LetsEncrypt cert causing CertPathValidatorException for HTTP private mode?
See original GitHub issueI’m currently trying to set up this app with home assistant behind an nginx reverse proxy, which uses a wildcard cert from LetsEncrypt. I’ve never had troubles with other apps accessing HA on my phone, but OwnTracks v1.2.7 shows the following error when using HTTP private connection mode:
javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.
I’ve not specified a server CA and honestly don’t want to - my phone should already trust it. Any ideas how this can be fixed? Thanks in advance!
(btw, using a Google Pixel with latest Android 9 beta)
Issue Analytics
- State:
- Created 5 years ago
- Comments:6
Top Results From Across the Web
Invalid and valid in same browser - Help
The version of my client is: certbot 0.31.0 ... I discover that it happened only in my browser and even in incognito mode...
Read more >javax.net.ssl.SSLHandshakeException: java.security.cert ...
The reason this occur is the JVM/Dalvik haven't not confidence in the CA certificates in the system or in the user certificate stores....
Read more >Let's Encrypt SSL Certificates for Java Developers - Axibase
The client uses its private trust store ( CAfile: /etc/ssl/certs/ca-certificates.crt above) containing the list of trusted CA certificates. These trusted CA ...
Read more >java.security.cert.CertPathValidatorException: Trust anchor for ...
javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found. ... Caused by: ...
Read more >npm allow self signed certificate - You.com | The search engine you ...
Switch to Private ... NPM install Error: self signed certificate in certificate chain ... apm config set strict-ssl false apm config set http-proxy ......
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found

Good question. If the phone trusts the LE CA chain it should work like you mentioned. I’ve my own root CA and subordinate CA added to the Android store and it works like a charm.
I’ll add a LE certificate and check for any issues.
Fun fact: I renewed my cert via acme.sh and suddenly it works without the client CA with the same OS and OwnTracks version… it probably was a server side issue then, so sorry for wasting your time and thanks for the support 😃