Ajay,

You being able to open the site in desktop browser and on a Blackberry seems to imply that the certificate is valid (not corrupted) and is not self-signed.

Perhaps the certificate was issued by an authority whose certificate is not installed in Android?

Take a look here:

http://groups.google.com/group/android-developers/browse_thread/thread/1afdf215aa539ca9/56970e750066e93d

This is a hack to accept all certificates.

-- Kostya

20.08.2010 16:07, Ajay пишет:
Thank you Kostya,

I tried accessing the same site on the desktop browser and a
BlackBerry device, and they seem to work fine without a problem. I
verified that the certificate on the server is installed properly
using the following site: http://www.digicert.com/help and it told
that it was installed properly on the server.

On Aug 20, 4:39 pm, Kostya Vasilyev<[email protected]>  wrote:
   Ajay,

This can happen because the certificate is not signed by a trusted
certificate authority (e.g. self-signed), or because the certificate is
just plain wrong.

Try accessing the URL with a desktop browser to find out what the actual
reason is.

If the certificate is good, but is self-signed, search list archives for
the solution - this comes up quite often.

-- Kostya

20.08.2010 15:00, Ajay пишет:



Hi,
     I am receiving this exception, when I try to access a secure site
in my App. I am using DefaultHttpClient&    BasicHttpParamsclasses for
Http communication. Any idea what could be the problem here?
Thank you,
AJ
----------------------------------------------------------------------------------------------------------------------------------------------------
javax.net.ssl.SSLException: Not trusted server certificate
      at
org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:
360)
      at
org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:
92)
      at
org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:
321)
      at
org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:
129)
      at
org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:
164)
      at
org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:
119)
      at
org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:
348)
      at
org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:
555)
      at
org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:
487)
      at
org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:
465)
      at java.lang.Thread.run(Thread.java:1096)
Caused by: java.security.cert.CertificateException:
java.security.cert.CertPathValidatorException: Could not validate
certificate signature.
      at
org.apache.harmony.xnet.provider.jsse.TrustManagerImpl.checkServerTrusted(TrustManagerImpl.java:
168)
      at
org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:
355)
      ... 11 more
Caused by: java.security.cert.CertPathValidatorException: Could not
validate certificate signature.
      at
org.bouncycastle.jce.provider.PKIXCertPathValidatorSpi.engineValidate(PKIXCertPathValidatorSpi.java:
342)
      at
java.security.cert.CertPathValidator.validate(CertPathValidator.java:
211)
      at
org.apache.harmony.xnet.provider.jsse.TrustManagerImpl.checkServerTrusted(TrustManagerImpl.java:
164)
      ... 12 more
Caused by: java.security.SignatureException: Signature was not
verified.
      at
org.apache.harmony.security.provider.cert.X509CertImpl.fastVerify(X509CertImpl.java:
601)
      at
org.apache.harmony.security.provider.cert.X509CertImpl.verify(X509CertImpl.java:
544)
      at
org.bouncycastle.jce.provider.PKIXCertPathValidatorSpi.engineValidate(PKIXCertPathValidatorSpi.java:
337)
      ... 14 more
--
Kostya Vasilev -- WiFi Manager + pretty widget --http://kmansoft.wordpress.com


--
Kostya Vasilev -- WiFi Manager + pretty widget -- http://kmansoft.wordpress.com

--
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to