Hi. I'm hosting a DoT-Server on ubuntu. Since today, almost 3 Minutes after the X3-expiration Android won't connect to that DoT-Server anymore. This also happens with dot1.applied-privacy.net (a public DoT-Server using LE for the TLS-Cert). This behaviour was repoted to me from ppl using followin…

Regarding my own Problem: Renewing the cert with certbot and --preferred-chain="ISRG Root X1" did indeed help. After doing that my android happily accepts connections to my own DoT-Server again. I've posted the same issue (and now solution) on reddit as well: r/letsencrypt - Self-Hosted…

Android devices with DoT configured; interaction with new default chain

Help

rg305 September 30, 2021, 4:12pm 4

From where you are sitting...

But I can't make that stuff up.
That is what I get from where I'm sitting:

1 Like

Topic		Replies	Views
Understanding DST Root expiry and the older default cert chain Help	36	3432	December 8, 2021
Certificate chain stopped working on older android devices Help	6	560	September 17, 2021
Cert Chain issue Help	5	476	May 26, 2023
Several sites unreachable with Android 4.4 since Chain Changes Help	34	5521	December 21, 2021
Reported 'expired certificate' when using DNS-over-tls on an android with letsencrypt cert Help	4	1491	July 29, 2022

Android devices with DoT configured; interaction with new default chain

Related topics