How to open https in WebView ?

Question

How to open https in WebView ?
for example : https://mail.google.com/

Answer 1

The dynamic.12306.cn certificate is not valid - you should install a valid certificate on dynamic.12306.cn.
If I try to open https://dynamic.12306.cn/otsweb/ in Firefox, Firefox will reject the connection:
dynamic.12306.cn uses an invalid security certificate.
The certificate is not trusted because it was issued by an invalid CA certificate.
(Error code: sec_error_inadequate_key_usage)The only way I can get firefox to open the connection is to click on "I understand the risks" on the interstitial error page displayed by firefox and add an exception for the site.
Opening up the certificate from https://dynamic.12306.cn/otsweb/, you can see that it's key usage is:
Not Critical
Signing
Non-repudiationThese are not valid key usages for SSL.
By contrast if you look at the certificate form https://mail.google.com, you can see that it's key usage is:
Not Critical
TLS Web Server Authentication (1.3.6.1.5.5.7.3.1)
TLS Web Client Authentication (1.3.6.1.5.5.7.3.2)
Netscape Server Gated Crypto (2.16.840.1.113730.4.1)TLS is just the name of the standardized version of SSL, so this is why the google.com certs work, but your 12306.cn cert does not.
Buy a valid server certificate from a certificate authority which is trusted by Java. For example, any of the certificates purchasable from here: http://www.thawte.com/ssl/index.html (same company google uses) and install the certificates on the dymanic.12306.cn web server.
If you do not control or have access to the dynamic.12306.cn web server, then you could install a custom https protocol handler in your client so that it ignores certificate errors and tries to establish as SSL connection anyway - but that is somewhat tricky and I would not advise that anyway.