LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Mobile
User Name
Password
Linux - Mobile This forum is for the discussion of all topics relating to Mobile Linux. This includes Android, Tizen, Sailfish OS, Replicant, Ubuntu Touch, webOS, and other similar projects and products.

Notices


Reply
  Search this Thread
Old 01-28-2022, 06:07 PM   #1
jr_bob_dobbs
Member
 
Registered: Mar 2009
Distribution: Bedrock, Devuan, Slackware, Linux From Scratch, Void
Posts: 651
Blog Entries: 135

Rep: Reputation: 188Reputation: 188
android phone, certificate error on some sites


On my android phone, certain sites now refuse to load. I can't tell if it is that the site says "I don't like your phone, I refuse to load" or it the browser says "I refuse to load that site". I've tried with two different browsers (the one that comes with the phone and Naked Browser) with identical error messages about 'certificate errors." I've not figured out a way to say "oh, no certificate, just load the page anyway!"

I had this error years ago and had fixed it, inadvertently, by getting a new phone. This time around, I don't want to have to get a new phone just to browse web sites.

Two specific sites that don't load are 4chan (don't judge) and bash.org.

Can anyone advise please?
 
Old 01-29-2022, 06:17 AM   #2
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Quote:
Originally Posted by jr_bob_dobbs View Post
On my android phone, certain sites now refuse to load. I can't tell if it is that the site says "I don't like your phone, I refuse to load" or it the browser says "I refuse to load that site". I've tried with two different browsers (the one that comes with the phone and Naked Browser) with identical error messages about 'certificate errors." I've not figured out a way to say "oh, no certificate, just load the page anyway!"

I had this error years ago and had fixed it, inadvertently, by getting a new phone. This time around, I don't want to have to get a new phone just to browse web sites.

Two specific sites that don't load are 4chan (don't judge) and bash.org.

Can anyone advise please?
I assume the Android version is outdated and not receiving updates anymore, hence the problem.
I once (kitkat) fixed a similar problem by adding/replacing certificates on the device, but I'm 99% sure that the rpocedure has changed.
A web search will help, but it will be very difficult to separate the wheat from the chaff.
Try this (yep, outdated, too).

edit: I might have spoken too hastily, maybe we need more info on the exact errors you're seeing.

The only permanent solution: use an OS that will receive continuous updates, just like GNU/Linux distros.

Last edited by ondoho; 01-29-2022 at 06:20 AM.
 
Old 01-29-2022, 08:12 AM   #3
teckk
LQ Guru
 
Registered: Oct 2004
Distribution: Arch
Posts: 5,138
Blog Entries: 6

Rep: Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827
Isn't the whole android ecosystem nice? Made that way on purpose. Carriers refuse to update devices after a year, until finally the certificates expire, and there is almost no way to update them. Solution, buy a new model. I think that is what you call a captive audience.

To the OP. You are going to have to update the devices certificates, if you can.

You might look at a ROM for the phone, if you can find one that supports all of the hardware, and your carrier lets you do that.
 
Old 01-29-2022, 08:24 AM   #4
jr_bob_dobbs
Member
 
Registered: Mar 2009
Distribution: Bedrock, Devuan, Slackware, Linux From Scratch, Void
Posts: 651

Original Poster
Blog Entries: 135

Rep: Reputation: 188Reputation: 188
Thank you, everyone, for the replies.
 
Old 01-29-2022, 05:55 PM   #5
jr_bob_dobbs
Member
 
Registered: Mar 2009
Distribution: Bedrock, Devuan, Slackware, Linux From Scratch, Void
Posts: 651

Original Poster
Blog Entries: 135

Rep: Reputation: 188Reputation: 188
You know, that last reply of mine is too terse. I do apreciate the information in the replies, but I had nothing to say when I made that reply.

I had more time to think about the information in this thread.

I'm not really surprised by the information of the replies: I'd had the feeling the only way to fix the situation would be something like what was posted in the replies.

How ironic that the Android operation system is a closed system despite being based on a GPL'd Kernel.

Custom ROMs (is that connected to this "rooting a phone" I hear about?) is not something I'm really up on. Much to learn.

Anyway, thanks again.
 
Old 01-29-2022, 06:19 PM   #6
rokytnji
LQ Veteran
 
Registered: Mar 2008
Location: Waaaaay out West Texas
Distribution: antiX 23, MX 23
Posts: 7,121
Blog Entries: 21

Rep: Reputation: 3476Reputation: 3476Reputation: 3476Reputation: 3476Reputation: 3476Reputation: 3476Reputation: 3476Reputation: 3476Reputation: 3476Reputation: 3476Reputation: 3476
Try a user agent switcher. Might help.
Dolphin browser for android has that feature built in.

https://www.technipages.com/dolphin-...nge-user-agent

Chameleon Browser is another.

or
https://chrome.google.com/webstore/d...elmhiheolhjflj
 
1 members found this post helpful.
Old 01-30-2022, 05:09 AM   #7
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
^ Certificate error ≠ user agent error.

However, installing another browser might actually work if it brings its own certificates.

Quote:
Originally Posted by jr_bob_dobbs View Post
How ironic that the Android operation system is a closed system despite being based on a GPL'd Kernel.
https://arstechnica.com/gadgets/2018...ans-necessary/

Quote:
Custom ROMs (is that connected to this "rooting a phone" I hear about?) is not something I'm really up on. Much to learn.
Which model? If LineageOS supports it, that just might fix everything:
https://wiki.lineageos.org/devices/
 
Old 01-31-2022, 03:31 PM   #8
jr_bob_dobbs
Member
 
Registered: Mar 2009
Distribution: Bedrock, Devuan, Slackware, Linux From Scratch, Void
Posts: 651

Original Poster
Blog Entries: 135

Rep: Reputation: 188Reputation: 188
Quote:
Originally Posted by ondoho View Post
^ Certificate error ≠ user agent error.

However, installing another browser might actually work if it brings its own certificates.
Interesting! Will have to look into that and find out which ones do.

Scary! Worse than I had figured.

Quote:
Which model? If LineageOS supports it, that just might fix everything:
https://wiki.lineageos.org/devices/
Would you believe I went to the LineageOS site and, despite reading the FAQ, am still not sure exactly what it is? I'll just have to do more searches.

Thank you for the information!
 
Old 02-01-2022, 03:18 AM   #9
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
What's your device?
Manufacturer should be obvious.
Device model is in Android Settings => System somewhere or, on Android 10 at least, in Settings => About phone.
 
Old 02-01-2022, 10:35 AM   #10
enigma9o7
Senior Member
 
Registered: Jul 2018
Location: Silicon Valley
Distribution: Bodhi Linux
Posts: 1,388

Rep: Reputation: 560Reputation: 560Reputation: 560Reputation: 560Reputation: 560Reputation: 560
https://f-droid.org/en/packages/org....fennec_fdroid/
 
Old 02-15-2022, 04:48 PM   #11
jr_bob_dobbs
Member
 
Registered: Mar 2009
Distribution: Bedrock, Devuan, Slackware, Linux From Scratch, Void
Posts: 651

Original Poster
Blog Entries: 135

Rep: Reputation: 188Reputation: 188
Quote:
Originally Posted by enigma9o7 View Post
Strange site. They say this program is a browser and it is great and private and then they list anti-features. Then they say some of the f-droid programs have some anti-features and some don't. So now fdroid is not a browser but a collection of programs? Well, that confused me.
 
Old 02-15-2022, 04:53 PM   #12
enigma9o7
Senior Member
 
Registered: Jul 2018
Location: Silicon Valley
Distribution: Bodhi Linux
Posts: 1,388

Rep: Reputation: 560Reputation: 560Reputation: 560Reputation: 560Reputation: 560Reputation: 560
F-Droid is not a browser, f-droid is the biggest FOSS app store/repository for Android apps, and has been for a decade.... it's like google play store for free and open source apps. But unlike the google play store, f-droid tells you which apps have "anti-features" and describes what they are. Like the google play store, you can access it via the web or a dedicated android app. To install your first app from f-droid, usually you install f-droid itself and give it permission to install other apps, and then use the f-droid app to install and update apps from their official repository (and other repos you add).

Fennec is their build of Firefox. Remember when Debian used to call their build of firefox ice-weasel cuz of some licensing requirements? Same deal. F-Droid builds everything from source and signs it. I dunno what in particular are the anti-features of fennec, probably because it "connects to various Mozilla and Google services that can track users".

Last edited by enigma9o7; 02-15-2022 at 05:39 PM.
 
2 members found this post helpful.
Old 02-21-2022, 03:57 AM   #13
Trihexagonal
Member
 
Registered: Jul 2017
Posts: 362
Blog Entries: 1

Rep: Reputation: 334Reputation: 334Reputation: 334Reputation: 334
Quote:
Originally Posted by jr_bob_dobbs View Post
I had this error years ago and had fixed it, inadvertently, by getting a new phone. This time around, I don't want to have to get a new phone just to browse web sites.
That's a little extreme.

Quote:
Originally Posted by jr_bob_dobbs View Post
Two specific sites that don't load are 4chan (don't judge) and bash.org.

Can anyone advise please?
Both those site load on my Android tablet using Firefox set up like I use it on my desktops.
With the NoScript, uBlock Origin, HTTPS Everywhere, Privacy Badger, Toggle Referrer and User-Agent Switcher extensions.
I don't allow JavaScript to run globally, am not allowing JS for either site and can view posts on bash.org at least.


My tablet isn't rooted, but with the UserLand app for Android you can run Linux distros without rooting your device. Ubuntu, Debian and Kali are listed as available for it and operate on top of your resident Android installation without hosing it.

I've got the Termux command line app installed and got it to install nmap the other day and it's not recognized as being installed through the Google Play Store.

X-plore File Manager let's you do some rooty stuff from inside it, has a lot of features you wouldn't expect in a FM and is really nice.
 
Old 02-21-2022, 07:15 PM   #14
jr_bob_dobbs
Member
 
Registered: Mar 2009
Distribution: Bedrock, Devuan, Slackware, Linux From Scratch, Void
Posts: 651

Original Poster
Blog Entries: 135

Rep: Reputation: 188Reputation: 188
Quote:
Originally Posted by enigma9o7 View Post
F-Droid is not a browser, f-droid is the biggest FOSS app store/repository for Android apps, and has been for a decade.... it's like google play store for free and open source apps. But unlike the google play store, f-droid tells you which apps have "anti-features" and describes what they are. Like the google play store, you can access it via the web or a dedicated android app. To install your first app from f-droid, usually you install f-droid itself and give it permission to install other apps, and then use the f-droid app to install and update apps from their official repository (and other repos you add).
Wow! Thank you so much! I was utterly bewildered and now you have provided an anchor-point for my understanding.

I'm still a little unclear on anti-features. If an anti-feature for an app is in-app advertisements, does that mean it doesn't have ads?
 
Old 02-21-2022, 07:19 PM   #15
jr_bob_dobbs
Member
 
Registered: Mar 2009
Distribution: Bedrock, Devuan, Slackware, Linux From Scratch, Void
Posts: 651

Original Poster
Blog Entries: 135

Rep: Reputation: 188Reputation: 188
Quote:
Originally Posted by Trihexagonal View Post
My tablet isn't rooted, but with the UserLand app for Android you can run Linux distros without rooting your device. Ubuntu, Debian and Kali are listed as available for it and operate on top of your resident Android installation without hosing it.
Oooo, that sounds fascinating, provided I've got enough space.

Quote:
X-plore File Manager let's you do some rooty stuff from inside it, has a lot of features you wouldn't expect in a FM and is really nice.
Hey wow, I've had that a while and never noticed. D'oh!

p.s. To all, thank you. In the Linux realm I'm an advanced noob but in the phone world I'm a complete ignoramus, so all of your replies have been very helpful!
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Fetchmail and Server certificate verification error: unable to get local issuer certificate Mr486 Linux - Software 2 08-12-2018 08:20 AM
Can I retrieve certificate expiry date from an openssl certificate (command line) davee Linux - Security 1 07-21-2006 10:28 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Mobile

All times are GMT -5. The time now is 01:28 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration