B4J Question ServerSocket + Socket + AsyncStreams + SSL; is all communication to the Sockets encrypted without first passing via the ServerSocket?

[walt61]

Hi all,

I have this scenario:
- multiple clients connect to the server by each client initialising an SSL Socket (as per https://www.b4x.com/android/forum/threads/b4x-trust-all-ssl-socket.101952/)
- server uses a ServerSocket that listens for connections; a new connection yields a 'client Socket' on the server
- I use that 'client Socket' with AsyncStreams to exchange data between the clients and the server

My question is: once the connection to the server has been made, is all communication between client programs and 'client Socket on server' encrypted? As it is not possible to initialise a ServerSocket with SSL, I don't want subsequent comms (i.e. after the initial connection) to go unencrypted through that ServerSocket (and I don't understand enough of all the socket stuff to be 100% certain).

Thanks in advance!

 

[Erel]

Are you calling Socket.InitializeSSL on the client side?
ServerSocket will not work with SSL clients.

Use MQTT or jServer instead.

 

[walt61]

Thanks, @Erel . Indeed, I wanted to call Socket.InitializeSSL on the client side, I'll have to try something else then.