CODEWITHSUNDEEP
ruby-on-railsgoogle-chromesslnginxhttps
Erica
Erica

Reputation: 221

NET::ERR_CERT_AUTHORITY_INVALID https in red color

When i try to access my ruby site from android mobile device i get following error, can anyone help me solving this problem.

https error

With following added error NET::ERR_CERT_AUTHORITY_INVALID

Upvotes: 6

Views: 6568

Answers (2)

Bibek Sharma
Bibek Sharma

Reputation: 3330

You need to add intermediate certificate file in your nginx configuration. Here is the powerfull tool by zakjan to obtain the intermediate certificate files using your main certificate, Store obtained crt file to your server and mentioned it in the nginx.conf in ssl_certificate

Upvotes: 7

Fedcomp
Fedcomp

Reputation: 2455

If it's not self-signed then one of certificates in your ssl certificate chain may use vulnerable encryption algorithms like SHA-1. Check what encryption each certificate uses (you may do it on PC). Probably you will need to find ssl registrator which does not uses old encryption algorithms. you may use https://www.ssllabs.com/ssltest/ to check if your site has issues with SSL configuration or certificate itself.

In fact i just checked it and here's result https://i.sstatic.net/k7oF8.jpg . The vulnerabilities it output could be the reason why mobile chrome is not trusting the certificate and shows you warning.

Another possible issue is man in the middle attack on your device. What network are you using? is it the same as your PC network? if not, it could be mitm attack on you.

Upvotes: 1

Related Questions