java https connection error

[j.o.s.h.1408]

Hi i get the following exception thrown at me when trying to connect to a php server. the exception is:

javax.microedition.pki.CertificateException: Certificate was issued by an unrecognized entity

my code is below:

  public void open()
    {
        try
        {
            server = (HttpsConnection) Connector.open(url);
            
            is = server.openInputStream();
            os = server.openOutputStream();
            Alert alert = new Alert ("Error");
            alert.setString("everything working fine");
            alert.setTimeout (3000);
            Display.getDisplay(root).setCurrent(alert);
        }
        catch(Exception e)
        {
            e.printStackTrace();
            String error = e.toString();
            Alert alert = new Alert ("Error");
            alert.setString("Error, " + e);
            alert.setTimeout (5000);
            Display.getDisplay(root).setCurrent(alert);
                
                
        }
    }

[directhex]

the certificate authority who issued the target server's certificate is unknown

this is considered a security breach, and isn't allowed (as it could be a hacker's own CA, and offers you no implicit or explicit trust)

i don't know the java way of doing things, but you need to import the CA's public certificate (on ubuntu, that appears to be under system/preferences/sun java 6 control panel/security/certificates). good luck getting a certificate into the right format though!

[j.o.s.h.1408]

umm im gunna try and get the certificate from the php server somehow and then import it into my project.

how come on a regular web browser it works by allowing you to install the certificate? how come in phone devices you cant?

[directhex]

in a secure scenario, you don't necessarily want to allow the user to randomly install certificates easily

consider an app which connects to a secure company server for some reason - users will always click "yeah whatever" to bad ssl certificate warnings, so it's safer to place the onus on the admins/developers to ensure certificates are properly trusted

[j.o.s.h.1408]

ok cheers. i will try and get the certificate from our server guy but its proving to be a pain has his not giving it to me!

anyways i tried using a normal http connection and i managed to connect to the server but when i try to right something back to the server i get ajava.lang.illegalStateException stating a "Write attemped after request finished"

im using J2ME with netbeans by the way

here is a revised version of my code. hope someone can help thanks..

public void open()
    {
        try
        {
            server = (HttpConnection) Connector.open(url2);
            
            server.setRequestMethod(HttpConnection.POST);
            server.setRequestProperty("If-Modified-Since",
            "29 Oct 1999 19:43:31 GMT");
            server.setRequestProperty("User-Agent",
            "Profile/MIDP-2.0 Configuration/CLDC-1.0");
            server.setRequestProperty("Content-Language", "en-US");
            
            is = server.openInputStream();
            os = server.openOutputStream();
            
            
           
            
            details();
            /*
            Alert alert = new Alert ("Error");
            alert.setString("ok" + " " + data[0]);
            alert.setTimeout (3000);
            Display.getDisplay(root).setCurrent(alert);
            //something = getResponse();
            int gfdgf;
             **/
        }
        catch(Exception e)
        {
            e.printStackTrace();
            String error = e.toString();
            Alert alert = new Alert ("Error");
            alert.setString("Error, " + e);
            alert.setTimeout (5000);
            Display.getDisplay(root).setCurrent(alert);
                
                
        }
    }

details method that retreives data and stores into a array

public void details()
    {
        try
        {
            String username = details[0] + "\n" + "\0";
            String pass = details[1] + "\n" + "\0";
            
            os.write(username.getBytes());
            os.flush();
            os.write(pass.getBytes());
            os.flush();
            
            for(int i = 0; i < 20; i++)
            {
                data[i] = getResponse();
            }
        }
        catch(Exception e)
        {
            e.printStackTrace();
            String error = e.toString();
            Alert alert = new Alert ("Error");
            alert.setString("Error2, " + e);
            alert.setTimeout (5000);
            Display.getDisplay(root).setCurrent(alert);
        }
        
        
        
        
        
    }

and finaly the method that reads a line of data from the web server

public String getResponse()
    {
        StringBuffer b = new StringBuffer();
        String read = "";
        int ch = 0;
        try
        {
           

            
            
                while(( (ch = is.read()) != '\n') )
                {
                    b.append((char) ch);
                }

                read = b.toString();
                b.setLength(0);
             
            
        }
        catch(IOException e)
        {
           e.printStackTrace();
           read = "error";
        }
        return read;
        
                        
    }

[Kezzer]

Shouldn't

while(( (ch = is.read()) != '\n') )

be

while(( (ch = is.read()) != '\r\n') )

To support other platforms? Windows is \n, *nix is \r and mac's are \r\n I think.

[j.o.s.h.1408]

i changed that part of the code and it diddnt make a difference has the error seems to point towards my os.write statement

[directhex]

Shouldn't

while(( (ch = is.read()) != '\n') )

be

while(( (ch = is.read()) != '\r\n') )

To support other platforms? Windows is \n, *nix is \r and mac's are \r\n I think.

*nix is \n, windows is \r\n, macos 9 is \r

[j.o.s.h.1408]

well i have been testing this code using http instead of a ssl connection.

The problem im having on the actual phone device is that it only works when i use the built in wifi connection on my nokia n95. When i try to use my 3g/gprs connection, it doesnt work!

im on T mobile with web and walk so i shouldnt have any problems at all. I tried accessing the http link directly from the phones web browser and that worked.

Please note that the application im building is suppose to connect to multiple http and socket connections simultaneus. the socket connection works but not the http via from the phones gprs/3g access point

anyways here is a revised code for my http connection. Thanks.

server = (HttpConnection) Connector.open(url);
            
            server.setRequestMethod(HttpConnection.POST);
          
            
            
            int rc = server.getResponseCode();
            if (rc == HttpConnection.HTTP_OK) 
            {
               is = server.openInputStream();
                
            }
            else
            {
                root.notifyDestroyed();
                 Alert alert = new Alert ("Error");
                alert.setString("Error, server is down");
                alert.setTimeout (5000);
                Display.getDisplay(root).setCurrent(alert);
                throw new IOException("HTTP response code: " + rc);
            }

[TheAnimus]

I don't know for sure with T-mobile.

But i'd assume this is a proxy problem.

Java is really, well sun would say Platform Agnostic. I'd say proprietry crap that runs equally crap on almost every device.... But i digress.

The problem here I'm guessing is the proxy not been set up by default on the Java connection.

[j.o.s.h.1408]

Yea it seems like its the gprs connection problem. But how can i fix this? my gprs is automaticly set by t mobile web and walk.

All the http links work from within the phones we browser but not on a MIDLET program which is strange

[TheAnimus]

I don't know with T-Mobile, but i'd assume its a proxy problem (as said above).

Enjoy finding this on java!

[j.o.s.h.1408]

i found IT!!!!!!!!!!!! damm t-mobiles web and walk have a restriction againts http connections and on certain websites. it appears that you have to prove to them that your over 18 by giving them your credit card details and letting them check if its legit. if it is then you are able to browse any site and make http connections from programs!

i found this out by looking closely at the response code i get from the url, i notice that its a redirected url response which basicly means hey, you cant go to this url so we will transfer you to a different url that tells you that you need to prove that your over 18