I iCAB Well-Known Member Licensed User Longtime User Mar 16, 2019 #1 Hi All Does any one have a sample code that shows how to install ( programmatically) a certificate returned by a Certificate Authority and insure that the http client uses the certificate later on when using https. Something similar to: https://chariotsolutions.com/blog/post/https-with-client-certificates-on/ Thanks iCAB
Hi All Does any one have a sample code that shows how to install ( programmatically) a certificate returned by a Certificate Authority and insure that the http client uses the certificate later on when using https. Something similar to: https://chariotsolutions.com/blog/post/https-with-client-certificates-on/ Thanks iCAB
Erel B4X founder Staff member Licensed User Longtime User Mar 17, 2019 #2 Does the server expect a client certificate? Or the server certificate is not trusted? Upvote 0
I iCAB Well-Known Member Licensed User Longtime User Mar 17, 2019 #3 Erel said: Does the server expect a client certificate? Or the server certificate is not trusted? Click to expand... The client supposed to request a certificate from the server. Server replies with two certificates This what the spec says: "Once the client receives a response from the server, the certificates (certificate1 and certifificate2), in base64 format, must be retrieved and recorded in a certificate file. Lastly, the certificates must be securely installed and stored in the client's device" . Certificate1: contains the digital certificate with the server's public key. Certificate2: contains the client's digital certificate Two things in here Where do we install the certificates in the device and how? How do we guarantee that the Http client is actually loading and using the proper certificate when communicating with the server Thank you iCAB Last edited: Mar 17, 2019 Upvote 0
Erel said: Does the server expect a client certificate? Or the server certificate is not trusted? Click to expand... The client supposed to request a certificate from the server. Server replies with two certificates This what the spec says: "Once the client receives a response from the server, the certificates (certificate1 and certifificate2), in base64 format, must be retrieved and recorded in a certificate file. Lastly, the certificates must be securely installed and stored in the client's device" . Certificate1: contains the digital certificate with the server's public key. Certificate2: contains the client's digital certificate Two things in here Where do we install the certificates in the device and how? How do we guarantee that the Http client is actually loading and using the proper certificate when communicating with the server Thank you iCAB
Erel B4X founder Staff member Licensed User Longtime User Mar 18, 2019 #4 OkHttp currently doesn't support client certificates. Upvote 0
I iCAB Well-Known Member Licensed User Longtime User Mar 18, 2019 #5 Erel said: OkHttp currently doesn't support client certificates. Click to expand... What are my options with B4A? Upvote 0
Erel said: OkHttp currently doesn't support client certificates. Click to expand... What are my options with B4A?
Erel B4X founder Staff member Licensed User Longtime User Mar 18, 2019 #6 You will need to create a library for this. Upvote 0
I iCAB Well-Known Member Licensed User Longtime User Mar 19, 2019 #7 Erel said: You will need to create a library for this. Click to expand... That's going to be a problem for me Thank you Upvote 0
Erel said: You will need to create a library for this. Click to expand... That's going to be a problem for me Thank you
