Menu

#3 Allow for arbitrary HTTPS connections with self signed certificates

open
4
2013-06-07
2013-06-07
No

Currently the core library only knows of the two self signed certificates for the Lindenlab server to allow to connect to them without causing a security exception.

This improvement would add an additional callback mechanism to the login operation that would be triggered when a security exception occurred during HTTPS handshake because of untrusted certificates. The callback provider would then have to query the user if the certificate should be accepted anyhow or if the connection should be refused. In case of acception there would be the choice to accept it just for this connection request or to add the certificate exception to some application specific keystore to be used in future connection attempts to this server.

Discussion


Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.