search

nilsbraden / ttrss-reader-fork

An Android-Client for the self-hosted Tiny Tiny RSS feedreader
https://www.nilsbraden.de/TTRSS-Reader/
151 stars 40 forks source link

Unable to connect after update - SSLPeerUnverifiedException #422

Open openhs opened 4 years ago

openhs commented 4 years ago

After update from 1.95.1 to 1.95.7 and 1.95.8 TTRSS-Reader cannot connect anymore to my server. It shows error:

SSLPeerUnverifiedException in doRequest(): Exception-Message:
Hostname <my.host> not verified:
   certificate: sha256/...
   DN: CN=<my.host>, OU=...
   subjectAltNames: [] No Exception-Cause available

Options "Accept all SSL certificates" and "Trust all Hosts" does not work. I have also tried to setup a custom keystore as described in the wiki but still getting the same error. I do kill the application between various attempts and also rebooted after keystore setup.

Version 1.95.1 could connect if "Accept all SSL certificates" was enabled.

This is on OnePlus 5T with Android 9 (LineageOS 16) without any Google apps. My server uses custom port so the connection URL is like: https://my.host:11200/tt-rss. TTRSS-Reader is from F-Droid.

jochenberger commented 2 years ago

Same here on LineageOS 18.1

nodiscc commented 2 years ago

@openhs @jochenberger I used to have the same problem, fixed it by importing my self-signed certificate in PEM format to the Android trust store as a certificate authority (just download the self-signed cert from the server, open it from your Android file manager). The certificate must have the CA:TRUE basic constraint else Android won't import it at all.

[1], [2], [3], [4]

A CA certificate must include the basicConstraints value with the CA field set to TRUE.

TTRSS-Reader from F-Droid, LineageOS 17.1