How to implement SSL Certification

Question

I'm using following method to implement SSL Certification in both java and android app but in many post I saw its not secure and only suitable for testing purposes. so can someone give me a example about implement SSL Certification for a production environment.?

TrustStrategy easyStrategy = new TrustStrategy() {
                @Override
                public boolean isTrusted(X509Certificate[] chain, String authType)
                        throws CertificateException {
                    // eh, why not?
                    return true;
                }
            };

            SchemeRegistry schemeRegistry = new SchemeRegistry();
            SSLContext sslcontext = SSLContext.getInstance("TLS");
            sslcontext.init(null, null, null);
            SSLSocketFactory ssf = new SSLSocketFactory(easyStrategy);
            ssf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

UPDATE : I found out the server I'm trying to access is issuing a self signed certificate when I connect to it through a web browser. here is the openssl output I got:

verify error:num=18:self signed certificate

and it also gives a lengthy code that it says server certificate. can I use it to create my own certificate and use it inside my applications.?

I want a solution not only for android but both desktop application and android. this seems like it I'll look through it and let you know. thank you :) — Sajith Rupasinghe
– Sajith Rupasinghe, Commented Sep 3, 2013 at 4:56
This is not 'implementing SSL certification'. This is just accepting any old certificate whatsoever. It is radically insecure. Please define your actual problem. Whatever it is, this is not an acceptable solution beyond testing purposes, and in my opinion not even then. — user207421
– user207421, Commented Sep 3, 2013 at 5:22
@EJP yes I found its insecure way. I want to make HTTP Restrequests to a web server. Its issuing its own Certification as I understand. So I don't know a way to use it in my application. so I used above method for testing. Now i need to know a secure method to do SSL Certification inside my application. — Sajith Rupasinghe
– Sajith Rupasinghe, Commented Sep 3, 2013 at 6:38

noname · Accepted Answer · 2015-06-08 08:50:29Z

1

If I understand your question correctly, you want a SSL certification for a production environment.

For this purpose, you cannot use the self-signed certification, which is the one you generate yourself. What you need is to buy a certification that is provided by some secure orgnizations.

If you just want to try it out, you can apply for a free trial SSL certification at Comodo. This works the same as the one you can buy, but it is only valid for 3 month.

I don't know which server are you running, but after you get the certification, you just need to upload it to your server. I think this part you can easily find online.

answered Jun 8, 2015 at 8:50

noname

3891 gold badge3 silver badges14 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to implement SSL Certification

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related