One solution for Android TLS/SSL client authentication

1/**
2 *  Custom SSLSocketFactory class.
3 */
4public class CustomSSLSocketFactory extends SSLSocketFactory {
5 
6   SSLContext sslContext = SSLContext.getInstance("TLS");
7   Context context;
8 
9   /**
10    *  Constructor.
11    */
12   public CustomSSLSocketFactory(Context context, KeyStore keystore, String keyStorePassword, KeyStore truststore)
13            throws NoSuchAlgorithmException, KeyManagementException, KeyStoreException, UnrecoverableKeyException {
14 
15        super(keystore, keyStorePassword, truststore);
16    this.context = context;
17 
18    // custom TrustManager,trusts all servers
19    TrustManager tm = new X509TrustManager() {
20        @Override
21        public void checkClientTrusted(X509Certificate[] chain,
22                      String authType) throws CertificateException {
23            }
24 
25            @Override
26            public void checkServerTrusted(X509Certificate[] chain,
27                      String authType) throws CertificateException {
28            }
29 
30            @Override
31            public X509Certificate[] getAcceptedIssuers() {
32                return null;
33            }
34    };
35 
36    Log.i("CLIENT CERTIFICATES", "Loaded client certificates: " + keystore.size());
37 
38    // initialize key manager factory with the client certificate
39    KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
40        keyManagerFactory.init(keystore,"mypassword".toCharArray());
41 
42    sslContext.init(keyManagerFactory.getKeyManagers(), new TrustManager[] { tm }, null);
43   }
44 
45   @Override
46   public Socket createSocket(Socket socket, String host, int port, boolean autoClose) throws IOException, UnknownHostException {
47    return sslContext.getSocketFactory().createSocket(socket, host, port, autoClose);
48   }
49 
50   @Override
51   public Socket createSocket() throws IOException {
52    return sslContext.getSocketFactory().createSocket();
53   }
54 
55   /**
56    *	Create new HttpClient with CustomSSLSocketFactory.
57    */
58   public static HttpClient getNewHttpClient(Context context) {
59    try {
60        KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
61        trustStore.load(null, null);
62 
63                // client certificate is stored in android's resource folder (raw)
64        InputStream keyStoreStream =  context.getResources().openRawResource(R.raw.p12_file);
65        KeyStore keyStore = KeyStore.getInstance("PKCS12");
66 
67        try {
68            keyStore.load(keyStoreStream, "mypassword".toCharArray());
69        } catch (CertificateException e) {
70            e.printStackTrace();
71        } catch (IOException e) {
72            e.printStackTrace();
73        }
74 
75        SSLSocketFactory sf = new CustomSSLSocketFactory(context,keyStore, "mypassword", trustStore);
76        sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
77 
78        HttpParams params = new BasicHttpParams();
79        HttpProtocolParams.setVersion(params, HttpVersion.HTTP_1_1);
80        HttpProtocolParams.setContentCharset(params, HTTP.UTF_8);
81 
82        SchemeRegistry registry = new SchemeRegistry();
83        registry.register(new Scheme("http", PlainSocketFactory.getSocketFactory(), 80));
84        registry.register(new Scheme("https", sf, 443));
85 
86        ClientConnectionManager ccm = new ThreadSafeClientConnManager(params, registry);
87 
88        return new DefaultHttpClient(ccm, params);
89 
90    } catch (Exception e) {
91        return new DefaultHttpClient();
92    }
93   }
94}

1HttpClient client = CustomSSLSocketFactory.getNewHttpClient(MyActivity.this);
2String formDataServiceUrl = getString(R.string.form_data_service_url);
3HttpPost post = new HttpPost(formDataServiceUrl);
4post.setEntity(getMultipartEntityForPost());
5 
6HttpResponse result = client.execute(post);