ssl - android does not trust a certificate -


i run openssl s_client -connect mywishboard.com:443 | openssl x509 -noout -subject -issuer , following information certificate (setted client developer)

depth=2 c = il, o = startcom ltd., ou = secure digital certificate signing, cn = startcom certification authority verify return:1 depth=1 c = il, o = startcom ltd., ou = startcom certification authority, cn = startcom class 1 dv server ca verify return:1 depth=0 cn = mywishboard.com verify return:1 subject= /cn=mywishboard.com issuer= /c=il/o=startcom ltd./ou=startcom certification authority/cn=startcom class 1 dv server ca 

then check go settings/system/trusted certificats , see startcom ltd among them enter image description here

however, when tring make https requests, throws

javax.net.ssl.sslhandshakeexception: java.security.cert.certpathvalidatorexception:  trust anchor certification path not found 

if use curl -i https://mywishboard.com/xxx, returns

curl: (60) server certificate verification failed. cafile: /etc/ssl /certs/ca-certificates.crt crlfile: none 

is certificate malformed, or need explicitly install android device?(but understand, if certificate signed trusted ca issuer, don't need install it, right?)

the website does not provide intermediate certificate required complete certificate chain. clients, android, unable build complete certificate path , not trust certificate when happens.

ssl labs report showing missing intermediate certificate

if site admin, correct way address download , supply intermediate certificate complete chain sent.


Comments

Popular posts from this blog

javascript - How to get current YouTube IDs via iMacros? -

c# - Maintaining a program folder in program files out of date? -

emulation - Android map show my location didn't work -