I don't know if this helps, but here is a bug in 4.2.5 with a
workaround to its problem in comment #7 -
https://bugzilla.xamarin.com/show_bug.cgi?id=6501

Hope that helps,
Stephen

On Sat, Sep 8, 2012 at 1:27 PM, mganss <[email protected]> wrote:
> This occurs with other sites as well. Here is a small piece of code that
> shows the problem:
>
>                         
> ServicePointManager.ServerCertificateValidationCallback = (src, cert,
> chain, err) =>
>                         {
>                                 Log.Debug("AndroidCertTest", "err: {0}", err);
>                                 Log.Debug("AndroidCertTest", "cert: {0}", 
> cert);
>
>                                 for (int i = 0; i < 
> chain.ChainElements.Count; i++)
>                                 {
>                                         Log.Debug("AndroidCertTest", 
> "chain[{0}]: {1}", i,
> chain.ChainElements[i].Certificate);
>                                 }
>
>                                 return err == 
> System.Net.Security.SslPolicyErrors.None;
>                         };
>
>                         var s = new 
> WebClient().DownloadString("https://www.google.com/";);
>
> output on Monodroid 4.2.5:
>
> err: RemoteCertificateChainErrors
> cert: [Subject]
>   CN=www.google.com, O=Google Inc, L=Mountain View, S=California, C=US
>
> [Issuer]
>   CN=Thawte SGC CA, O=Thawte Consulting (Pty) Ltd., C=ZA
>
> [Not Before]
>   10/26/2011 12:00:00 AM
>
> [Not After]
>   9/30/2013 11:59:59 PM
>
> [Thumbprint]
>   C1956DC8A7DFB2A5A56934DA09778E3A11023358
>
> chain[0]: [Subject]
>   CN=www.google.com, O=Google Inc, L=Mountain View, S=California, C=US
>
> [Issuer]
>   CN=Thawte SGC CA, O=Thawte Consulting (Pty) Ltd., C=ZA
>
> [Not Before]
>   10/26/2011 12:00:00 AM
>
> [Not After]
>   9/30/2013 11:59:59 PM
>
> [Thumbprint]
>   C1956DC8A7DFB2A5A56934DA09778E3A11023358
>
> chain[1]: [Subject]
>   CN=Thawte SGC CA, O=Thawte Consulting (Pty) Ltd., C=ZA
>
> [Issuer]
>   OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.",
> C=US
>
> [Not Before]
>   5/13/2004 12:00:00 AM
>
> [Not After]
>   5/12/2014 11:59:59 PM
>
> [Thumbprint]
>   EC071003D8F5A37F42C4557F656AAE8665FA4B02
>
> The root certificate is missing. The same from a console application:
>
> err: None
> cert: [Subject]
>   CN=www.google.com, O=Google Inc, L=Mountain View, S=California, C=US
>
> [Issuer]
>   CN=Thawte SGC CA, O=Thawte Consulting (Pty) Ltd., C=ZA
>
> [Serial Number]
>   4F9D96D966B0992B54C2957CB4157D4D
>
> [Not Before]
>   26.10.2011 02:00:00
>
> [Not After]
>   01.10.2013 01:59:59
>
> [Thumbprint]
>   C1956DC8A7DFB2A5A56934DA09778E3A11023358
>
> chain[0]: [Subject]
>   CN=www.google.com, O=Google Inc, L=Mountain View, S=California, C=US
>
> [Issuer]
>   CN=Thawte SGC CA, O=Thawte Consulting (Pty) Ltd., C=ZA
>
> [Serial Number]
>   4F9D96D966B0992B54C2957CB4157D4D
>
> [Not Before]
>   26.10.2011 02:00:00
>
> [Not After]
>   01.10.2013 01:59:59
>
> [Thumbprint]
>   C1956DC8A7DFB2A5A56934DA09778E3A11023358
>
> chain[1]: [Subject]
>   CN=Thawte SGC CA, O=Thawte Consulting (Pty) Ltd., C=ZA
>
> [Issuer]
>   OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.",
> C=US
>
> [Serial Number]
>   30000002
>
> [Not Before]
>   13.05.2004 02:00:00
>
> [Not After]
>   13.05.2014 01:59:59
>
> [Thumbprint]
>   EC071003D8F5A37F42C4557F656AAE8665FA4B02
>
> chain[2]: [Subject]
>   OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.",
> C=US
>
> [Issuer]
>   OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.",
> C=US
>
> [Serial Number]
>   3C9131CB1FF6D01B0E9AB8D044BF12BE
>
> [Not Before]
>   29.01.1996 01:00:00
>
> [Not After]
>   03.08.2028 01:59:59
>
> [Thumbprint]
>   A1DB6393916F17E4185509400415C70240B0AE6B
>
>
>
>
> --
> View this message in context: 
> http://mono-for-android.1047100.n5.nabble.com/https-certificate-chain-errors-tp5711731p5711739.html
> Sent from the Mono for Android mailing list archive at Nabble.com.
> _______________________________________________
> Monodroid mailing list
> [email protected]
>
> UNSUBSCRIBE INFORMATION:
> http://lists.ximian.com/mailman/listinfo/monodroid
_______________________________________________
Monodroid mailing list
[email protected]

UNSUBSCRIBE INFORMATION:
http://lists.ximian.com/mailman/listinfo/monodroid

Reply via email to