> Does that include any 4.2.x release? The relevant SSL code in
> AndroidEnvironment hasn't changed since 2011-11-16 until 2012-08-13 (after
> 4.2.5 was branched), and _most_ of the code hadn't changed since 2010-10-15
> (i.e. a very long time ago). I have no idea why this would have ever worked
> for you if it started failing for you recently. :-/
I'm not sure which version I had before 4.2.5 but it was definitely >= 4.2. Up
until 4.2.5 it always worked (I started with one of the first Xamarin versions
in 2011). The server side code (and the certificate) wasn't touched between
4.2 and 4.2.5.
Also, I can't imagine that https was always broken in MonoDroid. There must be
lots of applications out there using https.
> Rephrased, that method has been broken for an eternity, and only just
> "happened" to work for some sites because the site returned the SSL
> certificates in the "correct" order.
It's not working with www.google.com, www.microsoft.com with Monodroid 4.2.5
on a Nexus S with Android 4.1.1. Here's a short test:
var html = new
System.Net.WebClient().DownloadString("https://www.google.com";);
It's not working in 2.3 and 4.0 emulators, either. In
ServerCertificateValidationCallback the root certificate is always missing
from the chain. www.microsoft.com, for example, has two intermediate
certificates and they are both present in the chain but the root certificate
is not.
--
View this message in context:
http://mono-for-android.1047100.n5.nabble.com/https-certificate-chain-errors-tp5711731p5711762.html
Sent from the Mono for Android mailing list archive at Nabble.com._______________________________________________
Monodroid mailing list
[email protected]
UNSUBSCRIBE INFORMATION:
http://lists.ximian.com/mailman/listinfo/monodroid
