Uploaded image for project: 'Couchbase Lite'
  1. Couchbase Lite
  2. CBL-1748

X509TrustManager.checkServerTrusted with X509TrustManagerExtensions.checkServerTrusted

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 3.0
    • 2.8.0
    • Java, Java-Android
    • Security Level: Public
    • None
    • 1

    Description

      A forum post pointed out a StackOverflow question that highlights a bug in CBLTrustManager.java:

      https://stackoverflow.com/questions/58934384/network-security-configuration-not-working-with-third-party-api

      It's a new behaviour of the Android Framework. If your network config contains any <domain-config blocks, Framework throws CertificateException if you call checkServerTrusted(X509Certificate[] certs, String authType) in X509TrustManager. So instead you should use X509TrustManagerExtensions

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              The Lite The Lite
              blake.meike Blake Meike
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 6h
                  6h

                  Gerrit Reviews

                    There are no open Gerrit changes

                    PagerDuty