Anki-android: ankidroid 2.13.0 cleartext failure

[liu-hz]

when i use the ankidroid 2.13.0 on my anki-sync-server . it tell a error is java.net.UnknowServiceException:CLEARTEXT.communication to IP not permitted by net work security policy. i need help to fix this problem . if you know how to fix it .pleace tell me thank you so much

[welcome[bot]]

Hello! 👋 Thanks for logging this issue. Please remember we are all volunteers here, so some patience may be required before we can get to the issue. Also remember that the fastest way to get resolution on an issue is to propose a change directly, https://github.com/ankidroid/Anki-Android/wiki/Contributing

[david-allison-1]

@liu-hz Thanks for the report!

Did this work on AnkiDroid 2.12.1?

[liu-hz]

@liu-hz Thanks for the report!

Did this work on AnkiDroid 2.12.1?

yes i test ankiDroid 2.12.1 also has this problem

[david-allison-1]

@liu-hz You'll need to use HTTPS to connect to your sync server.

[liu-hz]

@liu-hz You'll need to use HTTPS to connect to your sync server.

do you know how to step the sync server ?can fix this problem ?thank you so much

[david-allison-1]

@liu-hz I don't, sorry. You'd be best to ask someone associated with the Sync Server for support.

[mikehardy]

AnkiDroid requires TLS1.2. It's a hard requirement. If you run your own server you are responsible for implementing TLS.
Support for that is outside of scope here, but it is definitely possible and we specifically support self-signed certificates
I recommend https://letsencrypt.org/

[minijackson]

Hello and first of all thank you all for this amazing app.

Can I ask you to reconsider allowing non TLS connection to a custom sync server?

In my usecase, I would like to use a custom sync server, but not expose it to the internet, so I would like to access the sync server through a VPN connection. Having to expose the service to be able to have a Let's Encrypt certificate makes it more discoverable and (depending on your VPN implementation) arguably less secure for people having a similar usecase.

Maybe having a "I know what I'm doing" checkbox to disable the TLS requirement would be a good compromise?

Thanks again!

[mikehardy]

We specifically add the ability to accept self-signed certificates installed in the android user trust store, you don't need a public / valid cert, just any cert