AW: Firefox on Android and certificate error

Android can be a bit more picky when it comes to certificates, the same goes for some older Firefox versions. Make shure to provide the certificate chain on your EZProxy SSL certificate settings. That generally is a good idea anyways, but especially so when it comes to Android devices. Use SSLabs to check your EZProxy server is sending out the certificate chain.

That setting is your EZProxy admin page under Manage SSL Certificates, select the active certificate. "Certificate Authority Chain (Intermediate Certificates)", the box at the bottom.


--
Christian Wimmer

Ludwig-Maximilians-Universität München
University Library
Department Information Technology

Geschwister-Scholl-Str 1, D-80539 München, GERMANY
Telefon: +49 89/2180-5783
Email: [email protected]



Von: EZproxy List <[email protected]> Im Auftrag von Anders Johansson
Gesendet: Freitag, 25. Oktober 2019 09:34
An: [email protected]
Betreff: [EZPROXY-L] Firefox on Android and certificate error

Hello,

Has anyone else experienced trouble with the most recent versions of Firefox on Android lately? When trying to access anything through Ezproxy we now get a "This Connection is Untrusted" on the particular setup. When checking Technical Details I get "[...] uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unkown. [...] Error code: SEC_ERROR_UNKNOWN_ISSUER".

To my knowledge, our certificate is ok. We have no problem with other browsers on Android, we have no problems on iPhone, with Firefox on Win7, Win10 and Linux Mint, and those are the ones I have tested.

Any suggestions?

Kind regards
Anders Johansson
Sweden

________________________________

To unsubscribe from the EZPROXY-L list, click the following link:
http://listserv.oclclists.org/scripts/wa.exe?SUBED1=EZPROXY-L&A=1


********************************************************************
If you wish to stop receiving messages from EZPROXY-L or otherwise amend your preferences,
you can do so <a href="https://www.oclc.org/forms/internet-subscription.en.html">here</a>.
Or email [email protected] including the relevant text below in the body of the email:
• To unsubscribe: "unsubscribe EZPROXY-L"
• To receive EZPROXY-L in digest form: "set EZPROXY-L digest"
• To set your options to no mail: "set EZPROXY-L nomail"
• To receive these messages in the future "set EZPROXY-L mail"
To contact the list owners directly please send your message to [email protected].
If you unsubscribe from EZPROXY-L, you will no longer be able to participate in any of its features, including the public forum.
To unsubscribe from all OCLC marketing email communications
(including all OCLC listervs, OCLC Connect emails, OCLC event notifications, product/service/cooperative updates and newsletters),
please email us at [email protected].