ssl - How to make NanoHTTPD on Android accept connection from client with dedicated client certificate -


i make web service on android device using nanohttpd. trust certificate , accept ssl connection client. want limit access specific client only.

update: try work this:

        string keystorepass = "test";         char[]ctpass = keystorepass.tochararray();         keystore ks = keystore.getinstance("pkcs12");          //directly load cert resources         //ks.load(ctx.getresources().openrawresource(r.raw.cayan_cert),kspass);          //or dynamically generate cert , use         ipaddressincn = mainapplication.getipaddress();          //use current ip address generate cert signed hard coded ca, , add keystore         string cn = "cn=" + ipaddressincn;         ks.load(null, null);         generatecsr.addcerttokeystore(ks, ctpass, cn);          keymanagerfactory kmf = keymanagerfactory.getinstance(keymanagerfactory.getdefaultalgorithm());         kmf.init(ks, ctpass);          sslcontext sc = sslcontext.getinstance("tls");          trustmanager[] tm = new trustmanager[]{new x509trustmanager() {              public java.security.cert.x509certificate[] getacceptedissuers() {                  return new java.security.cert.x509certificate[0];             }              public void checkclienttrusted(java.security.cert.x509certificate[] certs,                                            string authtype) {                 system.out.println("abc");                 return;             }              public void checkservertrusted(java.security.cert.x509certificate[] certs,                                            string authtype) {                  return;             }          }};          sc.init(kmf.getkeymanagers(), tm, null);         server.makesecure(sc.getserversocketfactory(), null);

i try set break point custom trust manager functions never called.

but trust certificate , accept ssl connection client.

not true. accept ssl connections clients trusted certificates, unless have installed brain-dead trust-all-certificates garbage, in case should remove them.

i want limit access specific client only.

you should via authorization, have implement in nanohttpd.


Comments

Post a Comment

Popular posts from this blog

python Tkinter Capturing keyboard events save as one single string -

is possible store keyboard events 1 string? code below stores 1 char , prints it. card reader or bar code reader, contains collection of character/ string not 1 character @ time. goal save char pressed text variable. from tkinter import * root = tk() def key(event): text= event.char text+= event.char print ("pressed", text) def callback(event): frame.focus_set() print ("clicked at", event.x, event.y) frame = frame(root, width=100, height=100) frame.bind("<key>", key) frame.bind("<button-1>", callback) frame.pack() root.mainloop() currently, creating text variable , everytime key() function gets called, , text stores last character typed. you can define text module level variable , , use module level text inside key function - text = '' def key(event): global text text+= event.char print("pressed", text)
Read more

android - InAppBilling registering BroadcastReceiver in AndroidManifest -

i'm implementing inapp billing in android app. works well, however, i'm trying decouple broadcast receiver activity manifest. suggestion in android's trivialdrive sample: // important: dynamically register broadcast messages updated purchases. // register receiver here instead of <receiver> in manifest // because call getpurchases() @ startup, therefore can ignore // broadcasts sent while app isn't running. // note: registering listener in activity bad idea, done here // because sample. regardless, receiver must registered after // iabhelper setup, before first call getpurchases(). currently there's class extends broadcastreceiver : public class iabbroadcastreceiver extends broadcastreceiver { /** * intent action receiver should filter for. */ public static final string action = "com.android.vending.billing.purchases_updated"; private final iabbroadcastlistener mlistener; public iabbroadcastreceiver(iabbroadcastlistener listener) { m
Read more

javascript - Z-index in d3.js -

i have map , when hover effect on region of map below yellow line , circle, last ones disappear. how can solve problem? http://jsfiddle.net/ot21n9qx/ var arc = g.append("path") .style("fill", "none") .style("stroke", "yellow") .style("stroke-width", 2) .attr("d", "m" + pathorigin[0] + "," + pathorigin[1] + " q" + svgpoint[0] + "," + pathorigin[1] + " " + svgpoint[0] + "," + svgpoint[1]); var circlesize = d3.scale.linear() .domain([0, 0.5, 1]) .range([4, 10, 4]); svg not have z order draws objects in order created. need create path , circle after create highlight regions. here forked fiddle: http://jsfiddle.net/o00fzgaf/1/
Read more