SandroB for 3.x Honeycomb

[GoogleCodeExporter]

There are some parts of honeycomb that are already public.
So browser for 3.x can be created.
Do you like this idea or it is no matter to you?
I will implement it if there is any need for it.

The source code for the GPL and LGPL components of Android 3.2 is
available in the Android Open-Source Project, under the tag
android-3.2_r1

The process to build it is the same as what we had for 3.0 and 3.1:

# start from a master client
repo init -m 3.2-base.xml
repo sync
repo forall -c git checkout android-3.2_r1

# build with the regular process

# to come back to a plain master
repo init -m default.xml
repo sync

The caveats are unchanged since 3.1:
-the checkout command will return an error message because the tag
doesn't exist in all projects, ignore it.
-the compiled isn't any more likely to work on actual hardware as 3.1
did, since the same binary incompatibilities are still there.

Original issue reported on code.google.com by supp.san...@gmail.com on 12 Aug 2011 at 4:22

[GoogleCodeExporter]

Is there a version for android 3.1 tablets (galaxy tab 10.1)??
Download link?
Tnx

Original comment by robert.d...@gmail.com on 28 Aug 2011 at 7:44

[GoogleCodeExporter]

Not yet. 
But I will start with 3.1 because GPL and LGPL components works on actual 
hardward.
I will post link on site when there will be some beta version to test.

Original comment by supp.san...@gmail.com on 29 Aug 2011 at 4:46

[GoogleCodeExporter]

Tnx. :)

Original comment by robert.d...@gmail.com on 29 Aug 2011 at 6:33

[GoogleCodeExporter]

approximate time?? Sorry for my intolerance ;)

Original comment by tce...@gmail.com on 30 Aug 2011 at 10:02

[GoogleCodeExporter]

I rather not give any milestone. 

Idea is to port SandroB 2.3 because there is no source for 3.x yet.
So there could be problems that cannot be resolved.

I wonder... this is working on your devices?
https://market.android.com/details?id=org.sandrob.sslexample

Original comment by supp.san...@gmail.com on 30 Aug 2011 at 3:37

[GoogleCodeExporter]

Error : localhost/127.0.0.1:443 - Connection refused

Original comment by tce...@gmail.com on 30 Aug 2011 at 6:30

[GoogleCodeExporter]

Nope it doesent.
The webpage at https://localhost/ might be temporarily down or it may have 
moved permanently to a new web address.

Original comment by robert.d...@gmail.com on 30 Aug 2011 at 6:35

[GoogleCodeExporter]

Example is meant to connect to real server not locally to android

You should input: 
Some https site that requires client certificate : https://...
Path to certificate file: /mnt/sdcard/cert.pfx
Password for pfx file

If you click webview button and all goes well it will open html page below

Original comment by supp.san...@gmail.com on 30 Aug 2011 at 6:41

[GoogleCodeExporter]

Success :)

Original comment by robert.d...@gmail.com on 30 Aug 2011 at 6:47

[GoogleCodeExporter]

But page wont display...... temporarily down....

Original comment by robert.d...@gmail.com on 30 Aug 2011 at 6:50

[GoogleCodeExporter]

try if it works on the phone.
For phones 2.2/2.3 I am sure that it works.

Original comment by supp.san...@gmail.com on 30 Aug 2011 at 7:01

[GoogleCodeExporter]

On phone works fine. The page is displayed.

Original comment by robert.d...@gmail.com on 30 Aug 2011 at 7:05

[GoogleCodeExporter]

I will look if I can fix it quick to work also on 3.x
Thank you for testing it.

Original comment by supp.san...@gmail.com on 30 Aug 2011 at 7:16

[GoogleCodeExporter]

Thank you :)

Original comment by robert.d...@gmail.com on 30 Aug 2011 at 7:21

[GoogleCodeExporter]

I tried in 3.1 emulator and it is working.
Tried with https site that request client certificate 
and with https that do not. I tried https://www.google.com

There is some problems with Plain button 
because it makes network request on main thread. 

But it should work with WebView button.

If you click on Ad you can save eclipse sources for application.
In sources you can see how it works.
It uses reflection to change mSslSocketFactory with custom one that has 
client certificate info. 
I was afraid that this is not working in 3.x.
But looks like that is still okey on 3.1 emulator.
I will build version that shows some progress info in popups so you can see 
where it goes wrong.

                SSLContext sslContext = CreateSSLContext();
                Class c = Class.forName("android.net.http.HttpsConnection");
                Field[] fieldlist = c.getDeclaredFields();
                for (int i = 0; i < fieldlist.length; i++) {
                    Field fld = fieldlist[i];
                    if (fld.getName().equals("mSslSocketFactory")) {
                        fld.setAccessible(true);
                        fld.set(null, sslContext.getSocketFactory());
                    }
                }

Original comment by supp.san...@gmail.com on 30 Aug 2011 at 8:28

[GoogleCodeExporter]

SandroB SSL example for 3.1 with logging

http://code.google.com/p/sandrob/downloads/detail?name=sslexample_1_1_0_15_31_lo
gging.apk

Original comment by supp.san...@gmail.com on 30 Aug 2011 at 8:58

[GoogleCodeExporter]

With https://google.com and some others https pages there is no problem, but 
when i try to open my bank page, page wont display...

Original comment by robert.d...@gmail.com on 31 Aug 2011 at 5:36

[GoogleCodeExporter]

I tested on emulator. 
I will try to get some real device to narrow the problem.

Original comment by supp.san...@gmail.com on 1 Sep 2011 at 5:17

[GoogleCodeExporter]

Any news?? :)

Original comment by robert.d...@gmail.com on 6 Sep 2011 at 9:37

[GoogleCodeExporter]

I tested the 
http://code.google.com/p/sandrob/downloads/detail?name=sslexample_1_1_0_15_31_lo
gging.apk link and it did not work on Honeycomb 3.2. 

Let me know if I can help test anything else. 

Original comment by jdjenni...@gmail.com on 6 Sep 2011 at 9:15

[GoogleCodeExporter]

Sorry for late response.
I haven't get chance to debug on real device.
I will try more on emulator and put some more diagnostic messages to gui.

Changing some properties of object 
android.net.http.HttpsConnection->mSslSocketFactory
with reflection smells like security issue and I was surprised that it works on 
phones. 

But is really hard to do it without sources.

http://code.google.com/p/android/issues/detail?id=4962#c272
And from this thread I presume that build for emulators are different from 
devices build even on Google side. 
Not to mention that also manufactures (HTC, Samsung, ...) change sources before 
they build ROM's.

Original comment by supp.san...@gmail.com on 8 Sep 2011 at 6:48

• Changed state: Started

[GoogleCodeExporter]

http://code.google.com/p/sandrob/downloads/detail?name=sandroproxy_0_9.apk

If you are really desperate to use client certificates on 3.x.
Application act as proxy. It listens on port 8008. 
Cert must be stored as /mnt/sdcard/cert.p12
Password must be sandropssl

Use some browser where you can set https proxy to localhost:8008
Opera for example.
http://androidproxy.blogspot.com/2011/01/setting-up-proxy.html

I will soon test on real tablet device so this is just temporary solution.
And not firmly tested.

Original comment by supp.san...@gmail.com on 2 Oct 2011 at 6:57

[GoogleCodeExporter]

My bank only supports pfx. Not p12. I will wait for final version of Sandrob. :)
For now im using teamwiewer :)
Tnx and good luck;)

Original comment by robert.d...@gmail.com on 2 Oct 2011 at 7:09

[GoogleCodeExporter]

[deleted comment]

[GoogleCodeExporter]

Firefox creates .p12 extension when you create export from cert storage.
But for banking I really don't advise to use this temp solution.
Because file is stored on SD card where is easy accessible and password is 
known.

Original comment by supp.san...@gmail.com on 2 Oct 2011 at 7:23

[GoogleCodeExporter]

I tested SandroB SSL example on real device.
And it is not working with client certificates. It works on emulator.
It seems that emulator is build with android http stack, real devices with 
chromium.
This brings difference in ssl behavior.

extract from Android.mk for webkit:

# We can't use V8 on the simulator
ifeq ($(TARGET_SIMULATOR),true)
  JAVASCRIPT_ENGINE = jsc
endif

# V8 also requires an ARMv7 CPU, and since we must use jsc, we cannot
# use the Chrome http stack either.
ifneq ($(strip $(ARCH_ARM_HAVE_ARMV7A)),true)
  JAVASCRIPT_ENGINE := jsc
  USE_ALT_HTTP := true
endif

# See if the user has specified a stack they want to use
HTTP_STACK = $(HTTP)
# We default to the Chrome HTTP stack.
DEFAULT_HTTP = chrome
ALT_HTTP = android

ifneq ($(HTTP_STACK),chrome)
  ifneq ($(HTTP_STACK),android)
    # No HTTP stack is specified, pickup the one we want as default.
    ifeq ($(USE_ALT_HTTP),true)
      HTTP_STACK = $(ALT_HTTP)
    else
      HTTP_STACK = $(DEFAULT_HTTP)
    endif
  endif
endif

Original comment by supp.san...@gmail.com on 3 Oct 2011 at 9:20

[GoogleCodeExporter]

http://code.google.com/p/sandrob/downloads/detail?name=sandroproxy_0_9.apk

Tested on real device and it is working.

Used stock browser with changed wi-fi proxy settings.
Settings -> Wireless & networks -> Modify network

Original comment by supp.san...@gmail.com on 4 Oct 2011 at 9:14

Attachments:

• tablet_proxy_settings.png

[GoogleCodeExporter]

Some additional warring about using sandroproxy

http://code.google.com/p/sandrob/downloads/detail?name=sandroproxy_0_9.apk

********************
Requests/Responses are stored in getExternalCacheDir()

/mnt/sdcard/Android/data/org.sandroproxy/cache

http://developer.android.com/reference/android/content/Context.html#getExternalC
acheDir()

There is no security enforced with these files. All applications can read and 
write files placed here.

******************** 

Original comment by supp.san...@gmail.com on 12 Oct 2011 at 8:10

[GoogleCodeExporter]

Relase of Honeycomb source code happened in release of ICS source code.
So there can be some progress on making SandroB for 3.x.

--------------------

Hi! We just released a bit of code we thought this group might be interested in.
Over at our Android Open-Source Project git servers, the source code
for Android version 4.0 (Ice Cream Sandwich) is now available.
Here's how to get it:Follow the instructions at
http://source.android.com/source/downloading.htmlCheck out the
'ics-release' branch:repo init -u
https://android.googlesource.com/platform/manifest -b android-4.0.1_r1
That's it! However since this is a large push, please be aware that it
will take some time to complete. If you sync before it's done, you'll
get an incomplete copy that you won't be able to use, so please wait
for us to give the all-clear before you sync.
This is actually the source code for version 4.0.1 of Android, which
is the specific version that will ship on the Galaxy Nexus, the first
Android 4.0 device. In the source tree, you will find a device build
target named "full_maguro" that you can use to build a system image
for Galaxy Nexus. Build configurations for other devices will come
later.
Unfortunately we still don't have our Gerrit code review servers back
online. That remains our top priority though, and we hope to have them
back soon.
This release includes the full history of the Android source code
tree, which naturally includes all the source code for the Honeycomb
releases. However, since Honeycomb was a little incomplete, we want
everyone to focus on Ice Cream Sandwich. So, we haven't created any
tags that correspond to the Honeycomb releases (even though the
changes are present in the history.)

JBQ, on behalf of the AOSP team.

------------------

Original comment by supp.san...@gmail.com on 15 Nov 2011 at 10:24

[GoogleCodeExporter]

any results & news?

Original comment by robert.d...@gmail.com on 9 Dec 2011 at 12:41

[GoogleCodeExporter]

I tried once with no luck.
Trying with another approach.
Anybody using sandroproxy with success?

Original comment by supp.san...@gmail.com on 9 Dec 2011 at 7:59

[GoogleCodeExporter]

sadly it isnt working on my galaxy tab 10.1
I did set the proxy to localhost:8008
imported the certificate on mnt/sdcard/cert.p12 with sandropssl as password
but after I started the the sandropproxy and loaded the webpage with the 
default browser it still isnt working

and I am even using a rooted device

Original comment by bonedr...@googlemail.com on 11 Dec 2011 at 2:45

[GoogleCodeExporter]

@bonedroid
maybe you can send me private on mail supp.sandrob@gmail.com 
what is output of adb logcat when you start sandrobproxy?

Original comment by supp.san...@gmail.com on 11 Dec 2011 at 4:21

[GoogleCodeExporter]

I just start using Android tablet
Looking for client certificate support browser I find you
I try all describe on top. Not work in Motorola xoom with A3.2
Only this app “SandroB SSL example” work in my device

Any progress with this problem
I will test everything?

P.s. Sorry for my terrible English  

Original comment by alma...@abv.bg on 13 Jan 2012 at 10:55

[GoogleCodeExporter]

This is not working for you?

http://code.google.com/p/sandrob/downloads/detail?name=sandroproxy_0_9.apk

Did you set proxy in 
Settings -> Wireless & networks -> Modify network
?

Original comment by supp.san...@gmail.com on 13 Jan 2012 at 12:39

[GoogleCodeExporter]

It’s probably something wrong with my wireless connection.
When I change the proxy settings I can’t connect
The connection’s button is grey

I will try again this evening

Original comment by alma...@abv.bg on 13 Jan 2012 at 1:11

[GoogleCodeExporter]

I set proxy setings at last but not working
I can't open any url

Original comment by apmari...@gmail.com on 13 Jan 2012 at 5:28

[GoogleCodeExporter]

It should work.
Let me put some additional information about setting up environment:

1. lunch sandroproxy. No need to press start button because it starts on lunch.
2. change settings that network uses proxy on localhost:8008
3. start browser

This should work even whitout certificate.

If you want to use client side certificate, put it in /mnt/sdcard/cert.p12
Password should be: sandropssl
Shutdown sandroproxy and start again.

There would be some log messages if you are using adb logcat.
http://wiki.cyanogenmod.com/wiki/Logcat
You can send me this output if it will not work.

Maybe problem is that xoom does not have /mnt/sdcard and it is named 
different...

Original comment by supp.san...@gmail.com on 13 Jan 2012 at 8:53

[GoogleCodeExporter]

I did evrything how you describe but still not work
xoom have mnt/sdcard
don't have adb logcat and find to dificult to install it
i will keep trying

Original comment by apmari...@gmail.com on 13 Jan 2012 at 10:00

[GoogleCodeExporter]

I will upgrade sandropoxy: 
- settings for where is certificate on sdcard
- settings for certificate password
- settings for port
- logging will be shown on gui
- request/responses shown on gui

I send you mail when new version will be available.

Original comment by supp.san...@gmail.com on 14 Jan 2012 at 9:18

[GoogleCodeExporter]

ok

Original comment by apmari...@gmail.com on 14 Jan 2012 at 12:00

[GoogleCodeExporter]

http://code.google.com/p/sandrob/downloads/detail?name=sandroproxy_0_9_1.apk
- logging will be shown on gui
- request/responses shown on gui

Original comment by supp.san...@gmail.com on 5 Feb 2012 at 6:47

[GoogleCodeExporter]

https://market.android.com/details?id=org.sandroproxy

First version of sandroproxy is on the Market
- settings for where is certificate on sdcard
- settings for certificate password
- settings for port
- logging will be shown on gui
- request/responses shown on gui

Original comment by supp.san...@gmail.com on 6 Feb 2012 at 12:02

[GoogleCodeExporter]

http://code.google.com/p/sandrop/

SandroProxy will have his own site so all progress will be there.

Original comment by supp.san...@gmail.com on 7 Feb 2012 at 9:55

[GoogleCodeExporter]

hello

Original comment by straight55B@gmail.com on 11 Oct 2014 at 8:25