topic Re: I get an error when accessing the self-signed server certificate system from Android. in Alfresco Forum

I get an error when accessing the self-signed server certificate system from Android.

yoshiw — Sat, 13 Oct 2018 02:53:52 GMT

I am using a community version with a self-signed server certificate.I installed a CA certificate on android and connected, but there is a pattern that error_session_certificate error occurs.Android 5.1.1 & Alfresco 1.8.3.309 = successAndroid 7.1.1 & Alfresco 1.8.274 = successAndroid 7.1.1 &

Re: I get an error when accessing the self-signed server certificate system from Android.

afaust — Sun, 14 Oct 2018 12:38:38 GMT

Potentially by using a better certificate. In the age of Let's Encrypt there should be no need to use a self-signed certificate for anything other than closed-network use cases. To be fair, I don't have any detailed information on the Alfresco Mobile client, but whenever I see "self-signed certificate" and "error", the self-signed bit is the first thing I would adress / eliminate as a potential source of the problem.

Re: I get an error when accessing the self-signed server certificate system from Android.

yoshiw — Wed, 17 Oct 2018 22:09:09 GMT

Thank you for your response.

I tried Let's Encrypt in the past, but I could not get it with Dinamic DNS that I use. This is because the number of uses in the domain has exceeded the limit as in the case of Azure's problem before.

Since I was able to use any patterns I wrote with Chrome, I thought that the CA certificate and server certificate I created are acceptable, but as you pointed out, the certificate has a potential problem There is a possibility of being held.

I also tried protecting information with client certificates. This worked correctly in Chrome, but "Alfresco for Android" could not present a certificate.

Please let me know if conditions of available certificates are known.

* Because I can not speak English, I create this sentence using Google Translate. Please forgive me when there is a wrong wording.

Re: I get an error when accessing the self-signed server certificate system from Android.

afaust — Mon, 22 Oct 2018 08:26:42 GMT

As long as the name of the DNS entry you have dynamically assigned to your IP remains the same, you should be able to reuse a certificate and not have to generate so many that you hit the limit. But maybe I am misunderstanding your problem...