I agree that adding a self-signed certificate to the trustore is the way to go. It's not that difficult.
look here if you need to generate a certificate: http://blog.didierstevens.com/2008/12/30/howto-make-your-own-cert-with-openssl/ And here to create a BKS trust store: http://blog.crazybob.org/2010/02/android-trusting-ssl-certificates.html for registering the BKS trust store (here found in the raw resources): AndroidHttpClient httpClient = AndroidHttpClient.newInstance(); try { KeyStore trusted = KeyStore.getInstance("BKS"); InputStream in = context.getResources().openRawResource(R.raw.truststore); trusted.load(in, "password".toCharArray()); in.close(); SSLSocketFactory sslFactory = new SSLSocketFactory(trusted); // uncoment this is your self signed certificate do not have a real hostname associated //sslFactory.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER); httpClient.getConnectionManager.getSchemeRegistry().register(new Scheme("https", 443, sslFactory)); } catch (Throwable e) { log.severe("cannot register https scheme: " + e); } -- You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/android-developers?hl=en

