question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

LetsEncrypt cert causing CertPathValidatorException for HTTP private mode?

See original GitHub issue

I’m currently trying to set up this app with home assistant behind an nginx reverse proxy, which uses a wildcard cert from LetsEncrypt. I’ve never had troubles with other apps accessing HA on my phone, but OwnTracks v1.2.7 shows the following error when using HTTP private connection mode:

javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.

I’ve not specified a server CA and honestly don’t want to - my phone should already trust it. Any ideas how this can be fixed? Thanks in advance!

(btw, using a Google Pixel with latest Android 9 beta)

Issue Analytics

  • State:closed
  • Created 5 years ago
  • Comments:6

github_iconTop GitHub Comments

1reaction
binarybuckscommented, Jul 23, 2018

Good question. If the phone trusts the LE CA chain it should work like you mentioned. I’ve my own root CA and subordinate CA added to the Android store and it works like a charm.

I’ll add a LE certificate and check for any issues.

0reactions
sibblcommented, Aug 6, 2018

Fun fact: I renewed my cert via acme.sh and suddenly it works without the client CA with the same OS and OwnTracks version… it probably was a server side issue then, so sorry for wasting your time and thanks for the support 😃

Read more comments on GitHub >

github_iconTop Results From Across the Web

Invalid and valid in same browser - Help
The version of my client is: certbot 0.31.0 ... I discover that it happened only in my browser and even in incognito mode...
Read more >
javax.net.ssl.SSLHandshakeException: java.security.cert ...
The reason this occur is the JVM/Dalvik haven't not confidence in the CA certificates in the system or in the user certificate stores....
Read more >
Let's Encrypt SSL Certificates for Java Developers - Axibase
The client uses its private trust store ( CAfile: /etc/ssl/certs/ca-certificates.crt above) containing the list of trusted CA certificates. These trusted CA ...
Read more >
java.security.cert.CertPathValidatorException: Trust anchor for ...
javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found. ... Caused by: ...
Read more >
npm allow self signed certificate - You.com | The search engine you ...
Switch to Private ... NPM install Error: self signed certificate in certificate chain ... apm config set strict-ssl false apm config set http-proxy ......
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found