Android: Manual certificate is not accepted, gives blank screen after entering address manually

[Bruceforce]

Since #64 was somehow unrelated and is now closed I'm opening a new issue here.

Home Assistant Android version:
1.2.0
Android version:
8.0.0
Phone model:
Samsung Galaxy S7
Home Assistant version:
Home Assistant 0.103.0 (via docker)
Last working Home Assistant release (if known):
none
Description of problem:
HA for Android can't find my local HA instance so it asks me to enter the address manually. Then I enter https://IP:8123 and I got a blank (white) screen and nothing happens anymore. Note that the same URL is working on desktop and mobile browsers.
Traceback (if applicable):

Additional information:

• I'm running HA inside docker
• direct access to https://IP:8123 works fine with any browser (mobile and pc)
• I'm using a self signed cert for https://IP:8123 which is signed by a CA that any of my devices trust.

So I think this is because of the self sigend certificate. I tried to collect some logs, but it's hard to know what to filter for. So if you could guide me what exactly you need I would appreciate it. Anyways here is what I got:

12-18 09:58:02.417  6587  7161 W VideoCapabilities: Unsupported mime video/wvc1
12-18 09:58:02.418  6587  7161 W VideoCapabilities: Unsupported mime video/x-ms-wmv
12-18 09:58:02.419  6587  7161 W VideoCapabilities: Unrecognized profile 2130706433 for video/avc
12-18 09:58:02.420  6587  7161 W VideoCapabilities: Unrecognized profile 2130706434 for video/avc
12-18 09:58:02.451  3661  3682 E NotificationService: Suppressing notification from package by user request.
12-18 09:58:02.483  6587  7144 E Conscrypt: ------------------Untrusted chain: ----------------------
12-18 09:58:02.483  6587  7144 E Conscrypt: == Chain0 ==
12-18 09:58:02.483  6587  7144 E Conscrypt:  Version:   3
12-18 09:58:02.483  6587  7144 E Conscrypt:  Serial Number:   7e4d66fd33fe1017
12-18 09:58:02.484  6587  7144 E Conscrypt:  SubjectDN:   [...]
12-18 09:58:02.484  6587  7144 E Conscrypt:  IssuerDN:   [...]
12-18 09:58:02.485  6587  7144 E Conscrypt:  Get not before:   Fri Jan 04 13:13:00 GMT+01:00 2019
12-18 09:58:02.485  6587  7144 E Conscrypt:  Get not after:   Thu Jan 04 13:13:00 GMT+01:00 2024
12-18 09:58:02.485  6587  7144 E Conscrypt:  Sig ALG name:   SHA512withRSA
12-18 09:58:02.485  6587  7144 E Conscrypt:  Signature:   48e9a3bb89ed96[...]
12-18 09:58:02.502  6587  7161 W VideoCapabilities: Unrecognized profile/level 1/32 for video/mp4v-es
12-18 09:58:02.502  6587  7161 W VideoCapabilities: Unrecognized profile/level 32768/2 for video/mp4v-es
12-18 09:58:02.502  6587  7161 W VideoCapabilities: Unrecognized profile/level 32768/64 for video/mp4v-es
12-18 09:58:02.504  6587  7161 W VideoCapabilities: Unsupported mime video/wvc1
12-18 09:58:02.505  6587  7161 W VideoCapabilities: Unsupported mime video/x-ms-wmv
12-18 09:58:02.507  6587  7161 W VideoCapabilities: Unsupported mime video/x-ms-wmv7
12-18 09:58:02.508  6587  7161 W VideoCapabilities: Unsupported mime video/x-ms-wmv8
12-18 09:58:02.513  6587  7161 W VideoCapabilities: Unsupported mime video/mp43
12-18 09:58:02.520  6587  7161 W VideoCapabilities: Unsupported mime video/sorenson
12-18 09:58:02.555  6587  7144 E Conscrypt:  Public key:
12-18 09:58:02.555  6587  7144 E Conscrypt:
12-18 09:58:02.555  6587  7144 E Conscrypt:  30 82 02 22 30 0d 06 09 2a 86 [...]
12-18 09:58:02.558  6587  7144 E Conscrypt: ------------------Untrusted chain: ----------------------
12-18 09:58:02.559  6587  7144 E Conscrypt: == Chain0 ==
12-18 09:58:02.559  6587  7144 E Conscrypt:  Version:   3
12-18 09:58:02.559  6587  7144 E Conscrypt:  Serial Number:   7e4d66fd33fe1017
12-18 09:58:02.559  6587  7144 E Conscrypt:  SubjectDN:   [...]
12-18 09:58:02.559  6587  7144 E Conscrypt:  IssuerDN:   [...]
12-18 09:58:02.559  6587  7144 E Conscrypt:  Get not before:   Fri Jan 04 13:13:00 GMT+01:00 2019
12-18 09:58:02.559  6587  7144 E Conscrypt:  Get not after:   Thu Jan 04 13:13:00 GMT+01:00 2024
12-18 09:58:02.559  6587  7144 E Conscrypt:  Sig ALG name:   SHA512withRSA
12-18 09:58:02.560  6587  7144 E Conscrypt:  Signature:   48e9a3bb89ed96[...]
12-18 09:58:02.598  6587  7144 E Conscrypt:  Public key:
12-18 09:58:02.598  6587  7144 E Conscrypt:
12-18 09:58:02.598  6587  7144 E Conscrypt:  30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 [...]
12-18 09:58:02.600  6587  7133 E chromium: [ERROR:ssl_client_socket_impl.cc(969)] handshake failed; returned -1, SSL error code 1, net_error -202

[dreadwood89]

I'm having the same issue since I set up the self signed certificate for HA. Worked fine before I activated SSL.

I also run HA in docker, lastest version. Just reinstalled the app aswell, version 1.2.0.

[tiagofreire-pt]

Probably related to #48 .

[Bruceforce]

I read the discussion and think you are right. But until the PR for non public CA is merged there should be at least an error message in the app telling you something like "Your home Assistant installation is using a certificate which is not signed by a public CA. This is currently not supported. Please see ".

Otherwise it's bad user experience if you don't know what's going on.