SSLCertificateSocketFactory Class

Definition

        <ul>
        <li>Timeout specification for SSL handshake operations
        <li>Hostname verification in most cases (see WARNINGs below)
        &lt;li&gt;Optional SSL session caching with <code data-dev-comment-type="c">SSLSessionCache</code>&lt;li&gt;Optionally bypass all SSL certificate checks
        &lt;/ul&gt;

        The handshake timeout does not apply to actual TCP socket connection.

[Android.Runtime.Register("android/net/SSLCertificateSocketFactory", DoNotGenerateAcw=true)]
public class SSLCertificateSocketFactory : Javax.Net.Ssl.SSLSocketFactory

[<Android.Runtime.Register("android/net/SSLCertificateSocketFactory", DoNotGenerateAcw=true)>]
type SSLCertificateSocketFactory = class
    inherit SSLSocketFactory

Inheritance

Object

Object

SocketFactory

SSLSocketFactory

SSLCertificateSocketFactory

Attributes

RegisterAttribute

Remarks

SSLSocketFactory implementation with several extra features:

<ul> <li>Timeout specification for SSL handshake operations <li>Hostname verification in most cases (see WARNINGs below) <li>Optional SSL session caching with SSLSessionCache<li>Optionally bypass all SSL certificate checks </ul>

The handshake timeout does not apply to actual TCP socket connection. If you want a connection timeout as well, use #createSocket() and Socket#connect(java.net.SocketAddress, int), after which you must verify the identity of the server you are connected to.

<p class="caution"><b>Most SSLSocketFactory implementations do not verify the server's identity, allowing person-in-the-middle attacks.</b> This implementation does check the server's certificate hostname, but only for createSocket variants that specify a hostname. When using methods that use InetAddress or which return an unconnected socket, you MUST verify the server's identity yourself to ensure a secure connection.

Refer to Updating Your Security Provider to Protect Against SSL Exploits for further information.</p>

The recommended way to verify the server's identity is to use HttpsURLConnection#getDefaultHostnameVerifier() to get a HostnameVerifier to verify the certificate hostname.

<b>Warning</b>: Some methods on this class return connected sockets and some return unconnected sockets. For the methods that return connected sockets, setting connection- or handshake-related properties on those sockets will have no effect.

On development devices, "setprop socket.relaxsslcheck yes" bypasses all SSL certificate and hostname checks for testing purposes. This setting requires root access.

This member is deprecated. This class has less error-prone replacements using standard APIs. To create an SSLSocket, obtain an SSLSocketFactory from SSLSocketFactory#getDefault() or javax.net.ssl.SSLContext#getSocketFactory(). To verify hostnames, pass "HTTPS" to javax.net.ssl.SSLParameters#setEndpointIdentificationAlgorithm(String). To enable ALPN, use javax.net.ssl.SSLParameters#setApplicationProtocols(String[]). To enable SNI, use javax.net.ssl.SSLParameters#setServerNames(java.util.List).

Java documentation for android.net.SSLCertificateSocketFactory.

Portions of this page are modifications based on work created and shared by the Android Open Source Project and used according to terms described in the Creative Commons 2.5 Attribution License.

Constructors

Properties

Methods

Explicit Interface Implementations

Extension Methods

Applies to