cwa-app-android icon indicating copy to clipboard operation
cwa-app-android copied to clipboard

Error Reason: 2001; App does not work anymore

Open gagamail opened this issue 4 years ago • 213 comments

EDIT: Corona-Warn-App Open Source Team

Solved: See FAQ:

  • DE https://www.coronawarn.app/de/faq/#cause2001
  • EN https://www.coronawarn.app/en/faq/#cause2001
  • In-App error notification will be linked to FAQ

ORIGINAL POST

Avoid duplicates

  • [X] Bug is not mentioned in the FAQ
  • [X] Bug is specific for Android only, for general issues / questions that apply to iOS and Android please raise them in the documentation repository
  • [X] Bug is not already reported in another issue

Describe the bug

When I open the App I immediatley get the error message "Ursache: 2001 an error occured while trying to establish a secure connection to the server". This results in a not working App. Deinstalling and restarting did not help. Last confirmed working of the App was on July, 20th, first time I saw the error was on July, 23rd. In between I did not start the App.

Expected behaviour

The App should work

Steps to reproduce the issue

Starting the App is enough, I did not do anything specific and I did not change anything on my own on my Smartphone since the App is not working anymore.

Technical details

  • Mobile device: Samsung Galaxy Note 8 SM-N950F
  • Android version: 9, July security patch
  • CWA version: 1.1.1

Possible Fix

No idea

Additional context

My first thought was that Blokada changed something. Deactivating Blokada did not help. And even if so I am not willing to deactivate it completely (CWA is on the Allowed Apps list) as the App worked with it before.


Internal Tracking ID: EXPOSUREAPP-10944

gagamail avatar Aug 04 '20 06:08 gagamail

Thanks for the report. We've also been getting similar reports from Play Store comments. Reports from there show that

  • it seems to be unrelated from rooting/modifications, personal firewalls or similar measures
  • it seems to be independent from the used network (wi-fi or cellular)
  • it might be related to the latest update 1.1.1 as some people report that it occurs only since the latest update

Quotes from Play Store:

Initially, but for several days (even after reinstallation) a "Cause 2001" error worked: a secure connection to the server could not be established. EDIT: The error suddenly appeared / without changing the network, is in all WLAN networks, and also in mobile data mode. EDIT 2: the device was not modified and no firewall was installed. Resetting the network settings did not solve the problem

Until the update - all errors correcting - the app ran really well. No error message or similar. However, since the update: Error: CAUSE 2001. Rien ne va plus! No more risk assessment. This is how the app helps me - especially when the number of cases increases again. Please troubleshoot here. Then I also like to upgrade.

Unfortunately now without function. Something has been made worse, now it only shows that something went wrong. Cause of error 2001. Under "Details" there follows a cryptic error message. Android 9, Samsung S8. No blockers active. Own WiFi without restrictions. And before I get any tips like updating: I have installed version 1.5. Theoretically should correct errors, but in practice does the opposite. I uninstalled the app first.

After the update to 1.1.1 only error message 2001 comes. Even a restart of the cell phone brought no improvement. Risk determination is active, risk status is only displayed after the error message. Cause 2001 is displayed. Something went wrong. I am logged in to my own WLAN and have not made any changes to the network. Even a new installation did not bring any improvement. After the risk determination has been switched off, the error message disappears.

A different error after each update. Now after the latest update on 07/25/2020 "Cause 2001" on Huawei P8 Android 6.0. an error occured while trying to establish a secure connection to the server. Tried 3 different WLANs as well as cell phones. All unsuccessful. With another device - Samsung J3 - it works in the same networks.

The following error message appears when the APP is called: CAUSE: 2001 Something went wrong an error occured while trying to establish a secure connection to the server What can I do? Thank you for your help_______________________________ Edit: Unfortunately a restart does nothing to change this behavior. ___________________________________________ Edit: The error has occurred since the update to version 1.1.1. Lenovo Moto G5. Android 8.0.1, Google Play Store 21.0.17-all, services 20.24.14

The following error message appears when the APP is called: CAUSE: 2001 Something went wrong an error occured while trying to establish a secure connection to the server What can I do? Thank you for your help. The device has been restarted several times since it first appeared. The error always comes reliably since the update to version 1.1.1

Reported devices (all on CWA 1.1.1):

  • moto g(6) (ali_n), Android 9
  • OnePlus5, Android 10
  • Huawei P30 Pro (HWVOG), Android 10
  • Huawei P8 Android 6.0
  • Galaxy S8 (dreamlte), Android 9
  • HTC U11 (htc_ocndugl), Android 9
  • Moto G (5th Gen) (cedric), Android 8.1

As reports are increasing, we will address this with high priority to product management to prioritize analyses and a fix.

Mit freundlichen Grüßen/Best regards, SW Corona Warn-App Open Source Team

SebastianWolf-SAP avatar Aug 04 '20 12:08 SebastianWolf-SAP

@gagamail Can you please contact me directly to provide more details about the network setup

thomasaugsten avatar Aug 05 '20 07:08 thomasaugsten

@thomasaugsten @gagamail Hi, gagamail listed Android July Patch for his device settings. The July Patch also consists of Qualcomm fixes that seem to affect wifi. May there be any (timely) relation to the July Patch? https://source.android.com/security/bulletin/2020-07-01?hl=en

vaubaehn avatar Aug 05 '20 12:08 vaubaehn

@thomasaugsten @gagamail Hi, gagamail listed Android July Patch for his device settings. The July Patch also consists of Qualcomm fixes that seem to affect wifi.

The SM-N950F is the version with the Samsung Exynos Processor and not Qualcomm Snapdragon. So I guess it can't be related?

May there be any (timely) relation to the July Patch? https://source.android.com/security/bulletin/2020-07-01?hl=en

According to the logfiles I installed the last upgrade (i don't think there was any other upgrade besides the July Patch) on July, 28th which would mean it already did not work without July Patch.

gagamail avatar Aug 06 '20 06:08 gagamail

Hi all, I am effected by this bug as well (last working was the 20th July as well). Since the error message gives more details hinting in the direction of the error, I wanted to provide some information from it. Unfortunately I am not allowed to take a screenshot of the error message and will thus not type the whole error stack. The full error message starts with:

Etwas ist shiefgelaufen. Ursache: de.rki.coronawarnapp.exception.CwaWebSecurityException: an error occurred while trying to establish a secure connection to the server

And it ends with:

Caused by: java.securit.cert.CertPathValidatorException: Trust anchor for certification path not found.

I hope this helps :)

Cheers

DerPlankton13 avatar Aug 06 '20 09:08 DerPlankton13

Hi @gagamail , thanks for clearing up!

According to the logfiles I installed the last upgrade (i don't think there was any other upgrade besides the July Patch) on July, 28th which would mean it already did not work without July Patch.

So, any problems with 2001 related to that patch can be completely excluded then. And you are right, Qualcomm for that model is US market only. Anyway, there were also some Samsung internal fixes and Android kernel fixes. However, doesn't play any role here.

vaubaehn avatar Aug 06 '20 12:08 vaubaehn

Hi @DerPlankton13 , thanks for your report! You mentioned that app was working well until July 20th. Interestingly, around July 21st/22nd, CWA-server 1.2.0 was released... May there be any correlation, @thomasaugsten @EvgeniiSkrebtcov ?

vaubaehn avatar Aug 06 '20 12:08 vaubaehn

Hi, the issues is the app cannot verify the ssl certificate of the diagnosis key server (Introduced with v1.1.1). This can caused by multiple things.

  1. Date/Time is not correct.
  2. Android Root/CA certificates are not up to date
  3. Antivirus App is breaking the ssl chain
  4. Network/Firewall tool like pi-hole is breaking the ssl chain

Maybe you can provide a screenshot of Open Settings Tap “Security & location” Tap “Encryption & credentials” Tap “Trusted credentials.”

thomasaugsten avatar Aug 06 '20 12:08 thomasaugsten

maybe any problem in server certificate pinning?

vaubaehn avatar Aug 06 '20 12:08 vaubaehn

1. Date/Time is not correct.

Is correct.

2. Android Root/CA certificates are not up to date

I have one certificate which is not up to date. Thats an old Deutsche Telekom Root CA 2 which I needed in the past for WLAN access.

3. Antivirus App is breaking the ssl chain

No Antivirus App installed

4. Network/Firewall tool like pi-hole is breaking the ssl chain

In my home WLAN I have a pi-hole, but the App also does not work outside of this WLAN. On the smartphone I have Blokada which I completely deactivated. Before July 21st the App worked with both activated.

gagamail avatar Aug 06 '20 13:08 gagamail

@gagamail Can you remove the old CA and test again?

thomasaugsten avatar Aug 06 '20 14:08 thomasaugsten

@gagamail Can you remove the old CA and test again?

Looks like I can't. I don't find a possibility to deinstall it, according to what I found with google it is not possible to completely remove a WLAN CA. But it is (and was before) dectivated.

gagamail avatar Aug 07 '20 05:08 gagamail

IMG_20200807_081146 Redmi Note 7

kira99 avatar Aug 07 '20 06:08 kira99

Hi Kira, can you provide a screenshot of Settings Tap “Security & location” Tap “Encryption & credentials” Tap “Trusted credentials.”

thomasaugsten avatar Aug 07 '20 06:08 thomasaugsten

IMG_20200807_082025 IMG_20200807_082418

kira99 avatar Aug 07 '20 06:08 kira99

Hi Kira, can you provide a screenshot of Settings Tap “Security & location” Tap “Encryption & credentials” Tap “Trusted credentials.”

Did my screenshots help? If not, can you give me a hint where to find the settings?

kira99 avatar Aug 07 '20 06:08 kira99

@kira99 Settings->Additional Settings->Privacy->Trusted Credentials Is the button "Clear credentials" active?

thomasaugsten avatar Aug 07 '20 06:08 thomasaugsten

There is no additional settings in the App visible. Only settings. In settings everything is on. My operating system MIUI is in German. But I could not find any similar settings to credentials. Where do I have to look?

kira99 avatar Aug 07 '20 07:08 kira99

I mean the Android Settings not the App Settings

thomasaugsten avatar Aug 07 '20 07:08 thomasaugsten

Sorry, MIUI does not show this. The settings UI is not Android standard. I looked up privacy. There is not setting for credentials and I even have already activated developer mode for MIUI.

kira99 avatar Aug 07 '20 07:08 kira99

Ok maybe you can try Settings->Privacy & security -> Privacy->Trust agents Settings->Privacy & security -> Privacy->Encryption Credentials->Trusted Credentials Settings->Privacy & security -> Privacy->Encryption Credentials->User Credentials

thomasaugsten avatar Aug 07 '20 08:08 thomasaugsten

Or did you mean this? IMG_20200807_115641

kira99 avatar Aug 07 '20 09:08 kira99

@kira99 "Vertrauenswürdige Anmeldedaten" seems to be what you should look for.

akuckartz avatar Aug 07 '20 10:08 akuckartz

Hi thanks for your help. The setting: Vertrauenswürdige Anmeldedaten is empty? Ok this helps. I deleted one your screenshots because of privacy reasons

thomasaugsten avatar Aug 07 '20 10:08 thomasaugsten

Vertrauenswürdige Anmeldedaten has a lot of system certificates, but no user certificate.

kira99 avatar Aug 07 '20 10:08 kira99

Can you provide a screenshot of this.

thomasaugsten avatar Aug 07 '20 10:08 thomasaugsten

IMG_20200807_124622 Left column shows names of certificates. Screenshot_2020-08-07-12-46-28-022_com android settings

kira99 avatar Aug 07 '20 10:08 kira99

The screenshots I made show exactly the same error notations as reported by "Kira99". (Samsung Galayx S8 with Android9).

The error always occurs when I try to activate the warning function. Sometimes also just after opening the app. It is independent from the connection, or time, or any other apps running. Wifi is working fine, mobile connection too. I did not exclude anything, since I did not manipulate my security settings up to now. My mobile provider is Vodafone, maybe they have some firewall function included?

NixAlsVerdruss avatar Aug 07 '20 19:08 NixAlsVerdruss

The system certificates would be interesting.

@NixAlsVerdruss Did you check your Date/Time is correct on your phone? Is the device a private or company device? Is there any firewall or antivirus app installed? Because it is not working on wifi and mobile data the issue is on your device.

thomasaugsten avatar Aug 07 '20 19:08 thomasaugsten

  • Date/time seems to be correct
  • Private device, branded by Vodafone
  • No firewall, no antivirus - except the things Vodafone may have added without telling me.

As there are no problems with anything except this app, I don't think my device is defect. It seems the CoronaWarnApp has problems with some devices...

2020-08-07 21:39 GMT+02:00, Thomas Augsten [email protected]:

The system certificates would be interesting.

@NixAlsVerdruss Did you check your Date/Time is correct on your phone? Is the device a private or company device? Is there any firewall or antivirus app installed? Because it is not working on wifi and mobile data the issue is on your device.

-- You are receiving this because you were mentioned. Reply to this email directly or view it on GitHub: https://github.com/corona-warn-app/cwa-app-android/issues/968#issuecomment-670680833

NixAlsVerdruss avatar Aug 07 '20 19:08 NixAlsVerdruss