thunderbird / thunderbird/thunderbird-android
Let's encrypt certificates stop working for Android 7.0 and earlier beginning Feb 8th, 2024
Open
@wmontwe is already working on this.
Since Mar 11, 2025.
tb-team
- Dominant language
- Kotlin
- Stars
- 14k
- Forks
- 2.8k
- Avg merge
- 3d 3h
- Merged PRs (30d)
- 57
Description
Let's encrypt is phasing out their certificate cross-signing that allowed Android Devices prior to 7.1.1 to establish TLS connections.
They've announced that it will phase out begining Feb 8th, 2024.
This will result in a java.security.cert.CertPathValidatorException: Trust anchor for certification path not found. exception for every domain that renewed their certificate after that date or creates a new one.
We need to change to a trust store that trusts ISRG Root X1.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.