[android-developers] Re: Webview + self signed ssl cert

2009-05-30 Thread Disconnect
..or you have a known safe channel (such as adb or local secured/trusted wifi) you can use to get the cert the first time. And what does that have to do with how do I do this anyway? On Mon, May 25, 2009 at 11:02 AM, Mike Hearn mh.in.engl...@gmail.com wrote: The server and url in question is

[android-developers] Re: Webview + self signed ssl cert

2009-05-25 Thread Mike Hearn
The server and url in question is private and no one apart from myself will ever use it. Personally, I can't see the point of getting a proper signed certificate for this. Well, read the link I sent. If you're using encryption, presumably you're worried about somebody attempting to snoop your

[android-developers] Re: Webview + self signed ssl cert

2009-05-24 Thread Mariano Kamp
When I have issues like that I check how the built-in browser handles the url. On Sun, May 24, 2009 at 10:47 PM, Al alcapw...@googlemail.com wrote: Hi, I'm using webview to try and load a url over a https connection, but all I get is a blank page. I've set up my WebViewClient and overrode the

[android-developers] Re: Webview + self signed ssl cert

2009-05-24 Thread Mike Hearn
Don't use self signed certs? http://www.gerv.net/security/self-signed-certs/ There's a reason they are treated as an error I appreciate it may *seem* like you're adding security without any cost, but you really aren't, especially on a phone where MITM attacks are a whole lot more feasible

[android-developers] Re: Webview + self signed ssl cert

2009-05-24 Thread Al
I have checked the browser, but it uses a method not available in the sdk to handle ssl errors. Inside TabControl.java, it has this: private class SubWindowClient extends WebViewClient { . @Override public void onReceivedSslError(WebView view, SslErrorHandler handler,

[android-developers] Re: Webview + self signed ssl cert

2009-05-24 Thread Al
Mike, I missed your reply, it must have been posted while I was still replying. The server and url in question is private and no one apart from myself will ever use it. Personally, I can't see the point of getting a proper signed certificate for this. But regardless, it should be possible to to

[android-developers] Re: Webview + self signed ssl cert

2009-05-24 Thread PeeDee
Al, I really wouldn't bother with self-signed certificates for obvious reasons. If you are looking for little or no cost you could try a free cert from here: http://www.startssl.com/?app=0 Mind you I haven't tested a cert from startssl so please let us know if they work :-) Hope this