Tag: Studio

I am trying to establish a secure connection through my project in Android Studio. Which connects to an API in PHP. I manage to configure the PHP server so that it can be accessed via HTTPs, but from the project I cannot connect via HTTPs only. If you call the API from the project and the HTTP certificate is active, information is returned to me as well as if the certificate is not configured on the server.
This means that no distinction is made as to whether the certificate is active on the server or not. I always call over HTTPs and whether the certificate is active or not, it returns an answer.
I want to know if the code I have developed is correct and how to determine whether an HTTP connection has been established with the API service.

I'm appending the Android Studio project code,

    try {

        String link = "https://192.168.1.10/servicios/idiomasItems/consulta_idioma.php";


        HttpParams httpParameters = new BasicHttpParams();

        int timeoutConnection = 3000;
        HttpConnectionParams.setConnectionTimeout(httpParameters, timeoutConnection);

        int timeoutSocket = 5000;
        HttpConnectionParams.setSoTimeout(httpParameters, timeoutSocket);


        CertificateFactory cf = CertificateFactory.getInstance("X.509");

        InputStream raw = contexto.getApplicationContext().getAssets().open("certificadoPrueba_10.crt");


        if (raw == null) {
            System.out.println("OJO: ¡¡No existe el archivo de configuración!!");
        }
        else {
            System.out.println("OJO_ SI: ¡¡Existe el archivo de configuración!!");
        }



        Certificate ca;
        ca = cf.generateCertificate(raw);

        System.out.println("ca=" + ((X509Certificate) ca).getSubjectDN());

        raw.close();


        // Create a KeyStore containing our trusted CAs
        String keyStoreType = KeyStore.getDefaultType();
        KeyStore keyStore = KeyStore.getInstance(keyStoreType);
        keyStore.load(null, null);
        keyStore.setCertificateEntry("ca", ca);

        // Create a TrustManager that trusts the CAs in our KeyStore
        String tmfAlgorithm = TrustManagerFactory.getDefaultAlgorithm();
        TrustManagerFactory tmf = TrustManagerFactory.getInstance(tmfAlgorithm);
        tmf.init(keyStore);

        // Create an SSLContext that uses our TrustManager
        SSLContext context = SSLContext.getInstance("TLS");
        context.init(null, tmf.getTrustManagers(), null);





        KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());



            SSLSocketFactory sf = new CustomSSLSocketFactory(trustStore);

            sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

            //HttpParams params = new BasicHttpParams();
            SchemeRegistry registry = new SchemeRegistry();
            registry.register(new Scheme("https", sf, 443));

            //ClientConnectionManager ccm = new ThreadSafeClientConnManager(params, registry);
            //client= new DefaultHttpClient(ccm, params);

            ClientConnectionManager ccm = new ThreadSafeClientConnManager(httpParameters, registry);
            HttpClient httpClient = new DefaultHttpClient(ccm, httpParameters);




        HttpPost httppost = new HttpPost(link);

        List params = new ArrayList();

        params.add(new BasicNameValuePair("idioma", idioma(0).toJSON() ));

        httppost.setEntity(new UrlEncodedFormEntity(params));

        HttpResponse resp = httpClient.execute(httppost);
        respStr = EntityUtils.toString(resp.getEntity());


    } catch(Exception ex) {

        System.out.println("ERROR, " + ex.getMessage() );

        respStr = "ERR-" + ex.toString();

    }

    return respStr;