search

wsharba / opendatakit

Automatically exported from code.google.com/p/opendatakit
0 stars 1 forks source link

SSLPeerUnverifiedException in Briefcase #1061

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
http://www.sslshopper.com/ssl-checker.html#hostname=https://odk.tph.unibas.ch/OD
KAggregateSSL looks OK, but there is a SSLPeerUnverifiedException in Briefcase. 
Maybe we can make Briefcase a wee bit less strict?

Original issue reported on code.google.com by yano...@nafundi.com on 11 Sep 2014 at 1:47

Attachments:

GoogleCodeExporter commented 9 years ago 
I do not think this requires a code change in Briefcase.

The problem is that your computer does not recognize/honor the root certificate 
authority (CA) that issued your SSL certificate (GeoTrust?).

The solution is to add the root certificates for your CA to your local 
computer's certificate store.

I believe that solution is described here:

http://technet.microsoft.com/en-us/library/cc754841.aspx

and perhaps in a less-techy more visual way, here:

http://www.sqlservermart.com/HowTo/Windows_Import_Certificate.aspx

Reboot after installing the CA certificates for GeoTrust (there are several to 
obtain from here: https://www.geotrust.com/resources/root-certificates/ )  -- 
or whatever your authority is -- BUT make sure you download these from an https 
URL -- downloading root certificates from an ordinary http: link is absurdly 
dangerous; never do that!

Then, upon restart, ODK Briefcase should "just work."

Original comment by mitchellsundt@gmail.com on 11 Sep 2014 at 4:35