TrustAllX509TrustManager android lint warning SSLBlindTrustManager
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 25/100
Research direction
Start by inspecting SSLBlindTrustManager and its BlindX509TrustManager class, then run ./gradlew lintDebug to reproduce the TrustAllX509TrustManager warning. Determine the intended certificate-validation behavior and identify relevant existing tests before changing anything. Done means the warning is addressed without weakening TLS validation.
Written by the indexing model from the issue text.
Description
Environment
- Android Studio Chipmunk | 2021.2.1 Patch 2
- openkit-java v2.2.0
Problem
warning [TrustAllX509TrustManager](https://github.com/Dynatrace/openkit-java/issues/new#TrustAllX509TrustManager): Insecure TLS/SSL trust manager
Insecure TLS/SSL trust manager
[../../com/dynatrace/openkit/protocol/ssl/SSLBlindTrustManager%24BlindX509TrustManager.class](https://github.com/Dynatrace/com/dynatrace/openkit/protocol/ssl/SSLBlindTrustManager%24BlindX509TrustManager.class): checkClientTrusted is empty, which could cause insecure network traffic due to trusting arbitrary TLS/SSL certificates presented by peers
[../../com/dynatrace/openkit/protocol/ssl/SSLBlindTrustManager%24BlindX509TrustManager.class](https://github.com/Dynatrace/com/dynatrace/openkit/protocol/ssl/SSLBlindTrustManager%24BlindX509TrustManager.class): checkServerTrusted is empty, which could cause insecure network traffic due to trusting arbitrary TLS/SSL certificates presented by peers
Steps to reproduce
- Run lintDebug Gradle task
./gradlew lintDebug
- Dominant language
- Java
- Stars
- 37
- Forks
- 36
- PR merge metrics
- No merged PRs in 30d
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from Dynatrace/openkit-java
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
Dynatrace/openkit-java#208 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 42/100
Dynatrace/openkit-java#207 · 2 comments ·
-
Dynatrace/openkit-java#204 · 6 comments · 1 assignee ·
-
enhancement
Dynatrace/openkit-java#3 · 2 assignees ·
All issues in Dynatrace/openkit-java
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
infinispan/infinispan#18150 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
-
untriaged
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
opensearch-project/k-NN#3597 ·
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 82/100