https connect

[ofdrykkja]

i'm trying to use your client for connect to https server. i'm calling method setDefaultSSLSocketFactory(getFactory()), but nothing happens - no connect, no errors, no warnings.
getFactory code:

public static SSLSocketFactory getFactory() throws Exception {
        KeyStore trusted = KeyStore.getInstance("BKS");
        InputStream in = context.getResources().openRawResource(R.raw.mystore);
        try {
            trusted.load(in, "pass".toCharArray());
        } catch (Exception e) {
            throw new AssertionError(e);
        } finally {
            in.close();
        }

        TrustManagerFactory tmf = TrustManagerFactory.getInstance("X509");
        tmf.init(trusted);

        SSLContext ssl_context = SSLContext.getInstance("TLS");
        ssl_context.init(null, tmf.getTrustManagers(), null);

        return ssl_context.getSocketFactory();
    }

connect to server code:

try {
            socket = new SocketIO(context.getString(R.string.baseurl));
        } catch (MalformedURLException e1) {
            online = false;
            //e1.printStackTrace();
        }
        try {
            socket.setDefaultSSLSocketFactory(getFactory());
        } catch (Exception e2) {
            // TODO Auto-generated catch block
            e2.printStackTrace();
        }
        socket.connect(new IOCallback() {
//...

tell me please what i'm doing wrong?

[Gottox]

Hi sweetrenard!

This could be a bug in this implementation. Unfortunally I'm currently involved in my house moving. I'll investigate in this issue at the end of next week.

[ofdrykkja]

Thank you for your attention!

[rsla]

Hello.
after a little investigation, I have found reason of this inconvienience.

1. Unfortunatly, WebSocketConnection uses different SSLSocketFactory than you have created via your new SSLContext.
2. Therefore WebSocketConnection uses different (default) TrustManager during wss handshaking
3. In next consequence yours host certificate is untrusted and exception is generated during create WSS socket.
4. Unfortunatly, IOConnection.transportError does not log an error before reconect (infinity reconnect cycle)

How is workarround for my case (I think for you too):

1. To pass ssl_context.getSocketFactory(); to WebSoccketConnection layer I've used HttpsURLConnection.setDefaultSSLSocketFactory(ssl_context.getSocketFactory());
   (I think that your socket.setDefaultSSLSocketFactory(getFactory()); is enought)
2. To use this factory I've modified WebSoccketConnection.createSocket() for WSS connection ;-):
   SocketFactory factory = HttpsURLConnection.getDefaultSSLSocketFactory(); // instead of SSLSocketFactory.getDefault();
3. In addition I've set my own host verifier:
   HttpsURLConnection
   .setDefaultHostnameVerifier(new HostnameVerifier() {
   @OverRide
   public boolean verify(String s, SSLSession sslsession) {
   Log.i(this.getClass().getName(), "Accepted host " + s
   + " during SSL Handshaking");
   return true;
   }
   });

I couldn't find better way for now.
It's working.

[Gottox]

Thanks :)

So it's a bug in Weberknecht which prevents to implement this properly. I suspect switching the Websocket library is the sanest solution to this issue. Java-Websocket seems nice, but I remembering having issues with this library. I'll try it today.

regards

Enno

[tagrudev]

any progress on this :?

[Gottox]

Yes, @TooTallNate s library does the job well and supports custom SSLFactorys. Unfortunally to make this work, there will be a small API-Change to socket.io-java-client. Expect an update today. :)

[Gottox]

Please recheck current master. Does it work as desired?

[tagrudev]

https://gist.github.com/3698101 I cant build it any ideas ?

[mvecchio]

Hi,
try to change the following line in build.xml:

With the following

[Gottox]

Recheck master. :)

[tagrudev]

Can you give an example usage ? Here is a Gist on my onCreate() method ->

https://gist.github.com/3714074

It doesnt seem to get inside the connect method :|

[tagrudev]

any ideas ?>

[Gottox]

Hi!

See https://github.com/TooTallNate/Java-WebSocket/blob/master/example/SSLClientExample.java for using an SSLContext in your source. SSL with socket.io-java-client is currently untested, so expect and report bugs.

kind regards :)

[Gottox]

Hell is SSL with Java fucked up... -.-

[tagrudev]

what if I don't want to use a key? I have a trusted RapidSSL.