Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Accept trusted CA from the Android CA store #643

Open
tr3027 opened this issue Dec 23, 2021 · 0 comments
Open

Accept trusted CA from the Android CA store #643

tr3027 opened this issue Dec 23, 2021 · 0 comments

Comments

@tr3027
Copy link

tr3027 commented Dec 23, 2021

Describe the bug
Private Domoticz server configured with SSL generated by a private CA. The Root CA certificate is imported into Android CA store.

Visiting the Domoticz server on Android via HTTPS in a browser (Chrome) states the site is secure. Viewing the certificate correctly shows the certificate and full certification chain.

Configuring the same destination server in Domoticz Lite, I get the following message on every application start:

Accept Unknown Certificate

The server certificate is not signed
by a known Certificate Authority.

Do you want to connect anyway?

Certificate details:
.... same certificate details as Chrome shows ....
[Always] [Once] [Abort]

The Domoticz server is addressed by FQDN in the browser as well as in the Domoticz Lite application and the CN of the SSL certificate (as well as its SAN) matches that FQDN.

To Reproduce
Steps to reproduce the behavior:

  1. configure Domoticz with a SSL certificate signed by a private CA
  2. import the private CA's certificate into Android CA store
  3. configure SSL access to the Domoticz server in the Domoticz Lite App
  4. close and reopen Domoticz Lite

Expected behavior
Domoticz Lite starts without showing any false certificate warning/error and accepts the certificate as it's already trusted thanks to being manually imported into the Andorid CA store

Smartphone (please complete the following information):

  • Devices: Xiaomi Mi 9T Pro, Xiaomi Poco M3, Redmi Note 7, Redmi Note 8
  • OS: Android 11 / Android 10
  • Domoticz system version 2021.1
  • Domoticz app version 0.2.320 (8513)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant