This occurs with other sites as well. Here is a small piece of code that
shows the problem:
ServicePointManager.ServerCertificateValidationCallback
= (src, cert,
chain, err) =>
{
Log.Debug("AndroidCertTest", "err: {0}", err);
Log.Debug("AndroidCertTest", "cert: {0}", cert);
for (int i = 0; i < chain.ChainElements.Count;
i++)
{
Log.Debug("AndroidCertTest",
"chain[{0}]: {1}", i,
chain.ChainElements[i].Certificate);
}
return err ==
System.Net.Security.SslPolicyErrors.None;
};
var s = new
WebClient().DownloadString("https://www.google.com/";);
output on Monodroid 4.2.5:
err: RemoteCertificateChainErrors
cert: [Subject]
CN=www.google.com, O=Google Inc, L=Mountain View, S=California, C=US
[Issuer]
CN=Thawte SGC CA, O=Thawte Consulting (Pty) Ltd., C=ZA
[Not Before]
10/26/2011 12:00:00 AM
[Not After]
9/30/2013 11:59:59 PM
[Thumbprint]
C1956DC8A7DFB2A5A56934DA09778E3A11023358
chain[0]: [Subject]
CN=www.google.com, O=Google Inc, L=Mountain View, S=California, C=US
[Issuer]
CN=Thawte SGC CA, O=Thawte Consulting (Pty) Ltd., C=ZA
[Not Before]
10/26/2011 12:00:00 AM
[Not After]
9/30/2013 11:59:59 PM
[Thumbprint]
C1956DC8A7DFB2A5A56934DA09778E3A11023358
chain[1]: [Subject]
CN=Thawte SGC CA, O=Thawte Consulting (Pty) Ltd., C=ZA
[Issuer]
OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.",
C=US
[Not Before]
5/13/2004 12:00:00 AM
[Not After]
5/12/2014 11:59:59 PM
[Thumbprint]
EC071003D8F5A37F42C4557F656AAE8665FA4B02
The root certificate is missing. The same from a console application:
err: None
cert: [Subject]
CN=www.google.com, O=Google Inc, L=Mountain View, S=California, C=US
[Issuer]
CN=Thawte SGC CA, O=Thawte Consulting (Pty) Ltd., C=ZA
[Serial Number]
4F9D96D966B0992B54C2957CB4157D4D
[Not Before]
26.10.2011 02:00:00
[Not After]
01.10.2013 01:59:59
[Thumbprint]
C1956DC8A7DFB2A5A56934DA09778E3A11023358
chain[0]: [Subject]
CN=www.google.com, O=Google Inc, L=Mountain View, S=California, C=US
[Issuer]
CN=Thawte SGC CA, O=Thawte Consulting (Pty) Ltd., C=ZA
[Serial Number]
4F9D96D966B0992B54C2957CB4157D4D
[Not Before]
26.10.2011 02:00:00
[Not After]
01.10.2013 01:59:59
[Thumbprint]
C1956DC8A7DFB2A5A56934DA09778E3A11023358
chain[1]: [Subject]
CN=Thawte SGC CA, O=Thawte Consulting (Pty) Ltd., C=ZA
[Issuer]
OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.",
C=US
[Serial Number]
30000002
[Not Before]
13.05.2004 02:00:00
[Not After]
13.05.2014 01:59:59
[Thumbprint]
EC071003D8F5A37F42C4557F656AAE8665FA4B02
chain[2]: [Subject]
OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.",
C=US
[Issuer]
OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.",
C=US
[Serial Number]
3C9131CB1FF6D01B0E9AB8D044BF12BE
[Not Before]
29.01.1996 01:00:00
[Not After]
03.08.2028 01:59:59
[Thumbprint]
A1DB6393916F17E4185509400415C70240B0AE6B
--
View this message in context:
http://mono-for-android.1047100.n5.nabble.com/https-certificate-chain-errors-tp5711731p5711739.html
Sent from the Mono for Android mailing list archive at Nabble.com.
_______________________________________________
Monodroid mailing list
[email protected]
UNSUBSCRIBE INFORMATION:
http://lists.ximian.com/mailman/listinfo/monodroid
