https://bugs.kde.org/show_bug.cgi?id=472851

--- Comment #11 from reportthebug <chris.seife...@onenetbeyond.org> ---
(In reply to Volker Krause from comment #10)
> Ok, that is likely the cause of this problem then. And this is not limited
> to the indoor map, but would affect any API use on a server using Let's
> Encrypt certificates.
> 
> There are three possible options I can think of:
> (1) You manually install the ISRG X1 certificate from
> https://letsencrypt.org/certificates/, assuming that is possible on Android
> at all.

I installed the Self- and Cross-signed variant of ISRG Root X1 and also OCSP
X1, but the error still occurs.

> (2) We bundle an updated CA certificate set with all our network-using apps
> (which is presumably what your browser does). That isn't hard technically,
> but it's substantial compliance work to ensure we don't make things worse by
> shipping a not trustworthy certificate.

This does sound like the best option. Also, the error still occurs on my older
phone, it works fine on my newer one. But it may be happening to other users
who have phone configurations like my older phone, so a fix would be helpful.


> (3) We add an option to ignore the error. That opens the door for
> accidentally compromising security even for people with correct CA
> certificates though.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to