[go: nahoru, domu]
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

TrustAllX509TrustManager Android lint error #1794

Closed
kackogut opened this issue Dec 13, 2022 · 2 comments
Closed

TrustAllX509TrustManager Android lint error #1794

kackogut opened this issue Dec 13, 2022 · 2 comments
Labels
priority: p3 Desirable enhancement or fix. May not be included in next release.

Comments

@kackogut
Copy link

Environment details

Android Studio Dolphin | 2021.3.1 Patch 1
Library version: v1.42.3

Steps to reproduce

  1. Create new Android project
  2. Add dependency for Google Http client: implementation("com.google.http-client:google-http-client:1.42.3")
  3. Run lintDebug

Stack trace

com/google/api/client/util/SslUtils$1.class: Error: checkServerTrusted is empty, which could cause insecure network traffic due to trusting arbitrary TLS/SSL certificates presented by peers [TrustAllX509TrustManager]

   Explanation for issues of type "TrustAllX509TrustManager":
   This check looks for X509TrustManager implementations whose
   checkServerTrusted or checkClientTrusted methods do nothing (thus trusting
   any certificate chain) which could result in insecure network traffic
   caused by trusting arbitrary TLS/SSL certificates presented by peers.
@diegomarquezp diegomarquezp added the priority: p3 Desirable enhancement or fix. May not be included in next release. label Dec 14, 2022
@diegomarquezp
Copy link
Contributor

Hi Kacper, thanks for reporting this.
It's possible to ignore or reduce the severity of this warning (see TrustAllX509TrustManager - suppress section) . Maybe a custom lint file may help with your use case.
Also, please keep in mind that for faster response times you can refer to our Customer Support Hub if you have a support contract.

@diegomarquezp
Copy link
Contributor

Closing as solved.

@paulthomson paulthomson mentioned this issue Jul 6, 2023
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
priority: p3 Desirable enhancement or fix. May not be included in next release.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@diegomarquezp @kackogut