Http package fails to read an URL

[DartBot]

This issue was originally filed by [email protected]

---

This code using the HTTP package fails:

    http.read('https://www.chms.edu.mx/')

The result is:

Uncaught Error: SocketIOException: RawSecureSocket error (Unexpected handshake error in client) (OS Error: errno = -8181)
Unhandled exception:
SocketIOException: RawSecureSocket error (Unexpected handshake error in client) (OS Error: errno = -8181)

­0 _FutureImpl._scheduleUnhandledError.<anonymous closure> (dart:async:347:9)

­1 Timer.Timer.<anonymous closure> (dart:async-patch:11:15)

­2 _Timer._createTimerHandler._handleTimeout (dart:io:6031:28)

­3 _Timer._createTimerHandler._handleTimeout (dart:io:6039:7)

­4 _Timer._createTimerHandler.<anonymous closure> (dart:io:6047:23)

­5 _ReceivePortImpl._handleMessage (dart:isolate-patch:40:92)

[sgjesse]

We are missing turning the NSS error codes into test. You can see the error codes on http://www.mozilla.org/projects/security/pki/nss/ref/ssl/sslerr.html.

The error -8181 indicate an expired certificate.

Currently there are no way to bypass a bad certificate using either package:http or dart:io directly. The SecureSocket and RawSecureSocket has onBadCertificate callbacks thich can be used to bypadd invalid certificates.

---

Removed Type-Defect label.
Added Type-Enhancement, Area-Pkg, Triaged labels.
Marked this as being blocked by #9689.

[sethladd]

Added Pkg-Http label.

[nex3]

This is out of scope for direct support in the http package, but it can be accomplished relatively easily by passing in an HttpClient with an onBadCertificate callback to [new IOClient].

---

Added NotPlanned label.

[DartBot]

This issue has been moved to dart-lang/http#9.