Android webview get sslError SSL_UNTRUSTED but certificate is valid

Question

I\'ve implemented onReceivedSslError method in my WebViewClient to properly handle invalid https certificate in webview:

@Override
        public voi         


        

Answer 1

For me this was an issue with the server I was trying to reach. It had a broken intermediate certificate chain. It was the redirect server that had a broken chain. When there is a broken chain the webview has no way to resolve because it does not know where to look for the correct cert.

Use this tool to check for common misconfigurations. Be sure to check any redirects as well.

Android does not support Authority Information Access

And therefore there is no AIA Fetching

But?!.. it works in browsers Yes, It works in browsers because all browsers carry around a list of intermediates to fall back on when the cert has a broken chain.

Solution: Fix certificate chain on server.