SSL is not trusted on Android browsers

Submitted by LeGiangAnh on Tue, 12/22/2015 - 11:51 Pro Licensee

Hi team,

After installing the SLL in my virtual server, I found that it works correctly on PC and iOS browser. However, on Android browser it didn't work and show untrusted site. https://jplay.tv I bought the SSL here: https://www.name.com/ssl (Rapid SSL)

I found these link but I didn't know how to check it in Virtualmin: http://stackoverflow.com/questions/13862908/ssl-certificate-is-not-trust... http://stackoverflow.com/questions/11340298/certificate-trusted-on-pc-bu...

Please help.

Thanks, Giang Anh

Status: 
Active

Comments

Submitted by andreychek on Tue, 12/22/2015 - 11:56

Howdy -- I use this site here for testing SSL support:

https://www.sslshopper.com/ssl-checker.html#hostname=jplay.tv

The results there suggest that your domain may not have the browser's CA Certificate installed.

In addition to the SSL certificate, they should have also given you a CA Certificate (also known as an Intermediate Certificate) to install alongside the SSL.

You can install that by going into Server Configuration -> Manage SSL Certificates -> CA Certificate.

Submitted by andreychek on Tue, 12/22/2015 - 15:03

Yeah, it does look like a certificate is installed in the CA Certificates field -- it looks like it may not be the correct one though.

Some of those are tricky, as some require merging multiple certificates into one.

What you may need to do is work with your SSL provider, and ask for their assistance as to what the proper certificate to use for the intermediate certificate.

We at Virtualmin don't actually know what the correct CA certificate is, only your provider would know that. All we know for sure is that the CA certificate is currently showing up as being incorrect.

Submitted by andreychek on Tue, 12/22/2015 - 15:29

Ah, excellent!

Is it working properly for you in Android now?

Submitted by LeGiangAnh on Tue, 12/22/2015 - 21:29 Pro Licensee

It's still the same, red https.

Submitted by andreychek on Tue, 12/22/2015 - 22:04

Hmm, it works for me in my Android device. I get the green lock symbol.

In all the testing I've done, it does appear the CA Certificate is setup and working correctly.

I suspect you're seeing either a cache issue on your device, or you have an old Android version that doesn't support newer SSL ciphers needed for a secure connection.

Edit: What Android version are you using there? And which browser are you using?