clintonhealthaccess / chailmis-android

Android Tablet Application for Logistics Management in the DHIS2 Platform
Other
7 stars 6 forks source link

Support synching application with DHIS via https / SSL #214

Open chai-lmis opened 9 years ago

chai-lmis commented 9 years ago

App should sync from https://lmisdev.dhis2.org

karloskalcium commented 9 years ago

Note: do we still want both "dev" and "production" builds to synch from this same server?

karloskalcium commented 9 years ago

This will require updates to the networking library and code in order to do HTTPS communication and handshake.

karloskalcium commented 9 years ago

Updated title since the essence of this issue is about supporting synch over ssl

karloskalcium commented 9 years ago

Question: What should happen if the certificate on the server is invalid? What about if the certificate is valid, but expired? What if the certificate is signed by an authority, but the authority is not known to the client app? Need to understand what level of certificate authentication we should be doing, and how the client app should behave if there are issues with the certificate.

karloskalcium commented 9 years ago

Also, assuming this means that the app will synch to: https://lmisprod.dhis2nigeria.org.ng for prod and https://lmisqa.dhis2nigeria.org.ng for qa/dev

please clarify if this is not the case.

karloskalcium commented 9 years ago

Note that CHAI needs to procure HTTPS certificates for this.