Questions tagged [x509trustmanager]

43 questions
19
votes
3 answers

Validate X.509 certificate against CA in Java

Lets say I have something like this (client side code): TrustManager[] trustAllCerts = new TrustManager[]{ new X509TrustManager() { @Override public java.security.cert.X509Certificate[] getAcceptedIssuers() { return…
Jakub Truneček
  • 8,800
  • 3
  • 20
  • 35
9
votes
1 answer

SSLSocketFactory and TrustManager redundancy in OkHttp3

In OkHttp3, the following is deprecated [A]: sslSocketFactory(SSLSocketFactory sslSocketFactory) It is replaced by [B]: sslSocketFactory(SSLSocketFactory sslSocketFactory, X509TrustManager trustManager). Here are my questions: What is…
Cy.Cup
  • 91
  • 3
5
votes
1 answer

Unable to Extract trust manager on IBM JRE8 with OKHTTP3

Can Any one help on this please. I am also using OKHTTP3 version 4.8.1 to write HTTP2 client . Its Working on Oracle JDK 8 but not working on IBM JRE 8. Error message: java.lang.IllegalStateException: Unable to extract the trust manager on…
4
votes
2 answers

java.security.cert.CertPathValidatorException: Trust anchor for certification path not found. on api less 24

com.android.volley.NoConnectionError: javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found. I got this error in logcat on api from 19 to 24 and there is no data loading…
3
votes
0 answers

Lint TrustAllX509TrustManager issue with google-http-client

I have these 2 libraries to my project: api("com.google.api-client:google-api-client-android:2.2.0") { exclude group: 'org.apache.httpcomponents' } api("com.google.apis:google-api-services-calendar:v3-rev411-1.25.0") { …
3
votes
1 answer

Restrict checkServerTrusted just for initialization of connection with my server

CheckServerTrusted is called when initialization with my server is made. However checkServerTrusted is also called when Google maps are initialized. Is it somehow possible to restrict checkServerTrusted just for initialization of connection to my…
kostik
  • 639
  • 2
  • 10
  • 25
3
votes
1 answer

Implementing X509TrustManager

I'm currently trying to transfer data over the internet via SSL/TLS in java and I want both parties to authenticate themselves. I have implemented the KeyManager myself to load the key pair and present the other party the appropriate…
Tephelon
  • 105
  • 2
  • 8
2
votes
1 answer

Can checkServerTrusted result be cached for X509TrustManager?

In my JavaFX client application, I'm implementing my own TrustManager that relies on Platform TrustManager. Basically, I'm always calling the Platform trustManager and if the connection is not trusted, I'm able to pop a warning Dialog asking the…
Maxoudela
  • 2,091
  • 3
  • 15
  • 23
2
votes
2 answers

" javax.net.ssl.SSLHandshakeException: Handshake failed" Even after adding custom TrustManager and Certificate Pinning

I am planning to use Jamendo API to download music but upon connection to the API the following error was thrown javax.net.ssl.SSLHandshakeException: Handshake failed at…
2
votes
1 answer

In X509TrustManager, what are method "getAcceptedIssuers" used for?

There are three method in X509TrustManager. 1 checkClientTrusted : check whether the client's certificates are trusted. 2 checkServerTrusted: check whether the server's certificates are trusted. So what the method getAcceptedIssuers for? Where it…
qibobo
  • 463
  • 1
  • 5
  • 13
2
votes
1 answer

Your app is using an unsafe implementation of the X509TrustManager interface with an Apache HTTP client

I was having this below code in my app - public class MySSLSocketFactory extends SSLSocketFactory { SSLContext sslContext = SSLContext.getInstance("TLS"); public MySSLSocketFactory(KeyStore truststore) throws NoSuchAlgorithmException,…
Narendra Singh
  • 3,990
  • 5
  • 37
  • 78
2
votes
0 answers

Google Play warning and "unsafe implementation of X509TrustManager"

We had received mail regarding “You are using an unsafe implementation of X509TrustManagfer”. To resolve this issue we have applied solution from http://transoceanic.blogspot.in/2011/11/android-import-ssl-certificate-and-use.html Here we have…
1
vote
2 answers

Flutter build apk --split-per-abi Exception in thread "main" javax.net.ssl.SSLHandshakeException: PKIX path building failed:

I am trying to build and apk in flutter so i run below command flutter build apk --split-per-abi After i run the command i get below error Exception in thread "main" javax.net.ssl.SSLHandshakeException: PKIX path building failed:…
Emmanuel Njorodongo
  • 1,004
  • 17
  • 35
1
vote
0 answers

Vulnerability TrustManager

Our app has been in the Play Market for 4 years. Before the last build, we added AppMetrica in the app: implementation 'com.yandex.android:mobmetricalib:3.13.1' implementation 'com.android.installreferrer:installreferrer:1.1.2' implementation…
1
vote
0 answers

Custom KeyManager and TrustManager for Spring Boot

I have decided to rebrand my question, I am looking for a way to provide a custom keymanager and trustmanager for my Spring Boot application. Basically I have an application that provides users with custom URLs for…
tinashe.chipomho
  • 387
  • 2
  • 8
  • 17
1
2 3