Page 1 of 1

Overriding an untrusted server certificate in Android

PostPosted: Sun Dec 27, 2009 7:26 pm
by Resonant
It would be great if I could override this error when connecting to my home server from the Android client with SSL:

"Error: Connection failure. Not trusted server certificate."

It's not trusted because I generated the certificate myself and I'm connecting to a static IP address and not a domain.

The Subsonic Android client is more demanding than the Android web browser, which warns the certificate is untrusted by lets me connect to my Subsonic server anyway.

Until there's a fix, I think Android + SSL is impossible without maintaining an actual DNS name for your server.

PostPosted: Tue Dec 29, 2009 5:37 pm
by steeef
This would be nice. External players also seem to have an issue with untrusted certificates (e.g., VLC), but that's another issue altogether.

Re: Overriding an untrusted server certificate in Android

PostPosted: Mon Jan 04, 2010 3:34 pm
by cybertronian
Agreed, it would be awesome if the android app could support untrusted certificates.

Resonant wrote:Until there's a fix, I think Android + SSL is impossible without maintaining an actual DNS name for your server.


Just so we're clear, it's the fact that it's a self-signed cert (and hence NOT signed by an external trusted certificate authority) that's the root issue in the app. Having a self-signed cert for your server with a DNS name isn't enough.

This was also a problem in the original android email app, which has since been addressed both in the app and in the K-9 email app.