On Mon, Nov 5, 2012 at 9:27 AM, Frans van Niekerk
<[email protected]> wrote:
> According to the android.net.SSLCertificateSocketFactory

I wouldn't recommend using that class or anything related to it if you
can avoid it.

The Android HttpsURLConnection documentation
http://developer.android.com/reference/javax/net/ssl/HttpsURLConnection.html
has an example of making an application specific X509TrustManager. If
you provide it a KeyStore containing your self-signed cert, it will
trust it.

-bri

-- 
You received this message because you are subscribed to the Google Groups 
"Android Security Discussions" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/android-security-discuss?hl=en.

Reply via email to