How to create an https Connection?

Question

My code works for http, but not https. I'm trying to make Https connections on the Android phones, using HttpClient. Trouble is that i keep getting net.ssl.SSLPeerUnverifiedException: No peer certificate. and Caused by: java.security.cert.CertificateException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.

Here is the relavent code for the Custom HttpClient.

public static HttpClient getNewHttpClient() {

     HttpParams params = new BasicHttpParams();
     HttpProtocolParams.setVersion(params, HttpVersion.HTTP_1_1);
     HttpProtocolParams.setContentCharset(params, HTTP.DEFAULT_CONTENT_CHARSET);
     HttpProtocolParams.setUseExpectContinue(params, true);

     SchemeRegistry schReg = new SchemeRegistry();
     schReg.register(new Scheme("http", PlainSocketFactory.getSocketFactory(), 80));
     schReg.register(new Scheme("https", SSLSocketFactory.getSocketFactory(), 443));
     ClientConnectionManager conMgr = new ThreadSafeClientConnManager(params, schReg);

     DefaultHttpClient http = new DefaultHttpClient(conMgr, params);
     UsernamePasswordCredentials credentials = new UsernamePasswordCredentials("name", "pass");
     AuthScope authScope = new AuthScope(AuthScope.ANY_HOST, AuthScope.ANY_PORT);
     http.getCredentialsProvider().setCredentials(authScope, credentials);

     return http;
}

this is the code for getting information from the server

public static void Get() {

    HttpClient http = getNewHttpClient();    

    HttpResponse response;
    try {
        HttpGet httpost = new HttpGet(url);
        response = http.execute(httpost);
        BufferedReader in = null;
        Log.i(TAG, "resp-" + response);
        in = new BufferedReader(new InputStreamReader(response.getEntity()
                .getContent()));
        StringBuffer sb = new StringBuffer("");
        String line = "";
        String NL = System.getProperty("line.separator");
        while ((line = in.readLine()) != null) {
            sb.append(line + NL);
        }
        in.close();
        String page = sb.toString();
        Log.i(TAG, "res=" + sb.toString());
        tv.setText(page);
    } catch (ClientProtocolException e) {
        Log.i(TAG, "ClientProtocolException=" + e);
        e.printStackTrace();
    } catch (IOException e) {
        Log.i(TAG, "ClientProtocolException=" + e);
        e.printStackTrace();
    }
}

Any thoughts?

i am getting this error : javax.net.ssl.SSLPeerUnverifiedException: No peer certificate — RajaReddy PolamReddy, Aug 27 '12 at 06:21
http://developer.android.com/reference/javax/net/ssl/HttpsURLConnection.html I have solved my problem before 2 months ago from the above link's reference. — V.J., Aug 27 '12 at 06:22

score 2 · Accepted Answer · answered Aug 29 '12 at 06:25

Finally i got the solution to my Problem, for this solution i searched a lot in three days. Problem with the authentication of the server with the username and password. I changed code like this. i am passing credentials to the server that is only change in my code other than code available in the Question..

public static HttpClient _getNewHttpClient() {
    try {
        KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
        trustStore.load(null, null);

        SSLSocketFactory sf = new MySSLSocketFactory(trustStore);
        sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

        HttpParams params = new BasicHttpParams();
        HttpProtocolParams.setVersion(params, HttpVersion.HTTP_1_1);
        HttpProtocolParams.setContentCharset(params, HTTP.UTF_8);

        SchemeRegistry registry = new SchemeRegistry();
        registry.register(new Scheme("http", PlainSocketFactory.getSocketFactory(), 80));
        registry.register(new Scheme("https", sf, 443));

        ClientConnectionManager ccm = new ThreadSafeClientConnManager(params, registry);

        DefaultHttpClient http = new DefaultHttpClient(ccm, params);
        UsernamePasswordCredentials credentials = new UsernamePasswordCredentials("jk", "jk");
        AuthScope authScope = new AuthScope(AuthScope.ANY_HOST, AuthScope.ANY_PORT);
        http.getCredentialsProvider().setCredentials(authScope, credentials);

        return http;
    } catch (Exception e) {
        return new DefaultHttpClient();
    }
}

Adding a TrustManager with an empty truststore couldn't possibly solve this problem. The solution more probably lies in the undisclosed magic of your `MySSLSocketFactory`. — user207421, Aug 29 '12 at 09:59
i tried all the solutions available in the SO finally i got solution from this http://stackoverflow.com/a/4837230/964741 — RajaReddy PolamReddy, Aug 29 '12 at 10:10

score -1 · Answer 2 · edited May 23 '17 at 12:02

-1

Try looking at how https over HttpClient was implemented in the answers in this post: Trusting all certificates using HttpClient over HTTPS

They have talked in detail on Keystore and TrustManager

edited May 23 '17 at 12:02

Community

1
1

answered Aug 28 '12 at 05:11

Soham

4,940
3
31
48

i was read those answers. still i am confused about keystore..by using trust manager i am getting unauthorized error... – RajaReddy PolamReddy Aug 28 '12 at 05:14

How to create an https Connection?

2 Answers2

Linked