User must validate twice the certificate of the server

openhab / openhab-android

openHAB client for Android

https://play.google.com/store/apps/details?id=org.openhab.habdroid

Eclipse Public License 2.0

589 stars 317 forks source link

User must validate twice the certificate of the server #3638

Open dilyanpalauzov opened 2 months ago

dilyanpalauzov commented 2 months ago

I uninstall openHAB-Android. I install openHAB-Android 3.12.0. I start it. It does find the local instance and then asks me to confirm the certificate for the https-connection. I accept it. Then openHAB-Android asks me again to verify the same certificate.

There shall be only one question to trust the certificate of the discovered openHAB server.

mueller-ma commented 2 months ago

I think it's because the certificate is invalid for two reasons: It's self-signed and doesn't match the IP address. I wounder if we shouldn't discover openHAB over http instead, so there's no warning anymore.

dilyanpalauzov commented 2 months ago

Discovery over HTTP (insecure) will disable the SIP widget, which works only over HTTPS.