Pushwoosh endpoints use certificates issued by Let's Encrypt, which chain up to the ISRG Root X1 root certificate. Android added this root in version 7.1.1. Devices running Android 7.0 or older don't trust it, so they can't establish a secure connection to Pushwoosh on any network. The log shows CertPathValidatorException: Trust anchor for certification path not found.
Until September 2024 these devices worked thanks to a cross-signature that Let's Encrypt has since retired, so the problem may have appeared without any change in your app.
What you can do
-
Bundle the root certificate in your app. Add ISRG Root X1 to your app's
network_security_configas a trusted certificate. The Pushwoosh SDK uses the system HTTP stack and doesn't pin certificates, so it picks up this configuration. - Or drop support for these Android versions. Android 7.0 and older have no other on-device fix.
This is not an SDK bug, and it is not caused by the network.
Comments
0 comments
Please sign in to leave a comment.