ESH6 not working with SSL config | Telit Cinterion IoT Developer Community
August 24, 2015 - 10:59am, 2527 views
Hello
I have configed sll follow EHSx Java User Guide on ESH6 but I have received "javax.microedition.pki.CertificateException: Certificate does not contain the correct site name" error when started app.
I exported file "server.der" public cretificate auth from browser https
after that i used command "java -jar jseccmd.jar -cmd AddHttpsCertificateUntrusted
-filename ./server.der > AddHttpsCertificateUntrusted.bin" to create file cretificate
ESH6 version info:
◆Cinterion
EHS6
REVISION 02.000
A-REVISION 00.000.15
◆Default config on ESH6 is:
at^sjmsec?
^SJMSEC: 1,0,1,0
◆I have changed it for use SSL
+at^sjmsec="cmd",0B00310001000500020001
and install crefiticate has just created
+at^sjmsec="file",AddHttpsCertificateUntrusted.bin
confirm to changed
at^sjmsec?
^SJMSEC: 1,1,1,0
◆This is my code :
url = "https://***:443"
http = (HttpsConnection) Connector.open(url);
◆after ran app i receviced this error:javax.microedition.pki.CertificateException: Certificate does not contain the correct site name" error when started app
Have something wrong when i configed SSL?
Thanks for helps
Hi,
Could you please try to connect with the same server without the certificate on the module's side? This would mean, without the server verification. If this will be possible please httpsConnection.getSecurityInfo().getServerCertificate(), resolve the subject name information from it and compare with the one which you have inside the downloaded sertificate. It happens that browser gets different sertificate than obtained directly on the port 443.
If it will happen that you will not be able to connect without the server's verification as well, it can mean that an additional listener is on server's port 443, ussing e.g. SNI extension, which is not supported by the EHS6.
Best regards,
Michał