mirror of
https://github.com/pachli/pachli-android.git
synced 2025-01-10 16:03:04 +01:00
3e1d94ded2
Android 7 devices no longer trust certificates issued by Let's Encrypt (see https://letsencrypt.org/2020/11/06/own-two-feet and https://letsencrypt.org/2023/07/10/cross-sign-expiration.html for details). To work around that provide the Let's Encrypt root certs as resources. On API 24+ devices add those via network_security_config.xml. On API 23 devices they need to be installed manually for OkHttp SSL connections, and checked when there is an SSL error in LoginWebViewActivity. The root certificates were downloaded from https://letsencrypt.org/certificates/: - https://letsencrypt.org/certs/isrgrootx1.der (self-signed) - https://letsencrypt.org/certs/isrg-root-x1-cross-signed.der (cross-signed) - https://letsencrypt.org/certs/isrg-root-x2.der (self-signed) - https://letsencrypt.org/certs/isrg-root-x2-cross-signed.der (cross-signed) Fixes #638 |
||
|---|---|---|
| .. | ||
| about | ||
| lists | ||
| login | ||