karmegam pandi
Lurker
Few weeks ago, our app in our playstore stopped working on very few android devices. After debugging, we found out that the app isn't able to connect with our server due to cert validation failure. Our server certificates are very much valid. Don't know why it is not recognized by few devices all of a sudden. On the debugging process, we tried to connect our app with another certificate chain which is cross-root enabled(to support SHA-1 and SHA-2). It worked well.
Was there any security update in android devices recently to enforce strict SHA algorithm validation? will enabling cross-root on certificate open any vulnerability? Your answers are much appreciated.
Was there any security update in android devices recently to enforce strict SHA algorithm validation? will enabling cross-root on certificate open any vulnerability? Your answers are much appreciated.