Tools

Android error when browsing the FTP site: NET::ERR_CERT_AUTHORITY_INVALID

When browsing the FTP site on your desktop and when using iOS devices, the certificate is working fine but the following certificate error appears when browsing on Android devices: Your connection to this site is not private. Attackers might be trying to steal your information (for example, photos, password, messages and credit cards) from <your_site>) NET::ERR_CERT_AUTHORITY_INVALID

First published date

10/25/2018 8:31 PM

Last published date

10/25/2018 8:31 PM

Overview

The following certificate error is displayed when browsing the FTP site on Android devices. Browsing on the desktop and on iOS devices does not generate the same error.

Your connection to this site is not private. Attackers might be trying to steal your information (for example, photos, password, messages and credit cards) from <your_site>)

NET::ERR_CERT_AUTHORITY_INVALID

 

Product section

Serv-U Managed File Transfer & Serv-U FTP Server

Cause

The certificate chain is incomplete. 

When you test the site, for example on https://www.ssllabs.com/ssltest/ (© 2009-2018 Qualys, Inc., available at https://www.ssllabs.com/index.html, obtained on October 25, 2018) it will instruct you to download missing certificates.This can be checked under Certificate Paths.

Resolution

  1. Browse to the FTP site.
  2. Click View site information on the URL, go to the Connection tab and click Certificate Information.
  3. Go to Certificate path and click the Intermediate certificate. For example, GlobalSign Extended Validation CA - SHA256.
  4. Click View Certificate.
  5. Go to the Details tab and click Copy to file. 
    • Use Base-64 encoded x.509(.cer).
    • Any filename will do.
  6. Use this certificate on the CA (Certificate Authority) Certificate Path field. 
Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment.  You elect to use third party content at your own risk, and you will be solely responsible for the incorporation of the same, if any.