Ticket ID: 24234 Creation Date: 5/8/2018 1:59 PM Product: SiteKiosk Classic Android Attachment: -
TicketType: Support Request Version: 2.9.8080 Language: English
Views: 24397 Last Modification Date: 6/6/2018 4:11 PM Platform:
Level: Closed

Support Request: Installing a self signed CA certificate with SiteKiosk Android

Description

Hi guys,

We have SiteKiosk Android 2.9 running on several tablets displaying a web page. We are trying to install a self signed CA certificate onto the devices, but there does not appear to be an option to install certificates with SiteKiosk Android.

Attempting to access the web page that requires the certificate produces the following error: net::ERR_BAD_SSL_CLIENT_AUTH_CERT

I have tried installing the certificate through the android OS security settings which worked and was picked up by the Chrome browser installed on the device but SiteKiosk does not appear to be finding the certificate.

Is there a way to get SiteKiosk to recognise self signed CA certificates?

Thanks.

Answer: (5)
Re: Installing a self signed CA certificate with SiteKiosk Android 5/8/2018 2:46 PM
Hello,

In that case you may use the option “White List for Certificates” at “-->Application-->Browser/Fullscreen Browser” and add the corresponding URL.

By default the Site Kiosk Browser on Android does use the so-called WebView Framework http://developer.android.com/guide/webapps/webview.html that is based on the pre-installed browser of Android.
The WebView uses the cert store on Android.

So the result with SiteKiosk Browser depends on the Android version and the integrated system browser.
These are the browser engine versions used by WebView on Android:
- Android 4.4 --> Chromium Engine 30/33 (Updates with operating system)
- Android 5+ --> Chromium Engine 36+ (Updates via Play Store - Android System Webview)
- Android 7+ --> Chromium Engine 51+ (Updates via Play Store - Chrome)

Regards,
Michael Olbrich
Re: Installing a self signed CA certificate with SiteKiosk Android 5/8/2018 4:59 PM
Hi Michael,

Thank you for the quick reply.

Unfortunately, what you have suggested does not seem to have solved the issue.

White listing the URL is not an option in this case as the certificate MUST be checked for security reasons.

As I have mentioned already the cert has been installed to the Android cert store and is being detected by the built-in browser but does not appear to be detected by Site Kiosk at all. The tablets are all running Android version 7.1.1 and all software including Chrome has been updated to the latest version.

Would you have any other troubleshooting steps I could try?

Thanks again.
Re: Installing a self signed CA certificate with SiteKiosk Android 5/9/2018 9:33 AM
Hello,

I asked a developer to be sure and he confirmed that SiteKiosk Android Browser (Google System WebView) does use the cert store of the Android system.

But he also stated that you must install the original root CA cert on the Android device and not e.g. a certificate downloaded though the web page.

Regards,
Michael Olbrich
Re: Installing a self signed CA certificate with SiteKiosk Android 5/9/2018 2:17 PM
Hi,

Thanks for the advice.

I have tried installing the original root CA cert on the devices Cert store but the issue is still occurring.

Thanks.
Re: Installing a self signed CA certificate with SiteKiosk Android 5/9/2018 3:16 PM
Hello,

I assume the problem is here that you use Android 7.
Since Android 7 certificates that are installed in the user store are not considered in apps by default:
"By default, apps only use the system certificate store."
Also see:
https://blog.jeroenhd.nl/article/android-7-nougat-and-certificate-authorities
https://android-developers.googleblog.com/2016/07/changes-to-trusted-certificate.html
https://support.google.com/nexus/answer/2844832?hl=en

Regards,
Michael Olbrich
Post comment
My Account
Login
Language (Tickets):