pulsejet / memories

Fast, modern and advanced photo management suite. Runs as a Nextcloud app.
https://memories.gallery
GNU Affero General Public License v3.0
3.17k stars 86 forks source link

Memories Android App does not use custom CA #1259

Open CoderTobi opened 3 months ago

CoderTobi commented 3 months ago

Describe the bug

The Android App does not seem to use the custom CA storage on Android. I have my own CA infrastructure. I created a root certificate and signed other certificates like the one for my Nextcloud with it. My root certificate (CA) is installed on my PC (Windows) and Phone (Android) as a trusted CA. The Chrome app on my phone recognizes my custom CA and accepts it as valid but the Memories Android app only lets me connect if I tick the box to skip certificate validation.

Steps To Reproduce

  1. Create a self-signed cert (this will be your CA)
  2. Install the cert on your phone as a trusted CA
  3. Create a cert for your Nextcloud and sign it using your just created self-signed cert (your CA)
  4. Set up Nextcloud using the just created cert for it
  5. Try to connect to your Nextcloud using the freshly installed Memories Android App and don't tick the Box to skip validation

Platform

- OS: Debian (Docker) and Android
- Browser: Chrome (Android)
- Memories Version (Server): 7.3.1
- Memories Version (Android): 1.12
- Nextcloud Version: 29.0.4
- PHP Version: 8.2.21

Screenshots

No response

Additional context

zerog981 commented 2 months ago

I can confirm this issue:

The error I get is java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.