Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Let's encrypt certificates stop working for Android 7.0 and earlier beginning Feb 8th, 2024 #7646

Open
wmontwe opened this issue Feb 15, 2024 · 1 comment
Labels
priority: urgent Urgent issues that require immediate attention tb-team Tasks and features handled by project maintainers type: bug Something is causing incorrect behavior or errors

Comments

@wmontwe
Copy link
Collaborator

wmontwe commented Feb 15, 2024

Let's encrypt is phasing out their certificate cross-signing that allowed Android Devices prior to 7.1.1 to establish TLS connections.

They've announced that it will phase out begining Feb 8th, 2024.

This will result in a java.security.cert.CertPathValidatorException: Trust anchor for certification path not found. exception for every domain that renewed their certificate after that date or creates a new one.

We need to change to a trust store that trusts ISRG Root X1.

@wmontwe wmontwe added type: bug Something is causing incorrect behavior or errors tb-team Tasks and features handled by project maintainers priority: urgent Urgent issues that require immediate attention labels Feb 15, 2024
@wmontwe wmontwe self-assigned this Feb 15, 2024
@wmontwe wmontwe added this to the K-9 Mail 6.800 milestone Feb 15, 2024
@wmontwe wmontwe changed the title Let's encrypt certificates stop working for Android 7.0 and erlier begining Feb 8th, 2024 Let's encrypt certificates stop working for Android 7.0 and earlier begining Feb 8th, 2024 Feb 16, 2024
@wmontwe wmontwe changed the title Let's encrypt certificates stop working for Android 7.0 and earlier begining Feb 8th, 2024 Let's encrypt certificates stop working for Android 7.0 and earlier beginning Feb 8th, 2024 Feb 16, 2024
@williamdes
Copy link

Thank you for the notice and patch !

@wmontwe wmontwe removed this from the K-9 Mail 6.800 milestone Jun 5, 2024
@wmontwe wmontwe removed their assignment Jun 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
priority: urgent Urgent issues that require immediate attention tb-team Tasks and features handled by project maintainers type: bug Something is causing incorrect behavior or errors
Projects
None yet
Development

No branches or pull requests

2 participants