diff --git a/FAQ.md b/FAQ.md index a4cc0fd431..8eabb90328 100644 --- a/FAQ.md +++ b/FAQ.md @@ -443,14 +443,23 @@ This will "pin" the server certificate to prevent man-in-the-middle attacks. Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, see also [here](https://developer.android.com/training/articles/security-ssl). +
+ *Trust anchor for certification path not found* *... java.security.cert.CertPathValidatorException: Trust anchor for certification path not found ...* means that the default Android trust manager was not able to verify the server certificate chain. -You should either fix the server configuration or accept the fingerprint shown below the error message. +This could be due to the root certificate not being installed on your device +or because intermediate certificates are missing, for example because the email server didn't send them. + +You can fix the first problem by downloading and installing the root certificate from the website of the provider of the certificate. -Note that this problem can be caused by the server not sending all intermediate certificates too. +The second problem should be fixed by changing the server configuration or by importing the intermediate certificates on your device. + +You can pin the certificate too, see above. + +
*Empty password*