Dynatrace / Dynatrace/openkit-java
TrustAllX509TrustManager android lint warning SSLBlindTrustManager
- Dominant language
- Java
- Stars
- 37
- Forks
- 36
- PR merge metrics
- No merged PRs in 30d
Description
Environment
- Android Studio Chipmunk | 2021.2.1 Patch 2
- openkit-java v2.2.0
Problem
`warning [TrustAllX509TrustManager](https://github.com/Dynatrace/openkit-java/issues/new#TrustAllX509TrustManager): Insecure TLS/SSL trust manager`
`Insecure TLS/SSL trust manager
[../../com/dynatrace/openkit/protocol/ssl/SSLBlindTrustManager%24BlindX509TrustManager.class](https://github.com/Dynatrace/com/dynatrace/openkit/protocol/ssl/SSLBlindTrustManager%24BlindX509TrustManager.class): checkClientTrusted is empty, which could cause insecure network traffic due to trusting arbitrary TLS/SSL certificates presented by peers
[../../com/dynatrace/openkit/protocol/ssl/SSLBlindTrustManager%24BlindX509TrustManager.class](https://github.com/Dynatrace/com/dynatrace/openkit/protocol/ssl/SSLBlindTrustManager%24BlindX509TrustManager.class): checkServerTrusted is empty, which could cause insecure network traffic due to trusting arbitrary TLS/SSL certificates presented by peers`
Steps to reproduce
- Run lintDebug Gradle task
`./gradlew lintDebug`
Contributor guide
Assessment
This issue has not been assessed yet.