[Aerogear-users] SSL Issues

[Summers Pittman]

On Tue, Aug 16, 2016 at 11:23 AM, Christopher Fahey <chris at dealerrewards.net
> wrote:

> I am still not getting past this issue.  I am using Cordova.  Can someone
> explain to me the relationship between how the SSL connection in the
> AeroGear plugin and the Cordova application connection are related?  I am
> starting to get the impression that they are not the same.   I have a
> plugin that replaces the SystemWebViewClient with an object that overrides
> the "onReceivedSslError" function so that when a self signed SSL
> certificate is encountered it can be told to allow it however this function
> is never being called.
>
> Can someone please shed some light on this?  It sounds like others have
> done it but isn't anyone willing to share the secret on how it is
> accomplished?
>
>
>
Sure, I'll give it a shot.

Cordova provides an API for exposing native platform APIs to the javascript
runtime in a web view.  These APIs are called plugins.

So on Android You call the cordova code which calls a Cordova plugin which
calls native Android code.  Android native code does NOT like self signed
SSL certificates.  To use a self signed certificate you need to import that
certificate into your emulator or use certificate pinning found in Android
N.  Alternatively, don't use a self signed certificate.  There are several
free services you can use to to walk you through setting up a service with
a properly signed certificate.


>
> Christopher Fahey
> DealerRewards, Inc.
> Maryland Branch Office
> (410) 924-3185
> ------------------------------
> This electronic message transmission contains information from
> DealerRewards Inc. This message is confidential. It may also be privileged
> or otherwise protected by work-product immunity or other legal rules. If
> you have received it by mistake, please let us know by email reply and
> delete it from your system; you may not copy this message or disclose its
> contents to anyone.
> DISCLAIMER: Since 2006, the U.S. Government has been monitoring all
> internet communications. If you have information that you do not wish to
> have monitored, please send it using regular postal services to the address
> listed on our website.
> ------------------------------
> On 7/21/2016 1:45 PM, Summers Pittman wrote:
>
> Sorry, hit reply a bit faster than I meant to.
>
> You can also use https://www.openshift.com/ to host an instance of the
> push server, run the push server on port 8080, set up your own DNS
> configuration and add the signing certificate to Android's certificate
> store.
>
>
>
> On Thu, Jul 21, 2016 at 1:42 PM, Summers Pittman <supittma at redhat.com>
> wrote:
>
>> I used Android N and pin a certificate.
>>
>> https://blog.sagaoftherealms.net/?p=578
>>
>>
>>
>> On Thu, Jul 21, 2016 at 12:52 PM, Christopher Fahey <
>> chris at dealerrewards.net> wrote:
>>
>>> Finally have it running!  Not even sure what I did.  Now I am running
>>> into an SSL certificate error.  It seems that android has a self-signed
>>> certificate acceptance issue in the device when using SSL to accept
>>> notices.  What is everyone else using when connecting with SSL?   Is anyone
>>> using a Trust Manager?
>>>
>>> Christopher Fahey
>>> DealerRewards, Inc.
>>> Maryland Branch Office
>>> (410) 924-3185
>>> ------------------------------
>>> This electronic message transmission contains information from
>>> DealerRewards Inc. This message is confidential. It may also be privileged
>>> or otherwise protected by work-product immunity or other legal rules. If
>>> you have received it by mistake, please let us know by email reply and
>>> delete it from your system; you may not copy this message or disclose its
>>> contents to anyone.
>>> DISCLAIMER: Since 2006, the U.S. Government has been monitoring all
>>> internet communications. If you have information that you do not wish to
>>> have monitored, please send it using regular postal services to the address
>>> listed on our website.
>>> ------------------------------
>>>
>>>
>>> _______________________________________________
>>> Aerogear-users mailing list
>>> Aerogear-users at lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/aerogear-users
>>>
>>>
>>
>
>
> _______________________________________________
> Aerogear-users mailing listAerogear-users at lists.jboss.orghttps://lists.jboss.org/mailman/listinfo/aerogear-users
>
>
>
> _______________________________________________
> Aerogear-users mailing list
> Aerogear-users at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/aerogear-users/attachments/20160816/94fd82cf/attachment-0001.html