Groups | Search | Server Info | Login | Register

Groups > comp.mobile.android > #153817

Re: Let's Encrypt certificate not valid for Android 7 and older #7039,Closed

Show all headers | View raw

Arno Welzel wrote:
> The certificates for the root CA of Let's Encrypt can be found here:
> 
> <https://letsencrypt.org/certificates/>
> 
> However Android does not allow to import system wide root CAs for
> security reasons. So this will not help you.

I only belatedly looked at this thread (mainly because i know absolutely
 nothing about the topic at hand), so this is the first time I'm seeing it.

Doing a search gets me slightly up to speed on the problem set itself.
 <https://letsencrypt.org/2020/11/06/own-two-feet>
 <https://www.reddit.com/r/Android/comments/jpgv0v/lets_encrypt_wont_support_android_7_and_below_by/>

Android 7 (and older) doesn't trust Let's Encrypt's current root 
certificate ("ISRG Root X1").
Those devices only trust the old DST Root X3, 
which expired in 2021. 

Looking it up, "apparently" there are 3 possible maybe kind'a workarounds
(but, as you can imagine, they each solve a "special case" situation).
 a. Firefox fix (e.g., firefox mobile)
     Firefox apparently includes the ISRG Root X1 certificate internally, 
     so it will load Let's Encrypt sites perfectly even if the OS doesn't.
     <https://community.home-assistant.io/t/lets-encrypts-ca-is-no-longer-considered-valid-on-android-versions-older-than-7-1-1/717907>

 b. Manual install (under certain conditions)
    This says you can manually install it under certain circumstances.
    <https://voxelmanip.se/2024/09/17/installing-lets-encrypt-certificates-on-old-android/>

These are only search results. 
I have not tested any of this.

Worse, I don't even understand the issue well enough to come up
with my own ideas of how to solve it, even as I almost never 
fail when I try to solve any problem on a computing device.

So take that only as a dump of what the Internet suggests.
Good luck. Let us know how it works out for you overall.
-- 
On Usenet, we old men trade facts so everyone can make better choices.	

Back to comp.mobile.android | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Let's Encrypt certificate not valid for Android 7 and older #7039,Closed Jakub <jak74@interia.pl> - 2026-05-03 15:02 +0200
  Re: Let's Encrypt certificate not valid for Android 7 and older #7039,Closed Chris <ithinkiam@gmail.com> - 2026-05-03 13:31 +0000
    Re: Let's Encrypt certificate not valid for Android 7 and older #7039,Closed Eric Pozharski <apple.universe@posteo.net> - 2026-05-04 08:30 +0000
      Re: Let's Encrypt certificate not valid for Android 7 and older #7039,Closed David Higton <dave@davehigton.me.uk> - 2026-05-04 16:15 +0100
        Re: Let's Encrypt certificate not valid for Android 7 and older #7039,Closed Theo <theom+news@chiark.greenend.org.uk> - 2026-05-05 13:38 +0100
          Re: Let's Encrypt certificate not valid for Android 7 and older #7039,Closed Andy Burns <usenet@andyburns.uk> - 2026-05-05 13:57 +0100
            Re: Let's Encrypt certificate not valid for Android 7 and older #7039,Closed Arno Welzel <usenet@arnowelzel.de> - 2026-05-06 15:52 +0200
              Re: Let's Encrypt certificate not valid for Android 7 and older #7039,Closed Maria Sophia <mariasophia@comprehension.com> - 2026-05-06 11:01 -0600
                Re: Let's Encrypt certificate not valid for Android 7 and older #7039,Closed Arno Welzel <usenet@arnowelzel.de> - 2026-05-07 08:36 +0200
                Re: Let's Encrypt certificate not valid for Android 7 and older #7039,Closed Eric Pozharski <apple.universe@posteo.net> - 2026-05-10 01:03 +0000
        Re: Let's Encrypt certificate not valid for Android 7 and older #7039,Closed Eric Pozharski <apple.universe@posteo.net> - 2026-05-05 10:34 +0000
        Re: Let's Encrypt certificate not valid for Android 7 and older #7039,Closed Arno Welzel <usenet@arnowelzel.de> - 2026-05-06 14:52 +0200
  Re: Let's Encrypt certificate not valid for Android 7 and older #7039,Closed Arno Welzel <usenet@arnowelzel.de> - 2026-05-04 11:59 +0200

csiph-web