Skip to main content

Can't establish a connection due to an invalid certificate (Untrusted certificate not accepted)

Written by Alex Brainin

Issue

This message indicates that the app couldn't connect to the Ringotel server due to potential interception of SSL/TLS traffic in the user's network (man-in-the-middle), where an unauthorized SSL certificate is being used.

This could be due to the router settings set to listen in to TLS traffic or due to a malicious attempt or due to network filters intercepting HTTP traffic within the connected network. Since the application works only with Ringotel trusted certificate, to prevent the security breach, the connection was not accepted.

Solution

To address this, it is recommended to specify the certificate's CN in the Allowed CNs parameter provided in the connection settings (Security section). This step enables users to register from networks where SSL traffic interception occurs.

Important:

  1. Certificates must be valid (not self signed). The only case for self signed to be accepted when Accepted CNs is set to *.

  2. The app needs to be at least one time connected to the server after Accepted CNs is set (because the Accepted CNs list should be uploaded to the app from the server).

  3. There are no valid "ringotel.co" certificates other than those provided by the Ringotel infrastructure.

Alternatively, to address this issue, please attempt connecting from a different network (Wi-Fi or cellular data).

Did this answer your question?