I agree that adding a self-signed certificate to the trustore is the way to 
go. It's not that difficult.

look here if you need to generate a certificate:
http://blog.didierstevens.com/2008/12/30/howto-make-your-own-cert-with-openssl/

And here to create a BKS trust store:
http://blog.crazybob.org/2010/02/android-trusting-ssl-certificates.html

for registering the BKS trust store (here found in the raw resources):

   AndroidHttpClient httpClient =    AndroidHttpClient.newInstance();

    try {
            KeyStore trusted = KeyStore.getInstance("BKS");
            InputStream in = 
context.getResources().openRawResource(R.raw.truststore);
            trusted.load(in, "password".toCharArray());
            in.close();

            SSLSocketFactory sslFactory = new SSLSocketFactory(trusted);
            // uncoment this is your self signed certificate do not have a 
real hostname associated
            
//sslFactory.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

            httpClient.getConnectionManager.getSchemeRegistry().register(new 
Scheme("https", 443, sslFactory));

        } catch (Throwable e) {
            log.severe("cannot register https scheme: " + e);
        }

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to