Guestbook

[Hakky54]

Hi all 👋🏼

First of all I appreciate that you guys are using this library! I am very happy to see the community is growing.
I hope it is making your life easier when configuring ssl for your server of http client. This library is grown to the current state thanks to the ideas and feedback from the community.

I am curious about your use case and would love to hear your story.

• How did you find this library?
• What challange/problem did it solve for you?
• Is it easy to use?
• What can be improved?
• Which functionality are you using?
• Would you like to showcase your code snippets of your use case?

[singhmann1]

Hi,

Just had a quick question, does this library support calling withTrustMaterial for PEM files as well as JKS. I wish to enable the SSLFactory also by using some certs I have in .PEM files instead of importing into my JKS which is already working with the library

Thanks

[Hakky54]

Yes, that is possible. There is an extension library available which provides all of the options to load pem files from classpath/filesystem/inputstream. See here for detailed documentation: https://github.com/Hakky54/sslcontext-kickstart#using-pem-files. An example code snippet while using pem files would be:

X509ExtendedKeyManager keyManager = PemUtils.loadIdentityMaterial("certificate.pem", "private-key.pem");
X509ExtendedTrustManager trustManager = PemUtils.loadTrustMaterial("some-trusted-certificate.pem");

SSLFactory sslFactory = SSLFactory.builder()
    .withIdentityMaterial(keyManager)
    .withTrustMaterial(trustManager)
    .build();

[singhmann1]

withTrustMaterial(is, truststore ...) is working
also want to invoke withTrustMaterials(is, PEM..)

[Hakky54]

I have posted the answer here: #302 (reply in thread) It is possible however slightly different. You need to use the PemUtils and provide the returned object to the SSLFactory

[singhmann1]

Hi,

I have added the certificate which is a Self-signed cert in a PEM file and initialised with .withTrustMaterial(/path/cert.pem)

In connecting to the server with a self signed cert I am getting SSL error None of the trustmanagers trust this certificate.

I have enabled SSL debug and can see the self signed certificate in the logs.

Is there any other change I need to make?

Thanks

[Hakky54]

It seems like the certificate file which you have added is not the same as what the server is providing and therefor also complaining that none of the trustmanagers are trusting the server certificate. Can you extract the server certificate with Certificate Ripper in pem format and retry?

[rogergcc]

I haven't used this library yet and I found it searching a image o icon about android + key in google images
and first option was the thumbnail of this repo

In other hand im interested i sslpinning or certificate pinning usin Publick Key(PK) technique for Android kotlin
a something related to no allow self-signef certificate for in a app

[Hakky54]

Hi mate, thank you for sharing your journey! I am not an Android Developer, however I know that SSL pinning is a common practice however, I found out that it is obsolete. If you are still seeking for a way to configure SSL pinning, this might be useful while using okhttp https://stackoverflow.com/a/33935744/6777695

If the self signed certificate is not added to the truststore it won't be trusted, so that one should be easy to not allowing self signed certificates