Titanium JIRA Archive
Titanium SDK/CLI (TIMOB)

[TIMOB-17948] Android: Support SSL SNI on Apache HTTP Client

GitHub Issuen/a
TypeImprovement
PriorityHigh
StatusClosed
ResolutionDone
Resolution Date2015-05-29T03:21:55.000+0000
Affected Version/sn/a
Fix Version/sRelease 4.1.0
ComponentsAndroid
Labelsandroid, httpclient
ReporterPhilippe Wueger
AssigneeIngo Muschenetz
Created2014-10-31T10:04:38.000+0000
Updated2017-03-16T21:42:12.000+0000

Description

Google recommends using HttpURLConnection instead of the Apache HTTP client, see: http://developer.android.com/reference/org/apache/http/impl/client/DefaultHttpClient.html http://android-developers.blogspot.ch/2011/09/androids-http-clients.html Switching to HttpsURLConnection would further support SSL SNI, see: https://developer.android.com/training/articles/security-ssl.html {quote} Fortunately, HttpsURLConnection supports SNI since Android 2.3. Unfortunately, Apache HTTP Client does not, which is one of the many reasons we discourage its use. {quote} http://stackoverflow.com/questions/5879894/android-ssl-sni-support Please consider switching to HttpURLConnection/HttpsURLConnection. Thank you.

Comments

  1. Gertjan Smits 2014-11-14

    Any updates on this?
  2. Ilya Kruglik 2014-12-15

    Is this issue going to be assigned to any of the nearest releases?
  3. Shannon Hicks 2015-02-18

    Looks like Apache supports SNI now too. [HttpComponents HttpClient 4.3.2 Released ](http://mail-archives.apache.org/mod_mbox/www-announce/201401.mbox/%3CCACZkXPx4Rs7YQmau6h8812K_A5XVdfwo18tkvWBG=EV-9vh2XQ@mail.gmail.com%3E)
  4. Rudy Otzen 2015-03-05

    Any idea when this will be fixed?
  5. Ingo Muschenetz 2015-03-05

    It will likely be addressed in upcoming sprint. However, it looks like it's not necessary to switch--just to upgrade to a newer Apache HTTP client. Anyone wish to try dropping in a newer version of the library?
  6. Ashraf Abu 2015-05-15

    https://hc.apache.org/httpcomponents-client-4.3.x/android-port.html This library would be the best to drop in. There would probably need to be changes in the code as well and it needs to be tested. Any comments on doing it this way?
  7. Ashraf Abu 2015-05-29

  8. Lee Morris 2017-03-16

    Can confirm that this was done.

JSON Source