search

NightWhistler / PageTurner

Android e-book reader with cloud synchronization
pageturner-reader.org
GNU General Public License v3.0
466 stars 222 forks source link

OPDS over HTTPS #563

Open Benny- opened 9 years ago

Benny- commented 9 years ago

Add the following OPDS feed: https://mylittleserver.nl/opds/

Expected behaviour: Able to browse the feed without any errors in a secure and private manner.

Actual behaviour: Unable to browse the feed. The following error is given: No peer certificate.

Additional information: It is possible to view the above feed if "accept self-signed certificates" is checked. (note: the used cert is not self-signed, this should not be needed) Viewing above feed using the android web browser works fine. Android version: Stock 4.4.2

NightWhistler commented 9 years ago

Hmm, that's an interesting bug... PageTurner just uses the default HTTPClient from Android, so I would expect any certificate that is accepted in the browser to work.

By the way: when checking the "accept self-signed certificates" box, your connection is still encrypted and secure... but you are (very theoretically) in danger of connecting to a spoofed server.