Message from discussion
= Re: [android-developers] Proguard causes problems with SSL keystore on Android
Received: by 10.236.168.70 with SMTP id j46mr3576724yhl.2.1321606722189;
Fri, 18 Nov 2011 00:58:42 -0800 (PST)
X-BeenThere: job-wwwbignlifein@googlegroups.com
Received: by 10.101.2.12 with SMTP id e12ls3177432ani.3.gmail; Fri, 18 Nov
2011 00:58:41 -0800 (PST)
Received: by 10.236.173.68 with SMTP id u44mr3525615yhl.6.1321606721498;
Fri, 18 Nov 2011 00:58:41 -0800 (PST)
Received: by 10.236.173.68 with SMTP id u44mr3525613yhl.6.1321606721472;
Fri, 18 Nov 2011 00:58:41 -0800 (PST)
Return-Path: <kumarjadhav0010+caf_=job-wwwbignlifein=googlegroups....@gmail.com>
Received: from mail-yx0-f174.google.com (mail-yx0-f174.google.com [209.85.213.174])
by gmr-mx.google.com with ESMTPS id y7si33004yha.4.2011.11.18.00.58.41
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 18 Nov 2011 00:58:41 -0800 (PST)
Received-SPF: pass (google.com: domain of kumarjadhav0010+caf_=job-wwwbignlifein=googlegroups....@gmail.com designates 209.85.213.174 as permitted sender) client-ip=209.85.213.174;
Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of kumarjadhav0010+caf_=job-wwwbignlifein=googlegroups....@gmail.com designates 209.85.213.174 as permitted sender) smtp.mail=kumarjadhav0010+caf_=job-wwwbignlifein=googlegroups....@gmail.com
Received: by yenq3 with SMTP id q3so2655375yen.5
for <job-wwwbignlifein@googlegroups.com>; Fri, 18 Nov 2011 00:58:41 -0800 (PST)
Received: by 10.68.26.193 with SMTP id n1mr7492198pbg.125.1321606721323;
Fri, 18 Nov 2011 00:58:41 -0800 (PST)
X-Forwarded-To: job-wwwbignlifein@googlegroups.com
X-Forwarded-For: kumarjadhav0...@gmail.com job-wwwbignlifein@googlegroups.com
Delivered-To: kumarjadhav0...@gmail.com
Received: by 10.142.107.13 with SMTP id f13cs10422wfc;
Fri, 18 Nov 2011 00:58:40 -0800 (PST)
Received-SPF: pass (google.com: domain of seokeywordlist+bncCO6K_Z3OChCft5j2BBoEm7YdBw@googlegroups.com designates 10.52.187.34 as permitted sender) client-ip=10.52.187.34;
Received: from mr.google.com ([10.52.187.34])
by 10.52.187.34 with SMTP id fp2mr3538964vdc.9.1321606720454 (num_hops = 1);
Fri, 18 Nov 2011 00:58:40 -0800 (PST)
Received-SPF: pass (google.com: domain of seokeywordlist+bncCO6K_Z3OChCft5j2BBoEm7YdBw@googlegroups.com designates 10.52.187.34 as permitted sender) client-ip=10.52.187.34;
Received: from mr.google.com ([10.52.187.34])
by 10.52.187.34 with SMTP id fp2mr3538964vdc.9.1321606718909 (num_hops = 1);
Fri, 18 Nov 2011 00:58:38 -0800 (PST)
Received: by 10.52.187.34 with SMTP id fp2mr1007932vdc.9.1321606047120;
Fri, 18 Nov 2011 00:47:27 -0800 (PST)
X-BeenThere: seokeywordlist@googlegroups.com
Received: by 10.220.149.17 with SMTP id r17ls3588953vcv.0.gmail; Fri, 18 Nov
2011 00:47:26 -0800 (PST)
Received: by 10.52.35.206 with SMTP id k14mr3498626vdj.5.1321606045858;
Fri, 18 Nov 2011 00:47:25 -0800 (PST)
Received: by 10.52.35.206 with SMTP id k14mr3498625vdj.5.1321606045850;
Fri, 18 Nov 2011 00:47:25 -0800 (PST)
Return-Path: <kumarjadhav009+caf_=seokeywordlist=googlegroups....@gmail.com>
Received: from mail-vx0-f176.google.com (mail-vx0-f176.google.com [209.85.220.176])
by gmr-mx.google.com with ESMTPS id b8si43950vdu.2.2011.11.18.00.47.25
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 18 Nov 2011 00:47:25 -0800 (PST)
Received-SPF: pass (google.com: domain of kumarjadhav009+caf_=seokeywordlist=googlegroups....@gmail.com designates 209.85.220.176 as permitted sender) client-ip=209.85.220.176;
Received: by vcbfk13 with SMTP id fk13so3471517vcb.7
for <seokeywordlist@googlegroups.com>; Fri, 18 Nov 2011 00:47:25 -0800 (PST)
Received: by 10.52.33.140 with SMTP id r12mr2487735vdi.36.1321606045725;
Fri, 18 Nov 2011 00:47:25 -0800 (PST)
X-Forwarded-To: seokeywordlist@googlegroups.com
X-X-Forwarded-For: kumarjadhav...@gmail.com seokeywordlist@googlegroups.com
Delivered-To: kumarjadhav...@gmail.com
Received: by 10.220.192.205 with SMTP id dr13cs36721vcb;
Fri, 18 Nov 2011 00:47:25 -0800 (PST)
Received: by 10.236.181.138 with SMTP id l10mr3054374yhm.36.1321606044184;
Fri, 18 Nov 2011 00:47:24 -0800 (PST)
Return-Path: <android-developers+bncCPaZ4JGpDhD4s5j2BBoEwL9uaA@googlegroups.com>
Received: from mail-yw0-f55.google.com (mail-yw0-f55.google.com [209.85.213.55])
by mx.google.com with ESMTPS id s16si30308and.33.2011.11.18.00.47.18
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 18 Nov 2011 00:47:24 -0800 (PST)
Received-SPF: pass (google.com: domain of android-developers+bncCPaZ4JGpDhD4s5j2BBoEwL9uaA@googlegroups.com designates 209.85.213.55 as permitted sender) client-ip=209.85.213.55;
Received: by ywt34 with SMTP id 34sf961059ywt.20
for <multiple recipients>; Fri, 18 Nov 2011 00:47:18 -0800 (PST)
Received: by 10.52.33.171 with SMTP id s11mr811375vdi.4.1321605676537;
Fri, 18 Nov 2011 00:41:16 -0800 (PST)
X-BeenThere: android-developers@googlegroups.com
Received: by 10.220.81.139 with SMTP id x11ls2366079vck.5.gmail; Fri, 18 Nov
2011 00:40:22 -0800 (PST)
Received: by 10.52.92.232 with SMTP id cp8mr989977vdb.13.1321605621623;
Fri, 18 Nov 2011 00:40:21 -0800 (PST)
Date: Fri, 18 Nov 2011 00:40:20 -0800 (PST)
From: Mathias Lin <m...@mathiaslin.com>
Reply-To: seokeywordlist@googlegroups.com
To: android-developers@googlegroups.com
Message-ID: <30607807.645.1321605620582.JavaMail.geo-discussion-forums@yqoo7>
In-Reply-To: <CAON6sPp-gzbOe6Pt8hkPJJ3opc8ZagkCT3MqeMMVK076HOK...@mail.gmail.com>
References: <24367748.22.1321592705728.JavaMail.geo-discussion-forums@yqjc16>
<CAON6sPp-gzbOe6Pt8hkPJJ3opc8ZagkCT3MqeMMVK076HOK...@mail.gmail.com>
Subject: [ http://make-money-training.blogspot.com ]= Re: [android-developers]
Proguard causes problems with SSL keystore on Android
MIME-Version: 1.0
X-Original-Sender: m...@mathiaslin.com
X-Original-Authentication-Results: ls.google.com; spf=pass (google.com: domain of
m...@mathiaslin.com designates internal as permitted sender)
smtp.mail=m...@mathiaslin.com; dkim=pass
header...@mathiaslin.com
Precedence: list
Mailing-list: list android-developers@googlegroups.com; contact android-developers+owners@googlegroups.com
List-ID: <android-developers.googlegroups.com>
List-Post: <http://groups.google.com/group/android-developers/post?hl=en_US>, <mailto:android-developers@googlegroups.com>
List-Help: <http://groups.google.com/support/?hl=en_US>, <mailto:android-developers+help@googlegroups.com>
List-Archive: <http://groups.google.com/group/android-developers?hl=en_US>
Sender: android-developers@googlegroups.com
List-Subscribe: <http://groups.google.com/group/android-developers/subscribe?hl=en_US>,
<mailto:android-developers+subscribe@googlegroups.com>
List-Unsubscribe: <http://groups.google.com/group/android-developers/subscribe?hl=en_US>,
<mailto:android-developers+unsubscribe@googlegroups.com>
Content-Type: multipart/alternative;
boundary="----=_Part_644_11778913.1321605620580"
------=_Part_644_11778913.1321605620580
Content-Type: text/plain; charset=ISO-8859-1
I removed -repackageclasses and -allowaccessmodification, but no difference
- getting the same error.
On Friday, 18 November 2011 13:20:21 UTC+8, Nikolay Elenkov wrote:
>
> On Fri, Nov 18, 2011 at 2:05 PM, Mathias Lin <ma...@mathiaslin.com> wrote:
> > In an Android app, I fetch content from a https url; in order to avoid
> SSL
> > cert verification errors, I add the SSL public key to my keystore, which
> > then resides in my res/raw folder of the app. Following the instructions
> as
> > on
> http://blog.crazybob.org/2010/02/android-trusting-ssl-certificates.html,
> > which all works fine so far.
> >
> > ..until I activate Proguard and obfuscation. With Proguard activated, I
> am
> > getting the following error,
> >
> > ERROR/Login(4401): Could not login.
> > javax.net.ssl.SSLException: hostname in certificate didn't match:
> > <store.mydomain.com/185.165.192.15> != <store.mydomain.com> OR
> > <store.mydomain.com>
> > at xyz.fd.a(Unknown Source)
> >
> > which I don't quite understand. Why would the identification of the url
> > change in a way that it's also fetching the /<ipAddress> together with
> the
> > domain name, whereas it works fine without Proguard obfuscation.
>
> Try dropping the more aggressive options like -repackageclasses and
> -allowaccessmodification options and see if that changes anything.
>
--
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--
Go to Master Mind Web Earner Blog :-
http://make-money-training.blogspot.com/
http://make-money-training.blogspot.com/
http://make-money-training.blogspot.com/
http://make-money-training.blogspot.com/
http://make-money-training.blogspot.com/
http://make-money-training.blogspot.com/
http://make-money-training.blogspot.com/
http://make-money-training.blogspot.com/
------=_Part_644_11778913.1321605620580
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
I removed <span class=3D"Apple-style-span" style=3D"border-style: init=
ial; border-color: initial; line-height: 18px; ">-repackageclasses and =
;</span><span class=3D"Apple-style-span" style=3D"border-style: initial; bo=
rder-color: initial; line-height: 18px; ">-allowaccessmodification, but no =
difference - getting the same error.</span><div><span class=3D"Apple-style-=
span" style=3D"line-height: 18px;"><br></span><br>On Friday, 18 November 20=
11 13:20:21 UTC+8, Nikolay Elenkov wrote:<blockquote class=3D"gmail_quote"=
style=3D"margin: 0;margin-left: 0.8ex;border-left: 1px #ccc solid;padding-=
left: 1ex;">On Fri, Nov 18, 2011 at 2:05 PM, Mathias Lin <<a>ma...@mathi=
aslin.com</a>> wrote:<br>> In an Android app, I fetch content from a =
https url; in order to avoid SSL<br>> cert verification errors, I add th=
e SSL public key to my keystore, which<br>> then resides in my res/raw f=
older of the app. Following the instructions as<br>> on <a href=3D"=
http://blog.crazybob.org/2010/02/android-trusting-ssl-certificates.html" ta=
rget=3D"_blank">http://blog.crazybob.org/<wbr>2010/02/android-trusting-ssl-=
<wbr>certificates.html</a>,<br>> which all works fine so far.<br>><br=
>> ..until I activate Proguard and obfuscation. With Proguard activated,=
I am<br>> getting the following error,<br>><br>> ERROR/Login(4401=
): Could not login.<br>> javax.net.ssl.SSLException: hostn=
ame in certificate didn't match:<br>> <<a href=3D"http://store.mydoma=
in.com/185.165.192.15" target=3D"_blank">store.mydomain.com/185.165.<wbr>19=
2.15</a>> !=3D <<a href=3D"http://store.mydomain.com" target=3D"_blan=
k">store.mydomain.com</a>> OR<br>> <<a href=3D"http://store.mydoma=
in.com" target=3D"_blank">store.mydomain.com</a>><br>> =
at xyz.fd.a(Unknown Source)<br>><br>> which I don't quite understand.=
Why would the identification of the url<br>> change in a way that it's =
also fetching the /<ipAddress> together with the<br>> do=
main name, whereas it works fine without Proguard obfuscation.<p>Try droppi=
ng the more aggressive options like -repackageclasses and<br>-allowaccessmo=
dification options and see if that changes anything.<br></p></blockquote></=
div>
<p></p>
-- <br />
You received this message because you are subscribed to the Google<br />
Groups "Android Developers" group.<br />
To post to this group, send email to android-developers@googlegroups.com<br=
/>
To unsubscribe from this group, send email to<br />
android-developers+unsubscribe@googlegroups.com<br />
For more options, visit this group at<br />
<a href=3D"http://groups.google.com/group/android-developers?hl=3Den">http:=
//groups.google.com/group/android-developers?hl=3Den</a>
<p></p>
-- <br />
Go to Master Mind Web Earner Blog :-<br />
<br />
<a href=3D"http://make-money-training.blogspot.com/">http://make-money-trai=
ning.blogspot.com/</a><br />
<br />
<a href=3D"http://make-money-training.blogspot.com/">http://make-money-trai=
ning.blogspot.com/</a><br />
<br />
<a href=3D"http://make-money-training.blogspot.com/">http://make-money-trai=
ning.blogspot.com/</a><br />
<br />
<a href=3D"http://make-money-training.blogspot.com/">http://make-money-trai=
ning.blogspot.com/</a><br />
<br />
<a href=3D"http://make-money-training.blogspot.com/">http://make-money-trai=
ning.blogspot.com/</a><br />
<br />
<a href=3D"http://make-money-training.blogspot.com/">http://make-money-trai=
ning.blogspot.com/</a><br />
<br />
<a href=3D"http://make-money-training.blogspot.com/">http://make-money-trai=
ning.blogspot.com/</a><br />
<br />
<a href=3D"http://make-money-training.blogspot.com/">http://make-money-trai=
ning.blogspot.com/</a><br />
------=_Part_644_11778913.1321605620580--