SSL validation with ktor as http client #2746
-
|
Hi, I would use |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments 6 replies
-
|
You can pass a custom |
Beta Was this translation helpful? Give feedback.
-
|
Thank you! I will test this suggestion and I'll let you know |
Beta Was this translation helpful? Give feedback.
-
|
Hi, can you share an example snippet of the code? imageLoader = ImageLoader.Builder(LocalPlatformContext.current)
.components {
addFetcherFactories {
listOf(
KtorNetworkFetcherFactory()
)
}
}
.build() But there is a type mismatch: Required:
List<Pair<coil3.fetch.Fetcher.Factory<out Any>, KClass<out Any>>>
Found:
List<coil3.network.NetworkFetcher.Factory> |
Beta Was this translation helpful? Give feedback.
-
|
Updated snippet: imageLoader = ImageLoader.Builder(LocalPlatformContext.current)
.components {
addFetcherFactories {
listOf(
Pair(
first = KtorNetworkFetcherFactory(
httpClient = customHttpClient()
),
second = NetworkFetcher::class
)
)
}
}
.build()Androidactual fun customHttpClient(): HttpClient {
val sslContext = SSLContext.getInstance("TLS")
val certificates = validateSelfSignedCertificate()
sslContext.init(null, certificates, SecureRandom())
return HttpClient(OkHttp) {
engine {
config {
sslSocketFactory(sslContext.socketFactory, certificates[0] as X509TrustManager)
hostnameVerifier { _, _ -> true }
}
}
}
}
private fun validateSelfSignedCertificate(): Array<TrustManager> {
return arrayOf(@SuppressLint("CustomX509TrustManager")
object : X509TrustManager {
override fun getAcceptedIssuers(): Array<X509Certificate> {
return arrayOf()
}
@SuppressLint("TrustAllX509TrustManager")
override fun checkClientTrusted(certs: Array<X509Certificate>, authType: String) {}
@SuppressLint("TrustAllX509TrustManager")
override fun checkServerTrusted(certs: Array<X509Certificate>, authType: String) {}
})
}Desktopactual fun customHttpClient(): HttpClient {
val sslContext = SSLContext.getInstance("TLS")
sslContext.init(null, validateSelfSignedCertificate(), SecureRandom())
return HttpClient(Java) {
engine {
config {
sslContext(sslContext)
}
}
}
}
private fun validateSelfSignedCertificate(): Array<TrustManager> {
return arrayOf(@Suppress("CustomX509TrustManager")
object : X509TrustManager {
override fun getAcceptedIssuers(): Array<X509Certificate> {
return arrayOf()
}
@Suppress("TrustAllX509TrustManager")
override fun checkClientTrusted(certs: Array<X509Certificate>, authType: String) {}
@Suppress("TrustAllX509TrustManager")
override fun checkServerTrusted(certs: Array<X509Certificate>, authType: String) {}
})
}but still struggling to bypass the self-signed certs with the error: |
Beta Was this translation helpful? Give feedback.
-
|
The fetcher factory isn't being added correctly; check out the docs. |
Beta Was this translation helpful? Give feedback.
-
|
I read the docs and updated the imageLoader = ImageLoader.Builder(LocalPlatformContext.current)
.components {
add(
KtorNetworkFetcherFactory(
httpClient = customHttpClient()
)
)
}
.build()but an error still occurs From: |
Beta Was this translation helpful? Give feedback.
-
|
On |
Beta Was this translation helpful? Give feedback.
-
|
Just for info I migrated from |
Beta Was this translation helpful? Give feedback.
The fetcher factory isn't being added correctly; check out the docs.