Android devices not connecting anymore
-
Good morning,
I recently updated the certificate of my http server. The only change it suffered is that the CN is now a wilcard name. Of course, it covers the server name. After doing that devices are not connecting anymore. Is this normal?. Has anyone ever suffered this?.
Best regards,
-
Hi @egoitzau,
did you maybe have cert pinning configured with your old cert? https://security.stackexchange.com/a/29990
-
Can that be configured in Z-push?.. I have not configured it… unless, wanting doing it!!..
-
@egoitzau said in Android devices not connecting anymore:
Can that be configured in Z-push?
No, that would be something you have configured in your webserver. Z-Push itself does not know or care about your ssl certificates.
-
Hi Felix,
My webserver is Nginx… and I don’t use client side certificates… I don’t have configured (wanting to do it) nothing similar… can perhaps Android devices have device pinning enabled?. I would ask for it… but have said they don’t…
-
@egoitzau said in Android devices not connecting anymore:
and I don’t use client side certificates
I wasn’t talking about client certificates.
Have you tried opening the address of your z-push system in a browser on your Android device? Maybe the cert is simply not trusted by your devices?
In any case its hard to know what problem you are experiencing without having a direct look at your system. If you have a Kopano subscription I would recommend to get in direct contact with the Kopano support.
-
Hi Felix,
Thank you so much. It was an issue related to the certificate and encription renegotiation apparently.
Thanks a lot
Regards,