[HTTPS] Problème de certificat

**Arno5788** · 04/11/2011, 09h31

Bonjour,

Je souhaite accéder à une page HTTPS et exécuter une requête GET.

J'ai suivi plusieurs tutos:
Ici et là et enfin celui là

J'ai ajouté mes certificats au keystore (toute l'arborescence), que j'ai lui même ajouté au projet: j'ai une exception type SSLHandshake lors de l'exécution. En gros ça plante lors de la vérification du certificat.

En essayant d'ajouter un certificat d'un autre site trouvé sur le net en testant la requête GET sur ce site, ça fonctionne.

Du coup j'ai essayé avec un site possédant la même arborescence de certificats que le mien: même erreur.

Le certificat est pourtant d'une compagnie reconnue. Cela fait 3 jours que j'essaie toutes les solutions possibles, en vain.

Avez-vous une idée ? Merci d'avance.

**Jimmy_** · 04/11/2011, 09h58

Bonjour,

Il faut la pile java exacte et complète que tu obtiens lors de l'erreur.
Sinon comme ça impossible de voir ce qui ne convient pas.

**David55** · 04/11/2011, 12h05

Aussi la différence entre les 2 certificats ...

**Arno5788** · 04/11/2011, 14h57

Merci pour vos réponses rapides.
L'exception est levée dans les méthodes CheckClientTrusted et CheckServerTrusted de la classe AdditionalKeyStoresSSLSocketFactory de cet exemple

Voilà le message d'erreur:

Code :

Sélectionner tout - Visualiser dans une fenêtre à part

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
11-03 10:54:58.629: WARN/System.err(20558): javax.net.ssl.SSLHandshakeException
11-03 10:54:58.629: WARN/System.err(20558):     at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:477)
11-03 10:54:58.629: WARN/System.err(20558):     at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl$SSLInputStream.<init>(OpenSSLSocketImpl.java:750)
11-03 10:54:58.629: WARN/System.err(20558):     at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.getInputStream(OpenSSLSocketImpl.java:692)
11-03 10:54:58.629: WARN/System.err(20558):     at org.apache.http.impl.io.SocketInputBuffer.<init>(SocketInputBuffer.java:93)
11-03 10:54:58.629: WARN/System.err(20558):     at org.apache.http.impl.SocketHttpClientConnection.createSessionInputBuffer(SocketHttpClientConnection.java:83)
11-03 10:54:58.629: WARN/System.err(20558):     at org.apache.http.impl.conn.DefaultClientConnection.createSessionInputBuffer(DefaultClientConnection.java:170)
11-03 10:54:58.629: WARN/System.err(20558):     at org.apache.http.impl.SocketHttpClientConnection.bind(SocketHttpClientConnection.java:106)
11-03 10:54:58.629: WARN/System.err(20558):     at org.apache.http.impl.conn.DefaultClientConnection.openCompleted(DefaultClientConnection.java:129)
11-03 10:54:58.629: WARN/System.err(20558):     at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:171)
11-03 10:54:58.629: WARN/System.err(20558):     at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:164)
11-03 10:54:58.629: WARN/System.err(20558):     at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:119)
11-03 10:54:58.629: WARN/System.err(20558):     at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:359)
11-03 10:54:58.633: WARN/System.err(20558):     at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:555)
11-03 10:54:58.633: WARN/System.err(20558):     at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:487)
11-03 10:54:58.633: WARN/System.err(20558):     at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:465)
11-03 10:54:58.633: WARN/System.err(20558):     at eu.mPulse.JSONActivity.getJSON(JSONActivity.java:71)
11-03 10:54:58.633: WARN/System.err(20558):     at eu.mPulse.JSONActivity.onCreate(JSONActivity.java:37)
11-03 10:54:58.633: WARN/System.err(20558):     at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1047)
11-03 10:54:58.633: WARN/System.err(20558):     at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:1611)
11-03 10:54:58.633: WARN/System.err(20558):     at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:1663)
11-03 10:54:58.633: WARN/System.err(20558):     at android.app.ActivityThread.access$1500(ActivityThread.java:117)
11-03 10:54:58.633: WARN/System.err(20558):     at android.app.ActivityThread$H.handleMessage(ActivityThread.java:931)
11-03 10:54:58.633: WARN/System.err(20558):     at android.os.Handler.dispatchMessage(Handler.java:99)
11-03 10:54:58.633: WARN/System.err(20558):     at android.os.Looper.loop(Looper.java:130)
11-03 10:54:58.637: WARN/System.err(20558):     at android.app.ActivityThread.main(ActivityThread.java:3683)
11-03 10:54:58.637: WARN/System.err(20558):     at java.lang.reflect.Method.invokeNative(Native Method)
11-03 10:54:58.637: WARN/System.err(20558):     at java.lang.reflect.Method.invoke(Method.java:507)
11-03 10:54:58.637: WARN/System.err(20558):     at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:839)
11-03 10:54:58.637: WARN/System.err(20558):     at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:597)
11-03 10:54:58.637: WARN/System.err(20558):     at dalvik.system.NativeStart.main(Native Method)
11-03 10:54:58.637: WARN/System.err(20558): Caused by: java.security.cert.CertificateException
11-03 10:54:58.637: WARN/System.err(20558):     at eu.mPulse.AdditionalKeyStoresSSLSocketFactory$AdditionalKeyStoresTrustManager.checkServerTrusted(AdditionalKeyStoresSSLSocketFactory.java:112)
11-03 10:54:58.637: WARN/System.err(20558):     at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.verifyCertificateChain(OpenSSLSocketImpl.java:664)
11-03 10:54:58.637: WARN/System.err(20558):     at org.apache.harmony.xnet.provider.jsse.NativeCrypto.SSL_do_handshake(Native Method)
11-03 10:54:58.637: WARN/System.err(20558):     at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:474)
11-03 10:54:58.637: WARN/System.err(20558):     ... 29 more
11-03 10:54:58.665: WARN/System.err(20558): javax.net.ssl.SSLHandshakeException
11-03 10:54:58.665: WARN/System.err(20558):     at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:477)
11-03 10:54:58.665: WARN/System.err(20558):     at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl$SSLInputStream.<init>(OpenSSLSocketImpl.java:750)
11-03 10:54:58.669: WARN/System.err(20558):     at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.getInputStream(OpenSSLSocketImpl.java:692)
11-03 10:54:58.669: WARN/System.err(20558):     at org.apache.http.impl.io.SocketInputBuffer.<init>(SocketInputBuffer.java:93)
11-03 10:54:58.669: WARN/System.err(20558):     at org.apache.http.impl.SocketHttpClientConnection.createSessionInputBuffer(SocketHttpClientConnection.java:83)
11-03 10:54:58.669: WARN/System.err(20558):     at org.apache.http.impl.conn.DefaultClientConnection.createSessionInputBuffer(DefaultClientConnection.java:170)
11-03 10:54:58.669: WARN/System.err(20558):     at org.apache.http.impl.SocketHttpClientConnection.bind(SocketHttpClientConnection.java:106)
11-03 10:54:58.669: WARN/System.err(20558):     at org.apache.http.impl.conn.DefaultClientConnection.openCompleted(DefaultClientConnection.java:129)
11-03 10:54:58.669: WARN/System.err(20558):     at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:171)
11-03 10:54:58.669: WARN/System.err(20558):     at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:164)
11-03 10:54:58.669: WARN/System.err(20558):     at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:119)
11-03 10:54:58.669: WARN/System.err(20558):     at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:359)
11-03 10:54:58.669: WARN/System.err(20558):     at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:555)
11-03 10:54:58.669: WARN/System.err(20558):     at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:487)
11-03 10:54:58.669: WARN/System.err(20558):     at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:465)
11-03 10:54:58.672: WARN/System.err(20558):     at eu.mPulse.JSONActivity.getJSON(JSONActivity.java:71)
11-03 10:54:58.672: WARN/System.err(20558):     at eu.mPulse.JSONActivity.onCreate(JSONActivity.java:37)
11-03 10:54:58.672: WARN/System.err(20558):     at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1047)
11-03 10:54:58.672: WARN/System.err(20558):     at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:1611)
11-03 10:54:58.672: WARN/System.err(20558):     at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:1663)
11-03 10:54:58.672: WARN/System.err(20558):     at android.app.ActivityThread.access$1500(ActivityThread.java:117)
11-03 10:54:58.672: WARN/System.err(20558):     at android.app.ActivityThread$H.handleMessage(ActivityThread.java:931)
11-03 10:54:58.672: WARN/System.err(20558):     at android.os.Handler.dispatchMessage(Handler.java:99)
11-03 10:54:58.672: WARN/System.err(20558):     at android.os.Looper.loop(Looper.java:130)
11-03 10:54:58.672: WARN/System.err(20558):     at android.app.ActivityThread.main(ActivityThread.java:3683)
11-03 10:54:58.672: WARN/System.err(20558):     at java.lang.reflect.Method.invokeNative(Native Method)
11-03 10:54:58.672: WARN/System.err(20558):     at java.lang.reflect.Method.invoke(Method.java:507)
11-03 10:54:58.672: WARN/System.err(20558):     at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:839)
11-03 10:54:58.676: WARN/System.err(20558):     at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:597)
11-03 10:54:58.676: WARN/System.err(20558):     at dalvik.system.NativeStart.main(Native Method)
11-03 10:54:58.676: WARN/System.err(20558): Caused by: java.security.cert.CertificateException
11-03 10:54:58.676: WARN/System.err(20558):     at eu.mPulse.AdditionalKeyStoresSSLSocketFactory$AdditionalKeyStoresTrustManager.checkServerTrusted(AdditionalKeyStoresSSLSocketFactory.java:112)
11-03 10:54:58.676: WARN/System.err(20558):     at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.verifyCertificateChain(OpenSSLSocketImpl.java:664)
11-03 10:54:58.676: WARN/System.err(20558):     at org.apache.harmony.xnet.provider.jsse.NativeCrypto.SSL_do_handshake(Native Method)
11-03 10:54:58.676: WARN/System.err(20558):     at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:474)
11-03 10:54:58.676: WARN/System.err(20558):     ... 29 more

J'ai refait un test avec l'url du site émetteur du certificat. L'arborescence est la même et là, la requête fonctionne. La différence est que le certificat de ce site existe déjà dans le keytool de base.

J'espère être clair dans mes explications.

Est-ce possible que le certificat de mon site soit invalide/buggé ?