Skip to content
This repository has been archived by the owner on Feb 12, 2022. It is now read-only.

Allow self-signed SSL certificate? #18

Closed
x3ro opened this issue Jul 22, 2014 · 3 comments
Closed

Allow self-signed SSL certificate? #18

x3ro opened this issue Jul 22, 2014 · 3 comments

Comments

@x3ro
Copy link

x3ro commented Jul 22, 2014

Apparently Flock WebDav tests fail if using a self-signed SSL certificate. It'd be great if it was possible to proceed and accept the self-signed cert 😄

@rhodey
Copy link
Contributor

rhodey commented Jul 22, 2014

When Flock is configured to run with a user provided WebDAV service it uses Android's local trust store to validate certificates. To use an HTTPS WebDAV service of your own with Flock you will need to setup the WebDAV service with a cert signed by a certificate authority that is within your Android trust store.

DavDroid has a great article on importing self-signed certs to Android's trust store, you can find it here >> http://davdroid.bitfire.at/faq/entry/importing-a-certificate

A potential improvement could be to retrieve the certificate of the WebDAV server on setup and provide the user with a fingerprint and option to import.

@master-sonic
Copy link

You need to make sure to import your certificate authority on your Android's trust store and not the self-signed cert. Most howtos you find don't make use of a CA.
I found this post very helpful http://theheat.dk/blog/?p=1023

@rhodey
Copy link
Contributor

rhodey commented Jul 22, 2014

thanks for the link @master-sonic, I'm going to close this for now and make note to include this information in the "how to run your own sync service for flock" blog post.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

No branches or pull requests

3 participants