SSL handshake error on self-signed cert in Flutter

Question

I'm trying to connect server with self-signed cert, but I take error:
E/flutter ( 3781): HandshakeException: Handshake error in client (OS Error:
E/flutter ( 3781): CERTIFICATE_VERIFY_FAILED: Hostname mismatch(ssl_cert.c:345))
Code, where I set cert:

String path = '/storage/sdcard0/server.crt'; SecurityContext context = new SecurityContext(); context.setTrustedCertificates(path, password: 'hello'); _client = new HttpClient(context: context);

What I'm doing wrong?

If I don't set SecurityContext, I get SSL handshake error.

Can you post more of your code?

Alex Jone
– Alex Jone

2018-10-28 04:31:03 +00:00
Commented Oct 28, 2018 at 4:31 — Alex Jone
– Alex Jone, Commented Oct 28, 2018 at 4:31

Armen Kh. · Accepted Answer · 2017-09-15 07:48:30Z

13

I used HttpClient.badCertificateCallback
Here is a code to accept any cert:

_client = new HttpClient(); _client.badCertificateCallback = (X509Certificate cert, String host, int port) => true;

answered Sep 15, 2017 at 7:48

Armen Kh.

3151 gold badge2 silver badges9 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Dmitrii Bocharov Over a year ago

It works, but it doesn't reply to the original question. Accepting all certificates is a bad choice. I bumped into the same problem, and can't understand why setting "setTrustedCertificates" doesn't work.

wamae Over a year ago

I agree with @DmitriiBocharov

Collin Jackson · Accepted Answer · 2017-09-10 22:23:19Z

6

You can get a valid SSL certificate for free from https://letsencrypt.org/

answered Sep 10, 2017 at 22:23

Collin Jackson

117k31 gold badges229 silver badges154 bronze badges

5 Comments

Armen Kh. Over a year ago

Thanks. Is there any variant to set something like "trust to all certificates" like in java?

Collin Jackson Over a year ago

See the other answer. I do wonder, why encrypt if you don't want security -- I can think of a few reasons, but can't tell from your question.

Armen Kh. Over a year ago

I'm using self-signed cert for development and in this moment no need to use real certs. HttpClient works with sites with valid certs, I have no problem with them.

tylkonachwile Over a year ago

@ArmenKH. which web server you use?

Aashutosh Rathi Over a year ago

certbot is such an underrate tool.

marko · Accepted Answer · 2019-09-01 15:03:42Z

In my case I got this error message, because I did not specify hostname when asked for Common Name, when creating self signed certificate (localhost is OK for simple tests):

$ openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout privateKey.key -out certificate.pem Country Name (2 letter code) [AU]:SI State or Province Name (full name) [Some-State]: Locality Name (eg, city) []: Organization Name (eg, company) [Internet Widgits Pty Ltd]: Organizational Unit Name (eg, section) []: Common Name (e.g. server FQDN or YOUR name) []:localhost Email Address []:

wamae · Accepted Answer · 2021-10-10 09:03:19Z

download cert.pem

in main.dart

final ByteData data = await rootBundle.load('assets/certificates/cert.pem'); HttpOverrides.global = CustomHttpOverrides(data); runApp(...)

in CustomHttpOverrides.dart

import 'dart:io'; import 'dart:typed_data'; class CustomHttpOverrides extends HttpOverrides { ByteData data; CustomHttpOverrides(this.data); @override HttpClient createHttpClient(SecurityContext? context) { final SecurityContext clientContext = SecurityContext()..setTrustedCertificatesBytes(data.buffer.asUint8List()); return super.createHttpClient(clientContext); } }

Collectives™ on Stack Overflow

SSL handshake error on self-signed cert in Flutter

4 Answers 4

2 Comments

5 Comments

Comments

Comments

Linked

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

2 Comments

5 Comments

Comments

Comments

Linked

Related