How to solve certificate issue of an Android banking app? [released]
asked 2018-05-14 17:21:05 +0300
My banking app shows an error message, after it tried to verify a QR code to enable trusted access to my account:
SERVICE_INT_ERROR [java.security.cert.CertPathValidatorException: Trust anchor or certification path not found]
If i search the installed TSL certificates within the Sailfish settings, I can find the required DigiCert Global Root G2 cetificate. I did already read the thread about installing a certificate and followed the instructions if the quoted readme file.
Is there a seperate path for certificates, that are used by android apps?
I will also write the support of my bank
@jsommer, you may try importing the missing certificates for completing the (usually three tiered) certificate chain on the Android (AlienDalvik) side by the help of CAdroid (at.bitfire.cadroid).
olf ( 2018-05-14 19:11:57 +0300 )editThank your very much for your response. CAdroid is removed from F-Droid but still available at Github. I triggered a download of the certificate within CAdroid and the app tells me, that the certificate is already trustworthy and needn't to be imported. It soundls, that the banking app has a bug or the error message is not correct. Some Android apps like Wire are not working with Alien Dalvik any more, because Android 4.4.4 is using TLS 1.1, but TLS 1.2 becomes mandatory.
jsommer ( 2018-05-15 16:08:49 +0300 )editMy bank did provide an update of the app. The problem was on their side. It's working now.
jsommer ( 2018-05-18 19:14:24 +0300 )edit