Bypass Certificate Error Using Http

Question

I'm trying to create a proxy server that access third-party API, but their development end point have certificate error. Is there anyway to bypass ssl error when using http.dart?

import 'package:http/http.dart' as http;

Uri url = Uri.parse("https://url-with-ssl-error.com/endpoint");
http.get(url).then((response) => print(response.body));

and here's the error returned:

Uncaught Error: SocketIOException: RawSecureSocket error (Unexpected handshake error in client) (OS Error: errno = -8172)
Unhandled exception:
SocketIOException: RawSecureSocket error (Unexpected handshake error in client) (OS Error:  errno = -8172)
#0      _FutureImpl._scheduleUnhandledError.<anonymous closure> (dart:async/future_impl.dart:207:9)
#1      Timer.run.<anonymous closure> (dart:async/timer.dart:17:21)
#2      Timer.run.<anonymous closure> (dart:async/timer.dart:25:13)
#3      Timer.Timer.<anonymous closure> (dart:async-patch:15:15)
#4      _Timer._createTimerHandler._handleTimeout (dart:io:6990:28)
#5      _Timer._createTimerHandler._handleTimeout (dart:io:6998:7)
#6      _Timer._createTimerHandler.<anonymous closure> (dart:io:7006:23)
#7      _ReceivePortImpl._handleMessage (dart:isolate-patch:81:92)

can you show the relevant part of the code and the exact error? — Zdeslav Vojkovic
– Zdeslav Vojkovic, Commented May 13, 2013 at 14:35
@ZdeslavVojkovic I've edit my questions with the code and the error returned — Aditya Wirayudha
– Aditya Wirayudha, Commented May 13, 2013 at 15:34
try adding SecureSocket.initialize() before get. see stackoverflow.com/questions/13964492/… and code.google.com/p/dart/issues/detail?id=7541 — Zdeslav Vojkovic
– Zdeslav Vojkovic, Commented May 13, 2013 at 15:40

nđq · Accepted Answer · 2019-06-02 17:19:16Z

6

Though this question may be out of date, I should still post a short answer for this, in case of someone in the same trouble. This snippet's from my project:

import 'package:http/http.dart' as http;
import 'package:http/io_client.dart';
...

HttpClient client = new HttpClient()..badCertificateCallback = ((X509Certificate cert, String host, int port) => true);
var ioClient = new IOClient(client);
http.Response resp = await ioClient.post(uri, body: utf8.encode(json.encode(body)), headers: headers);
...

The issue was mentioned here and also the fix.

answered Jun 2, 2019 at 17:19

nđq

4587 silver badges15 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Zdeslav Vojkovic · Accepted Answer · 2013-05-13 16:00:59Z

0

Error -8172 means that 'Peer's certificate issuer has been marked as not trusted by the user.'

If you had access to the raw socket, then connect method allows you to specify what to do in case of bad certificate by providing onBadCertificate callback. However, I am not sure what is the exact type of http object in your code sample, so i can't tell whether you can workaround this or not. I thought it might be an HttpClient instance but it doesn't have a get method which takes a URI, so I am not sure. If it is your own class, maybe you have access to underlying secure socket so you can still use onBadCertificate.

Additionally, for server sockets, you can't rely on implicit SecureSocket.initialize() call. You need to call it explicitly with certificate db info.

edited May 13, 2013 at 16:00

answered May 13, 2013 at 15:48

Zdeslav Vojkovic

14.7k37 silver badges45 bronze badges

2 Comments

Zdeslav Vojkovic Over a year ago

I took a quick look at the http package, but I haven't seen the way to control bad certificate.

Seth Ladd Over a year ago

You can request a feature for the http package at dartbug.com/new. Thanks!

Collectives™ on Stack Overflow

Bypass Certificate Error Using Http

2 Answers 2

Comments

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related