – The90sArtist Oct 27 '17 at 07:09
I don't think so. – Sunil P Oct 27 '17 at 07:10
Apparently they are using wildcard certificate as told by admin, is it something I can do from app side? Because whenever i use same API over postman, i can see the response. – The90sArtist Oct 27 '17 at 07:12
@The90sArtist you can check if https has setup correctly or not here: https://www.digicert.com/help/ – maphongba008 Oct 27 '17 at 07:12
Eventually the postman gives the response it does not matter either it is http or https,it just gives the response. any way you can check the https has setup correctly as suggested by @maphongba008 – Sunil P Oct 27 '17 at 07:16
Yes. Sure. Thank you. – The90sArtist Oct 27 '17 at 08:26

SSL handshake exception retrofit android

2 Answers2