Self Signed Certificates on Android

[seanpkeown]

Hi Sindre,
I was wondering if you could implement a way for the android client to accept self signed certificates? I don't know if its possible but i thought that i would ask.

When i try to use one i get the following error.

Code: Select all

09-26 03:02:53.082  4482  7948 W RESTMusicService: javax.net.ssl.SSLException: Not trusted server certificate
09-26 03:02:53.082  4482  7948 W RESTMusicService:      at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.s
tartHandshake(OpenSSLSocketImpl.java:372)
09-26 03:02:53.082  4482  7948 W RESTMusicService:      at org.apache.http.conn.ssl.AbstractVerifier.verify(Abstract
Verifier.java:92)
09-26 03:02:53.082  4482  7948 W RESTMusicService:      at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(S
SLSocketFactory.java:321)

Thanks for this wonderful product.... I don't know how i ever survived with out it.

~ Sean K

[adi]

I'd like to echo this request - ability to use self-signed certificates would be great.

I've actually tried looking into creating a patch myself but time, no android programming experience and rusty programming skills is meaning the progress is slow going.

found a few good articles through google - and some custom classes which could be allow this.

[nullchar]

If you have rooted your phone, you can follow these instructions on adding your self-signed cert to the system keystore.

http://wiki.cacert.org/ImportRootCert#Android_Phones

If you're not sure how to add your self-signed cert to a java keystore, you can follow the first two steps here:

http://blog.crazybob.org/2010/02/android-trusting-ssl-certificates.html


That said, having the ability to add a keystore to the /subsonic/ folder as a non root user would be great; the ability to click "temporarily accept" or "permanently accept" upon server setup would be even better.

[sindre_mehus]

Self-signed certs are supported in version 1.8.2

Cheers,
Sindre

[seanpkeown]

Self-signed certs are supported in version 1.8.2

Cheers,
Sindre

Your the best Sindre...

Anyone who's wanting to encrypt your connection to subsonic i created a tutorial on how to self sign your own certificates in windows.

http://forum.subsonic.org/forum/viewtopic.php?t=4247

[ootuoyetahi]

and its awesome.. I love that I now have the ability to SECURELY stream my music collection to my Phone. Thanks Sindre.

[nullchar]

Awesome! I was trying 1.8.1 from the SourceForge download instead of using the latest (now 1.8.3) from the Market.

Streaming works great over HTTPS using a self-signed cert. Thanks again Sindre for a great product (server and app)!