Re: Issue 21 in android-xmlrpc: Using the library when addressing SSL encrypted sites which have self-signed SSL certificates.

[android...@googlecode.com]

Comment #2 on issue 21 by borszc...@gmail.com: Using the library when
addressing SSL encrypted sites which have self-signed SSL certificates.
http://code.google.com/p/android-xmlrpc/issues/detail?id=21

Any progress with that issue? SSL with self signed cert is quite common
around

[android...@googlecode.com]

Comment #3 on issue 21 by j...@sprig.gs: Using the library when addressing

SSL encrypted sites which have self-signed SSL certificates.
http://code.google.com/p/android-xmlrpc/issues/detail?id=21

Sorry borszczuk, it completely slipped from my radar. I've got a bundle of
other changes to update this week. I'll see what I can do.

In the mean time, deubeuliou, are you able to supply a patch for the code
you implemented or added?

[android...@googlecode.com]

Updates:
Owner: j...@sprig.gs

Comment #4 on issue 21 by j...@sprig.gs: Using the library when addressing

SSL encrypted sites which have self-signed SSL certificates.
http://code.google.com/p/android-xmlrpc/issues/detail?id=21

(No comment was entered for this change.)

[android...@googlecode.com]

Updates:
Labels: -Type-Defect Type-Enhancement

Comment #5 on issue 21 by j...@sprig.gs: Using the library when addressing

SSL encrypted sites which have self-signed SSL certificates.
http://code.google.com/p/android-xmlrpc/issues/detail?id=21

I'm wary of implementing the referred code, as it completely circumvents
any SSL certificate validataion.

Perhaps we can extend the RPCClient class to accommodate this patch?

I'd still be interested in seeing a patch from deubeuliou for what you've
implemented?

[android...@googlecode.com]

Comment #6 on issue 21 by deubeuliou: Using the library when addressing SSL

encrypted sites which have self-signed SSL certificates.
http://code.google.com/p/android-xmlrpc/issues/detail?id=21

As I said, I modified the XMLRPCClient class (only the constuctor) as shown
in the attachement (sorry, not a proper patch format ... but it's only 2
lines).
And added the following class to the project :
http://exchangeit.googlecode.com/svn-history/r23/trunk/src/com/byarger/exchangeit/EasySSLSocketFactory.java
but I also did as that comment did :
http://code.google.com/p/android/issues/detail?id=1946#c10 , that is, using
that "TrivialTrustManager". But you don't want that, and I understand it.

My project didn't evolve much since the last time, and it probably never
will, as I lost my android :( (and have for the moment no longer use of
what I was coding)

I cannot help more than that, sorry.

Attachments:
XMLRPCClient.java.patch 414 bytes

[android...@googlecode.com]

Updates:
Owner: ---

Comment #7 on issue 21 by j...@sprig.gs: Using the library when addressing

SSL encrypted sites which have self-signed SSL certificates.
http://code.google.com/p/android-xmlrpc/issues/detail?id=21

I'm no longer able to commit time to this project, and as such, I am
removing myself from any tickets I've previously been involved in.