Questions tagged [x509trustmanager]

43 questions
1
vote
1 answer

Does X509TrustManager check API requests only one time per Android Application session?

Recently I have implemented a security feature to check my request is connected with the valid host. For that, I'm checking the certs of that host and I used X509TrustManager for that case. So if X509TrustManager found some invalid cert it will…
Rajitha Perera
  • 1,581
  • 5
  • 26
  • 42
1
vote
1 answer

generater Certificate and key vaya CA in node js

I want to implement microservices in node js. which will generator the Certificate with the help of any CA Certificate and also I can store some data in Certificate? the same Certificate I can validate by the same CA Certificate. please help me any…
1
vote
1 answer

Suppressing SSL certificate validations in java gives 502 cannot connect. Works perfectly fine with curl (with -k option) and Postman (SSL disabled))

I am trying to hit an SSL enabled Rest API by disabling the SSL certificate checks as follows; TrustManager[] trustAllCerts = new TrustManager[] {new X509TrustManager() { public java.security.cert.X509Certificate[]…
Shivam Puri
  • 1,578
  • 12
  • 25
1
vote
0 answers

Is this type of class allowed in an app published to google play?

I am aware that google play denies apps that use code to trust all ssl certificates, but would the following code below that ignores the certificate chains of only one server be allowed by google play. public class ServiceGenerator { public…
Bwalya
  • 118
  • 11
1
vote
1 answer

How to fix game made with Unity 3D Android X509TrustManager rejected by google play?

I have made a game in Unity 3D 2019.2 Android and I have sent it to Google Play, I got this message, Your app has a Security alert because is using an unsafe implementation of the X509TrustManager interface with an Apache HTTP client, resulting in…
1
vote
0 answers

ConversionException: Cannot convert type ...trustAllCerts$1 to type javax.net.ssl.X509TrustManager

I am trying to use PowerMock to mock a Realm instance and configure a presenter instance. I have been trying to mock Realm for a long time ago, but it's so difficult, specially in Kotlin, that I gave up in the past. I was able to solve some of the…
Pedro Paulo Amorim
  • 1,838
  • 2
  • 27
  • 50
1
vote
1 answer

spring-amqp compatibility with ibm jvm

I'm using spring-amqp with IBM JVM and when initializing a rabbit template to work with ssl it uses sunx509, but IBM JVM is not compatible with the algorithm so I get: java.security.NoSuchAlgorithmException: SunX509 KeyManagerFactory not…
nito1
  • 13
  • 3
1
vote
0 answers

Uploading script does not update the progress bar

I am uploading a file to a Simple Auth protected web-page using ssl. It works, but the progress bar is not working, ie, it shows no progress and all of a sudden it's finished. private fun hochladen(dn: String?): Int { var upLoadServerUri =…
1
vote
1 answer

Restore SSL X509TrustManager in Java

I have the following code which conditionally (based on a boolean) disables SSL certificate checking. However, if I set the boolean to false and re-run my code, the SSL checking still seems to be disabled (when it should be re-enabled). So, what's…
Jim Taylor
  • 111
  • 2
  • 10
1
vote
0 answers

SSLHandShake checkServerTrusted called 3 times in Android 7 Nougat

What might be the reason why checkServerTrusted of TrustManager is called 3 times in 1 request? Is there some sort of "resending" of Client Hello message if the first startHandShake failed in Android? Update: When I'm using specific ciphers in…
suguspnk
  • 391
  • 5
  • 15
1
vote
2 answers

Android 7: Trust anchor for certification path not found

I have an application that connects to a server in the local ip network. This connection is TLS encrypted with a custom certificate. Following the guides on this side I made it work under all android version up to android 7. Sadly since Android 7 it…
findusl
  • 2,454
  • 8
  • 32
  • 51
1
vote
2 answers

CertificateException thrown in custom X509TrustManager cannot be handled

My Xamarin.Android app makes requests to a web service running on https. The certificate may be self-signed, so I need to do the certificate check on my own. I configured my own TrustManager. But from what I found, the method CheckServerTrusted…
Michael Rumpler
  • 305
  • 2
  • 17
0
votes
1 answer

Custom Implementation of Trust Manager and Hostname Verifier

I am making post request to a third party service setting the hostname verifier and trust manager. The default pass all implementation however doesn't pass sonarcloud checks and gives errors which are attached in screenshots below. Have browsed for…
0
votes
0 answers

Firebase crashlytics TrustManaget X.509 Issue

Crash not capture to firebase console crashlytics dashboard I have integrated firebase crashlytics according to Firebase instruction FIREBASECRASHLYTICS But while crash happped i got below error TransportRuntime.CctTransportBackend: Making request…
0
votes
1 answer

What's meaning of client SSL authentication and server SSL authentication in X509TrustManager?

I understand "certificate chain provided by the peer", if certificate provided by the peer is in the X509TrustManager, the certificate is trusted, so is it just need a checkTrusted instead of checkClientTrusted and checkServerTrusted, i don't…
A1 paper
  • 52
  • 4