Hello,
I have a small problem with online tracking not accepting a custom CA:
java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.
CA cert is installed in the Android 14 (samsung) cert store. CA is valid, certificate is valid. CN is valid. I have no problems with this cert anywhere else.
If Android (and google) is so aggressive, maybe a bit different approach is needed? Untrusted cert pinning would be OK if fingerprint is shown.
I can't use i.e. Let's encrypt CA because of security and control.
I can fallback to plain http if I have to, but this will endanger someone. VPN is already used on that device. (yes, android aggressiveness include only a single vpn! On a linux kernel which can easily handle tens if not hundreds of vpn interfaces)
Disclaimer:
Yes, I understand android platform is not user friendly, has a closed system, no access to basic functions and is susceptible to government control. Android to user aggressiveness is known to me and I'm fully responsible to work around it and hack it to make it work properly.
Locus Map 3.70
Android 14
Hello gless,
you are using a custom live-tracking service with an installed Let's Encrypt certificate, right?
I'm not sure how to easily help here. I do not want to open any side doors to certain servers, sorry.