nextcloud / nextcloud/android

Doesn't check certificate expiry correctly

Open
#5,057 6 comments 0 reactions 0 assignees View on GitHub
approved bug connectivity needs review security
Dominant language
Kotlin
Stars
5.6k
Forks
2k
Avg merge
2d 18h
Merged PRs (30d)
92

Description

### Steps to reproduce
1. Create NextCloud server
2. Setup LetsEncrypt
3. Allow certificate to expire

### Expected behaviour
- Connection failure due to expired HTTPS certificate

### Actual behaviour
- App successfully connects and transfers data over potentially insecure connection (hopefully this only applies to previously valid but now expired certificates and forged certs don't also work)

### Environment data
Android version: 9

Device model: Samsung Note 9

Stock or customized system: Stock

Nextcloud app version: 3.9.2

Nextcloud server version: 16 (latest stable Snap release)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.