search

geometer / FBReaderJ

Official FBReaderJ project repository
http://www.fbreader.org/FBReaderJ/
1.83k stars 802 forks source link

OPDS over HTTPS #262

Open Benny- opened 9 years ago

Benny- commented 9 years ago

Add the following OPDS feed: https://mylittleserver.nl/opds/

Expected behaviour: Able to browse the feed without any errors in a secure and private manner.

Actual behaviour: Unable to browse the feed. The following error is given: Couldn't connect to host mylittleserver.nl.

Additional information: Viewing above feed using the android web browser works fine. Confirmed in FBReader version: 1.8.2-Honeycomb Confirmed in FBReader version: 2.0.6-ics Android version: Stock 4.4.2

geometer commented 9 years ago

Hi,

Looks like your server is not configured properly. If I run openssl s_client -connect mylittleserver.nl:443 -showcerts it returns single certificate only, not a chain.

Regards,

-- Nikolay

Benny- commented 9 years ago

Hello Nikolay,

The server uses SNI to host multiple https websites.

You get the default self-signed certificate. The following command should yield the proper certificate chain:

openssl s_client -servername mylittleserver.nl -connect mylittleserver.nl:443 -showcerts

geometer commented 9 years ago

I see. Interesting. FBReader definitely works with other https sites; but it cannot verify certificate for your site. Will investigate more.