Skip to content

Application does not support private X.509 PKI #15

@astravelata

Description

@astravelata

Describe the bug
EasySync does not appear to read user-defined certificate authorities from the Android system. Trying to connect to a server that uses a private CA results in:

Error: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.

This certificate works in Chrome and other applications that read the CA, so appears to be limited to EasySync. EasySync should preferably read from the user's trusted CAs, but could also allow for an "insecure" option in which the user disables TLS validation (e.g. for self-signed certificates.)

Smartphone (please complete the following information):

  • Device brand/model: Pixel 6a
  • Android version: 13

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions