easysync icon indicating copy to clipboard operation
easysync copied to clipboard

Application does not support private X.509 PKI

Open astravelata opened this issue 1 year ago • 1 comments

Describe the bug EasySync does not appear to read user-defined certificate authorities from the Android system. Trying to connect to a server that uses a private CA results in:

Error: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.

This certificate works in Chrome and other applications that read the CA, so appears to be limited to EasySync. EasySync should preferably read from the user's trusted CAs, but could also allow for an "insecure" option in which the user disables TLS validation (e.g. for self-signed certificates.)

Smartphone (please complete the following information):

  • Device brand/model: Pixel 6a
  • Android version: 13

astravelata avatar Jan 09 '24 06:01 astravelata