When I type host crosswire.org it gives me ip 209.250.6.226.
When I fetch ssl cert for that ip (openssl s_client -connect 209.250.6.226:443), it gives cert with CN www.ancc-gan.de. This confuses And Bible on Android 5 (lollipop), as host name checking will fail to javax.net.ssl.SSLPeerUnverifiedException: Certificate for <crosswire.org> doesn't match any of the subject alternative names: [www.ancc-gan.de] In more recent Android versions it works properly. Now for Android 5 I have made exception such that host name verification is bypassed, but that's not neat nor secure. -- T: Tuomas
_______________________________________________ sword-devel mailing list: sword-devel@crosswire.org http://crosswire.org/mailman/listinfo/sword-devel Instructions to unsubscribe/change your settings at above page
