Android 'Trusted Credentials' not consulted when determining valid certificates.
Steps to reproduce
- Deploy Nextcloud server with private certificate chain
- Add root certificate as a 'Trusted Credential' in Android
- Attempt to sign into the Android app
Expected behaviour
The private certificate is accepted because the Android system trusts the root certificate that signed the web server certificate.
Actual behaviour
The certificate is not trusted and produces the following error:
Low level error: Get https://
: /index.php/apps/ocsms/get/apiversion?format=json: x509: ;certificate signed by unknown authority
Server configuration
Nextcloud/ownCloud version: Nextcloud 16.0.5
PHP version: PHP 7.2.21
HTTPd server: Server version: Apache/2.4.41
Client configuration
Android version: 9
Phone: oneplus A5000 (oneplus 5)
Nextcloud SMS app version: 2.0.5
Same here. Same issue.
I think this issue belongs to the Android repository of the Android companion app for OCSMS: https://github.com/nerzhul/ncsms-android