News for hackers. Stuff that matters.

A comment on Ask HN: How bad is it to use a self-signed SSL certificate?. Parent comment

Re:Ask HN: How bad is it to use a self-signed SSL certificate? by pyvek on Saturday May 31, 2014 @12:13PM (#7826360)
Also, StartSSL's certs don't work on android (you get cert not trusted error) for some reason.
[ Parent | on HN ]
Re:Ask HN: How bad is it to use a self-signed SSL certificate? by alec on Saturday May 31, 2014 @12:49PM (#7826474)
Works for me - I have a StartSSL personal cert and an Android phone (Nexus 5 / KitKat), and all of Chrome, Chrome Beta, and Firefox load up the site without any sort of warning or other indication. I also dug out a Jelly Bean phone (Galaxy Nexus) to try with the stock Android Browser and didn't have any issues.
[ Parent | on HN ]
Re:Ask HN: How bad is it to use a self-signed SSL certificate? by dvanduzer on Saturday May 31, 2014 @12:33PM (#7826435)
I haven't checked any recent Android trust stores, but this might be due to a lack of an intermediate certificate.

The vast majority of modern browsers know how to find intermediate certificates online. Android's browser doesn't, for whatever reason. You have to bundle it on your web server.

[ Parent | on HN ]
Re:Ask HN: How bad is it to use a self-signed SSL certificate? by pyvek on Saturday May 31, 2014 @09:52PM (#7827861)
That was the problem. Works well on my android now. Thanks!
[ Parent | on HN ]
Re:Ask HN: How bad is it to use a self-signed SSL certificate? by mike-cardwell on Saturday May 31, 2014 @01:07PM (#7826517)
StartSSL has worked on Android since version 2.2, which was released 4 years ago.
[ Parent | on HN ]