CODEWITHSUNDEEP
jqueryajaxsslcordovacertificate
JunM
JunM

Reputation: 7150

Phonegap - ajax no longer works when accessing HTTPS request after exporting as signed apk

I know this is a duplicate post from here.

I just need confirmation from experts if I still really need an SSL certificate from my api provider when our app needs to access data from protected api/server.

Also, do I need to use their given SSL certificate when signing my apk instead of just using my private key?

Please let me know if the accepted answer on this post is still true.

Thank you.

Upvotes: 0

Views: 1688

Answers (1)

QuickFix
QuickFix

Reputation: 11721

I'm not an expert but I confirm you that with latest phonegap version, sites you access using https still need to be signed from a trusted authority.

There's no link between our app signature and the https signature of the web site you want to access using https.

The rule is the same as when you access a page using https in your browser : if the site you're trying is not signed or signed by an unknown authority (like self-signed) it is blocked (the difference is that with your browser you can click ignore and access the page anyway).

If you don't want to buy a certificate for your website, you can install your own certificate on each device you want to use with your app, so the site you acces will be seen as trusted.

Check android's doc about SSL, it has quite extensive explanation.

Upvotes: 3

Related Questions