StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

POCreate SSL-Socket on Android with self-signed certificate
text
Body
copied!<p>I'm trying to connect an Android app to a SSL-enabled server, which uses a self-signed certificate. I've already read through dozens of tutorials and the app is now accepting the certificate & connecting to the server, but I never get any data back.</p> <p>The original code i used to initialize the socket is this:</p> <pre><code>//passphrase for keystore char[] keystorePass="password".toCharArray(); //load own keystore (MyApp just holds reference to application context) KeyStore keyStore=KeyStore.getInstance("BKS"); keyStore.load(MyApp.getStaticApplicationContext().getResources().openRawResource(R.raw.keystore),keystorePass); //create a factory TrustManagerFactory trustManagerFactory=TrustManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm()); trustManagerFactory.init(keyStore); //get context SSLContext sslContext=SSLContext.getInstance("TLS"); //init context sslContext.init( null, trustManagerFactory.getTrustManagers(), new SecureRandom() ); //create the socket Socket socket=sslContext.getSocketFactory().createSocket("hostname",443); socket.setKeepAlive(true); </code></pre> <p>Afterwards, the run loop of the receiver thread uses <em>socket.getInputStream()</em> to access the input stream. As long as I use an unencrypted connection, this works without a problem. But the secure connection does not <strong>retrieve any data</strong> from the socket. I've verified this by adding log messages to the receive loop and even used OpenSSL's s_server to check. I retrieved data from the client, but the client never received anything I sent to it.</p> <p>As a last test, I tried to open a connection to www.google.com:443 like this:</p> <pre><code>javax.net.SocketFactory fact=SSLSocketFactory.getDefault(); Socket socket=fact.createSocket(_config.getUri().getHost(), _config.getUri().getPort()); </code></pre> <p>Still the same result, connection works but using the InputStream I receive nothing from the server.</p> <p>Anybody got any ideas?</p> <p><strong>EDIT:</strong></p> <p>I'm currently not allowed to answer my own question, but here's the answer: Well, turns out the problem WAS the receive loop. I relied on <code>InputStream.available()</code> to get the number of bytes to read, but didn't realize it was rather unreliable (always returns 0 for SSL socket). So I switched the receive loop to use the blocking <code>read()</code> instead.</p>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload