Score:0

DST Root CA X3 has expired

mm flag

I have configured shadowsocks-rust with xray plugin using certificate from acme. Works fine on all devices except android 7. I understand that this is due to the fact that the DST Root CA X3 certificate has recently expired. Is there any solution for android 7 systems? Thanks...

Score:0
cn flag

Confirm your issued certificate is rooted in DST Root CA X3. Let's Encrypt still has this as the default, but check if your ACME client is requesting an alternate chain. See the production chain changes thread and the extending Android device compatibility post.

Apparently Android does not enforce notAfter dates on trust anchors. Which is allowed, roots are a special case. Technically, this means not being available after September 2024 is because of Let's Encrypt's cross sign expiring, not the root itself.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.