Air sdk 33.1.1.713 non-security server warning android apps below android 9

[mehmury]

I tested my android applications with Air sdk version 33.1.1.713. In my applications, I receive data over my domain connections with https.
However, after the application is opened, when URL Request runs, Adobe air shows a warning. It reports that the domain I am using is not secure. This pop-up warning appears in from below android 9

versions. This problem does not exist in higher versions.
What is the cause of this warning? How can I fix it?
thanks

[leossmith]

That is a typical issue with air's or servers certificate expiring. I had to pass everything through cdn in an app to avoid that earlier this year.

[FliplineStudios]

@mehmury Any idea if this is related to #1228 from when Let's Encrypt's old root certificate expired at the end of September? I believe some older iOS and Android devices may not trust the newer root/intermediate certificate that Let's Encrypt uses now, so it's flagged as not being secure. We also had to switch to a paid SSL cert that devices would trust to get around the problem.

[mehmury]

I switched to a paid ssl certificate. However, I still keep getting the same warning. I think there is a problem with the certificate of Air sdk.

[mehmury]

The ssl certificate I use on the server seems valid and without any problems. For air 33.1.1.713 sdk, I still get these warnings in Android old versions. I will wait for the new air sdk version.
If the warning still persists, it looks like it might be a problem in my future app updates.

[ajwfrost]

Hi

In AIR on Windows, I get:

Which basically means we can't check your certificate issuer's revocation list.. because the URL is missing from the certificate. So e.g. your certificate details have:

whereas another website (ssl247.co.uk) has:

It's curious that it works in newer Android versions, but it's possible that they have some local mechanism for checking relevant revocation lists?

[raresn]

I get this for a few of my clients as well.
The only way i could solve it is by removing the check for SSL from internet explorer-> internet settings

[mehmury]

I bought the ssl certificate for my domain 1 day ago. Could it be because it was just added that it is blank in the list? Can it be added after a while?

[mehmury]

I solved the cause of the problem. I checked the devices I tested. My android devices that gave this warning were registered to the company account on Google Works. Such a mistake occurred because they were old android versions.
I removed one of the devices from my Google Works account and the warning went away. It appears that there is a valid security warning for devices registered with Google Works.

Problem solved.
Thanks

[ajwfrost]

Okay interesting! I would still have said that the certificate is missing a field (I think this is just part of the certificate generation options rather than being anything caused by the fact it was only recently generated etc..) -> but at least it seems Android is consistent in how it's handled!

thanks

[walddada]

hello
I have a problem I don't know is for me or not
when I publish APK from Adobe Animate cc
The APK file doesn't work in my emulator

adobe sdk sdk_33_1_1_680

thanks