3.5.2. SSL

SSL Settings

Allow all Hostnames

Allow all hostnames when using self signed certificates.

Drop Certificate List.

Press this button to clear the list of allowed certificates.

The Klaros-Testmanagement App for Android supports secure communication with the Klaros-Testmanagement Server via SSL (Secure Socket Layer). If the Tomcat installation is configured to open an SSL port, the Klaros-Testmanagement App for Android can be synchronized using this secure port. The application URL and the port number need to be set (see Section 3.5.1, “Authentication ” ). For example, if your Klaros-Testmanagement installation is available at https://www.example.com/klaros-web on port 8443, the resulting URI would be https://www.example.com:8443/klaros-web.

If an unsigned certificate or an invalid certificate is used, the user will be presented an error message if they test the connection or try to synchronize with the server (See Figure 3.3, “The SSL warning message” ). The user now has the option to store the certificate on the device and allow future synchronization attempts. Certificates stored on the device can be removed by pressing the menu button on the Settings screen and then choosing the option "Delete Certificates".

It is possible that the user will receive an error message when trying to synchronize, even if they have previously stored the certificate on the device. This can occur if the certificate has an invalid hostname set or if the hostname doesn't match the server URI. In this case, it is possible to allow all hostnames for all certificates stored on the device, though it is highly recommended to use a certificate that matches the used server URI.

Figure 3.3. The SSL warning message

The SSL warning message