Overriding an untrusted server certificate in Android

[Resonant]

It would be great if I could override this error when connecting to my home server from the Android client with SSL:

"Error: Connection failure. Not trusted server certificate."

It's not trusted because I generated the certificate myself and I'm connecting to a static IP address and not a domain.

The Subsonic Android client is more demanding than the Android web browser, which warns the certificate is untrusted by lets me connect to my Subsonic server anyway.

Until there's a fix, I think Android + SSL is impossible without maintaining an actual DNS name for your server.

[steeef]

This would be nice. External players also seem to have an issue with untrusted certificates (e.g., VLC), but that's another issue altogether.

[cybertronian]

Agreed, it would be awesome if the android app could support untrusted certificates.

Until there's a fix, I think Android + SSL is impossible without maintaining an actual DNS name for your server.

Just so we're clear, it's the fact that it's a self-signed cert (and hence NOT signed by an external trusted certificate authority) that's the root issue in the app. Having a self-signed cert for your server with a DNS name isn't enough.

This was also a problem in the original android email app, which has since been addressed both in the app and in the K-9 email app.