Android Question OkHttpUtils & SSL: Check certificate/server's identity

[KMatle]

I'm using SSL (https with my apps a long time and I never cared about what OkHttpUtils is doing in the background. I never had any issues with SSL (like certificate problems or similar) because my hoster cares for it (so it's a black box to me). I've studied some articles about SSL certificates but one question remains:

Does the mighty OkHttpUtils check the identity of my server, too via certificate? Or is it all about "the certificate is valid"?

 

[Erel]

Assuming that you are not using OkHttpClient.InitializeAcceptAll then it will only continue with the connection if the certificate is valid and matches the server domain. So yes, it verifies the server identity.

 

[victormedranop]

what about mutual tls, i have a customer that will provide me this method to connect.
because the facility of revócate any certification.

I think can be done with network library

https://www.b4x.com/android/forum/threads/network-v1-50-adds-support-for-ssl-sockets.55871/

victor