using a self-signed certificate, or a signed certificate that it doesn't like for some reason (I suspect some protocols are only partially implemented), then it rejects it altogether.

The only way I was able to get around it was by using HttpsURLConnection instead of HttpClient, and setting a dummy TrustManager before use. See code below. Hope this helps.

Justin Morgenthau

private static TrustManager[] trustManagers;

public static class _FakeX509TrustManager implements javax.net.ssl.X509TrustManager { private static final X509Certificate[] _AcceptedIssuers = new X509Certificate[] {};

public void checkClientTrusted(X509Certificate[] arg0, String arg1) throws CertificateException { }

public void checkServerTrusted(X509Certificate[] arg0, String arg1) throws CertificateException { }

public boolean isClientTrusted(X509Certificate[] chain) { return(true); }

public boolean isServerTrusted(X509Certificate[] chain) { return(true); }

public X509Certificate[] getAcceptedIssuers() { return(_AcceptedIssuers); } }

public static void allowAllSSL() {

javax.net.ssl.HttpsURLConnection.setDefaultHostnameVerifier (new HostnameVerifier(){ public boolean verify ( String hostname, SSLSession session) { return true; } });

javax.net.ssl.SSLContext context=null;

if(trustManagers == null) { trustManagers = new javax.net.ssl.TrustManager[]{new _FakeX509TrustManager()}; }

try { context = javax.net.ssl.SSLContext.getInstance("TLS"); context.init(null, trustManagers, new SecureRandom()); } catch (NoSuchAlgorithmException e) { Log.e("allowAllSSL", e.toString()); } catch (KeyManagementException e) { Log.e("allowAllSSL", e.toString()); }

javax.net.ssl.HttpsURLConnection.setDefaultSSLSocketFactory( context.getSock­etFactory()); }

On Mar 18, 8:33 am, gopi...@gmail.com wrote:

- Show quoted text -