Error Getting Form List

Hi Guys,

I am getting an Error saying "Form Listing Failed.
Error:java.security.cert.CertPathValidatorException: Could not
validate certificate while accessing http://compartamos-sur.appspot.com/formList."

I am using ODK Collect 1.1.7 and Aggregate 1.0.

Does anyone know what the problem could be?

Thanks,

Sanjeev

what security certificate are you using on the server?

··· On Thu, Oct 13, 2011 at 09:34, Sanjeev Swamy wrote: > Hi Guys, > > I am getting an Error saying "Form Listing Failed. > Error:java.security.cert.CertPathValidatorException: Could not > validate certificate while accessing http://compartamos-sur.appspot.com/formList." > > I am using ODK Collect 1.1.7 and Aggregate 1.0. > > Does anyone know what the problem could be? > > Thanks, > > Sanjeev > > -- > Post: opendatakit@googlegroups.com > Unsubscribe: opendatakit+unsubscribe@googlegroups.com > Options: http://groups.google.com/group/opendatakit?hl=en >

Fascinating. I've never seen this error.

Using your phone's browser, see if you can browse to this URL. Does it work
or do you see an error?
Using a laptop, also browse to this URL. Do you see the same error there?

Note that the URL should read "https://..." -- Aggregate 1.0 sends
everything over an encrypted channel for improved privacy.
If it reads http://, there will be an extra round-trip to switch the phone
over to https://.

This error would indicate that either:

(1) your phone does not have up-to-date "root certificates" that are used to
verify the identity of Google's appspot. If your phone is very old this
might be the case, but these should be updated with updates to the operating
system, so if your phone is running, say, 2.0 or higher, this is unlikely to
be the case. Or, perhaps, your phone has malware on it that has somehow
tampered with certificate verification. Is your phone standard, or does it
have carrier-specific modifications? You may need to talk to their
technical support.

(2) someone is spoofing appspot and sending an invalid server identification
certificate back to the phone. Or, perhaps, Google had a glitch in their
systems that caused a bad certificate to be used.

If this doesn't occur when accessing the URL through the phone browser or
when accessing it from a laptop, the cause is likely to be (1) (the browser
seems to maintain a separate set of root certificates from those used by
ordinary applications like ODK Collect).

If this sometimes happens and sometimes doesn't, and you see the same
behavior from browser and laptop, the cause is likely to be (2).

Mitch

··· On Thu, Oct 13, 2011 at 9:34 AM, Sanjeev Swamy wrote:

Hi Guys,

I am getting an Error saying "Form Listing Failed.
Error:java.security.cert.CertPathValidatorException: Could not
validate certificate while accessing
http://compartamos-sur.appspot.com/formList."

I am using ODK Collect 1.1.7 and Aggregate 1.0.

Does anyone know what the problem could be?

Thanks,

Sanjeev

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer


University of Washington
mitchellsundt@gmail.com

Hi Guys,

Sorry for the late reply.

The certificate information says that the connection to my server is
encrypted with a 128-bit encryption and the connection uses TLS 1.0.
The connection is encrypted using RC4_128 with SHA1 for message
authentication and ECDHE_RSA as the key exchange mechanism.

When I use the tablet's browser to access the server, it shows me a
certificate warning message. This message is not showing up when I
access the server through the laptop. However, when I connect to
http://odk-tutorial.appspot.com using ODK Collect, the certificate
warning does not show up.

I am using android version 2.2

I am very near to completing my survey and any help on this issue will
be appreciated.

Thanks in advance,

Sanjeev

··· On Oct 13, 1:24 pm, Mitch Sundt wrote: > Fascinating. I've never seen this error. > > Using your phone's browser, see if you can browse to this URL. Does it work > or do you see an error? > Using a laptop, also browse to this URL. Do you see the same error there? > > Note that the URL should read "https://..." -- Aggregate 1.0 sends > everything over an encrypted channel for improved privacy. > If it reads http://, there will be an extra round-trip to switch the phone > over to https://. > > This error would indicate that either: > > (1) your phone does not have up-to-date "root certificates" that are used to > verify the identity of Google's appspot. If your phone is very old this > might be the case, but these should be updated with updates to the operating > system, so if your phone is running, say, 2.0 or higher, this is unlikely to > be the case. Or, perhaps, your phone has malware on it that has somehow > tampered with certificate verification. Is your phone standard, or does it > have carrier-specific modifications? You may need to talk to their > technical support. > > (2) someone is spoofing appspot and sending an invalid server identification > certificate back to the phone. Or, perhaps, Google had a glitch in their > systems that caused a bad certificate to be used. > > If this doesn't occur when accessing the URL through the phone browser or > when accessing it from a laptop, the cause is likely to be (1) (the browser > seems to maintain a separate set of root certificates from those used by > ordinary applications like ODK Collect). > > If this sometimes happens and sometimes doesn't, and you see the same > behavior from browser and laptop, the cause is likely to be (2). > > Mitch > > On Thu, Oct 13, 2011 at 9:34 AM, Sanjeev Swamy wrote: > > > > > > > > > > > Hi Guys, > > > I am getting an Error saying "Form Listing Failed. > > Error:java.security.cert.CertPathValidatorException: Could not > > validate certificate while accessing > >http://compartamos-sur.appspot.com/formList." > > > I am using ODK Collect 1.1.7 and Aggregate 1.0. > > > Does anyone know what the problem could be? > > > Thanks, > > > Sanjeev > > > -- > > Post: opendatakit@googlegroups.com > > Unsubscribe: opendatakit+unsubscribe@googlegroups.com > > Options:http://groups.google.com/group/opendatakit?hl=en > > -- > Mitch Sundt > Software Engineerhttp://www.OpenDataKit.org > University of Washington > mitchellsu...@gmail.com

This is an issue you should file against Google here:
http://code.google.com/p/googleappengine/issues/list

Click "New Issue" and choose a "Production Issue" template.

When you explain what you're seeing, please clearly identify what
differences you're seeing between Android and your Laptop.
This may be a certificate upgrade issue on your Android, too. Check to see
if there is an update for your phone.

Please send us the issue # so we can add ourselves to watch the issue; we'll
pipe in with clarifications about Collect and Aggregate as needed.

Mitch

··· On Sat, Oct 22, 2011 at 3:29 PM, Sanjeev Swamy wrote:

Hi Guys,

Sorry for the late reply.

The certificate information says that the connection to my server is
encrypted with a 128-bit encryption and the connection uses TLS 1.0.
The connection is encrypted using RC4_128 with SHA1 for message
authentication and ECDHE_RSA as the key exchange mechanism.

When I use the tablet's browser to access the server, it shows me a
certificate warning message. This message is not showing up when I
access the server through the laptop. However, when I connect to
http://odk-tutorial.appspot.com using ODK Collect, the certificate
warning does not show up.

I am using android version 2.2

I am very near to completing my survey and any help on this issue will
be appreciated.

Thanks in advance,

Sanjeev

On Oct 13, 1:24 pm, Mitch Sundt msu...@cs.washington.edu wrote:

Fascinating. I've never seen this error.

Using your phone's browser, see if you can browse to this URL. Does it
work
or do you see an error?
Using a laptop, also browse to this URL. Do you see the same error
there?

Note that the URL should read "https://..." -- Aggregate 1.0 sends
everything over an encrypted channel for improved privacy.
If it reads http://, there will be an extra round-trip to switch the
phone
over to https://.

This error would indicate that either:

(1) your phone does not have up-to-date "root certificates" that are used
to
verify the identity of Google's appspot. If your phone is very old this
might be the case, but these should be updated with updates to the
operating
system, so if your phone is running, say, 2.0 or higher, this is unlikely
to
be the case. Or, perhaps, your phone has malware on it that has somehow
tampered with certificate verification. Is your phone standard, or does
it
have carrier-specific modifications? You may need to talk to their
technical support.

(2) someone is spoofing appspot and sending an invalid server
identification
certificate back to the phone. Or, perhaps, Google had a glitch in their
systems that caused a bad certificate to be used.

If this doesn't occur when accessing the URL through the phone browser or
when accessing it from a laptop, the cause is likely to be (1) (the
browser
seems to maintain a separate set of root certificates from those used by
ordinary applications like ODK Collect).

If this sometimes happens and sometimes doesn't, and you see the same
behavior from browser and laptop, the cause is likely to be (2).

Mitch

On Thu, Oct 13, 2011 at 9:34 AM, Sanjeev Swamy < ssw...@poverty-action.org>wrote:

Hi Guys,

I am getting an Error saying "Form Listing Failed.
Error:java.security.cert.CertPathValidatorException: Could not
validate certificate while accessing
http://compartamos-sur.appspot.com/formList."

I am using ODK Collect 1.1.7 and Aggregate 1.0.

Does anyone know what the problem could be?

Thanks,

Sanjeev

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options:http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineerhttp://www.OpenDataKit.org
University of Washington
mitchellsu...@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer


University of Washington
mitchellsundt@gmail.com

Sanjeev

I was able to repeat this on the Coby using the default browser and on my
desktop using Firefox. When typing the full URL into the address bar...

https://www.your-name.appspot.com https://www.site-name.appspot.com
https://www.odk-tutorial.appspot.com

results in a security warning....

if you leave off the https://www and just enter...

your-name.appspot.com http://site-name.appspot.com
odk-tutorial.appspot.com

It works,
This also works

https://your-nam.appspot.com https://site-nam.appspot.com
https://odk-tutorial.appspot.com

... no security warning...and you can access the site normally. This seems
to be an issue with how the redirection is occurring and how the address is
being appended behind the scene. The https://www combination is screwing
things up.

So when you set up the URL in ODK Collect to connect to the server...I would
suggest leaving the www out of the address..

Scott

··· On Sat, Oct 22, 2011 at 6:29 PM, Sanjeev Swamy wrote:

Hi Guys,

Sorry for the late reply.

The certificate information says that the connection to my server is
encrypted with a 128-bit encryption and the connection uses TLS 1.0.
The connection is encrypted using RC4_128 with SHA1 for message
authentication and ECDHE_RSA as the key exchange mechanism.

When I use the tablet's browser to access the server, it shows me a
certificate warning message. This message is not showing up when I
access the server through the laptop. However, when I connect to
http://odk-tutorial.appspot.com using ODK Collect, the certificate
warning does not show up.

I am using android version 2.2

I am very near to completing my survey and any help on this issue will
be appreciated.

Thanks in advance,

Sanjeev

On Oct 13, 1:24 pm, Mitch Sundt msu...@cs.washington.edu wrote:

Fascinating. I've never seen this error.

Using your phone's browser, see if you can browse to this URL. Does it
work
or do you see an error?
Using a laptop, also browse to this URL. Do you see the same error
there?

Note that the URL should read "https://..." -- Aggregate 1.0 sends
everything over an encrypted channel for improved privacy.
If it reads http://, there will be an extra round-trip to switch the
phone
over to https://.

This error would indicate that either:

(1) your phone does not have up-to-date "root certificates" that are used
to
verify the identity of Google's appspot. If your phone is very old this
might be the case, but these should be updated with updates to the
operating
system, so if your phone is running, say, 2.0 or higher, this is unlikely
to
be the case. Or, perhaps, your phone has malware on it that has somehow
tampered with certificate verification. Is your phone standard, or does
it
have carrier-specific modifications? You may need to talk to their
technical support.

(2) someone is spoofing appspot and sending an invalid server
identification
certificate back to the phone. Or, perhaps, Google had a glitch in their
systems that caused a bad certificate to be used.

If this doesn't occur when accessing the URL through the phone browser or
when accessing it from a laptop, the cause is likely to be (1) (the
browser
seems to maintain a separate set of root certificates from those used by
ordinary applications like ODK Collect).

If this sometimes happens and sometimes doesn't, and you see the same
behavior from browser and laptop, the cause is likely to be (2).

Mitch

On Thu, Oct 13, 2011 at 9:34 AM, Sanjeev Swamy < ssw...@poverty-action.org>wrote:

Hi Guys,

I am getting an Error saying "Form Listing Failed.
Error:java.security.cert.CertPathValidatorException: Could not
validate certificate while accessing
http://compartamos-sur.appspot.com/formList."

I am using ODK Collect 1.1.7 and Aggregate 1.0.

Does anyone know what the problem could be?

Thanks,

Sanjeev

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options:http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineerhttp://www.OpenDataKit.org
University of Washington
mitchellsu...@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--

Need Support from IT? Submit a request at:
http://support.poverty-action.org
IPA IT/TECH SUPPORT: ITdept@poverty-action.org
203-772-2216 ext. 210 | skype: spattersonipa | email:
spatterson@poverty-action.org

http://support.poverty-action.org


The information contained in this communication, sent from a member of the IPA IT Department, is intended solely for the use of the individual or entity to whom it is addressed. It may contain confidential or legally privileged information. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or use of the contents of this information is strictly prohibited. If you have received this communication in error, please notify the IT Deparment immediately by responding to this email or by fax (+203 772 2428) and then delete it from your system. If this e-mail is not related to the business of IPA, it is sent by the sender in the sender's individual capacity
Please click here to place a support request with the IPA IT Deparment.

and in that ticket you file, please describe the make (i.e., htc) and
model (i.e., nexus one).

also, go to menu > settings > about phone and
then scroll to the bottom. put the module number,
android/baseband/kernel version, and the build number.

··· On Mon, Oct 24, 2011 at 10:51, Mitch Sundt wrote: > This is an issue you should file against Google here: > http://code.google.com/p/googleappengine/issues/list > > Click "New Issue" and choose a "Production Issue" template. > > When you explain what you're seeing, please clearly identify what > differences you're seeing between Android and your Laptop. > This may be a certificate upgrade issue on your Android, too. Check to see > if there is an update for your phone. > > Please send us the issue # so we can add ourselves to watch the issue; we'll > pipe in with clarifications about Collect and Aggregate as needed. > > Mitch > > On Sat, Oct 22, 2011 at 3:29 PM, Sanjeev Swamy wrote: >> >> Hi Guys, >> >> Sorry for the late reply. >> >> The certificate information says that the connection to my server is >> encrypted with a 128-bit encryption and the connection uses TLS 1.0. >> The connection is encrypted using RC4_128 with SHA1 for message >> authentication and ECDHE_RSA as the key exchange mechanism. >> >> When I use the tablet's browser to access the server, it shows me a >> certificate warning message. This message is not showing up when I >> access the server through the laptop. However, when I connect to >> http://odk-tutorial.appspot.com using ODK Collect, the certificate >> warning does not show up. >> >> I am using android version 2.2 >> >> I am very near to completing my survey and any help on this issue will >> be appreciated. >> >> Thanks in advance, >> >> Sanjeev >> >> On Oct 13, 1:24 pm, Mitch Sundt wrote: >> > Fascinating. I've never seen this error. >> > >> > Using your phone's browser, see if you can browse to this URL. Does it >> > work >> > or do you see an error? >> > Using a laptop, also browse to this URL. Do you see the same error >> > there? >> > >> > Note that the URL should read "https://..." -- Aggregate 1.0 sends >> > everything over an encrypted channel for improved privacy. >> > If it reads http://, there will be an extra round-trip to switch the >> > phone >> > over to https://. >> > >> > This error would indicate that either: >> > >> > (1) your phone does not have up-to-date "root certificates" that are >> > used to >> > verify the identity of Google's appspot. If your phone is very old this >> > might be the case, but these should be updated with updates to the >> > operating >> > system, so if your phone is running, say, 2.0 or higher, this is >> > unlikely to >> > be the case. Or, perhaps, your phone has malware on it that has somehow >> > tampered with certificate verification. Is your phone standard, or does >> > it >> > have carrier-specific modifications? You may need to talk to their >> > technical support. >> > >> > (2) someone is spoofing appspot and sending an invalid server >> > identification >> > certificate back to the phone. Or, perhaps, Google had a glitch in >> > their >> > systems that caused a bad certificate to be used. >> > >> > If this doesn't occur when accessing the URL through the phone browser >> > or >> > when accessing it from a laptop, the cause is likely to be (1) (the >> > browser >> > seems to maintain a separate set of root certificates from those used by >> > ordinary applications like ODK Collect). >> > >> > If this sometimes happens and sometimes doesn't, and you see the same >> > behavior from browser and laptop, the cause is likely to be (2). >> > >> > Mitch >> > >> > On Thu, Oct 13, 2011 at 9:34 AM, Sanjeev Swamy wrote: >> > >> > >> > >> > >> > >> > >> > >> > >> > >> > > Hi Guys, >> > >> > > I am getting an Error saying "Form Listing Failed. >> > > Error:java.security.cert.CertPathValidatorException: Could not >> > > validate certificate while accessing >> > >http://compartamos-sur.appspot.com/formList." >> > >> > > I am using ODK Collect 1.1.7 and Aggregate 1.0. >> > >> > > Does anyone know what the problem could be? >> > >> > > Thanks, >> > >> > > Sanjeev >> > >> > > -- >> > > Post: opendatakit@googlegroups.com >> > > Unsubscribe: opendatakit+unsubscribe@googlegroups.com >> > > Options:http://groups.google.com/group/opendatakit?hl=en >> > >> > -- >> > Mitch Sundt >> > Software Engineerhttp://www.OpenDataKit.org >> > University of Washington >> > mitchellsu...@gmail.com >> >> -- >> Post: opendatakit@googlegroups.com >> Unsubscribe: opendatakit+unsubscribe@googlegroups.com >> Options: http://groups.google.com/group/opendatakit?hl=en > > > > -- > Mitch Sundt > Software Engineer > http://www.OpenDataKit.org > University of Washington > mitchellsundt@gmail.com > > -- > Post: opendatakit@googlegroups.com > Unsubscribe: opendatakit+unsubscribe@googlegroups.com > Options: http://groups.google.com/group/opendatakit?hl=en >

Yes, the appspot instances do not have "www." in front of them.

You should still specify the URL with the 'https://' prefix, e.g.,
https://your-name.appspot.com

This is critical for ODK Collect 1.1.5, which requires the prefix.

Sanjeev -- from your earlier posts, it doesn't look like this was the issue
you were reporting. Let us know either way.

Mitch

··· On Tue, Oct 25, 2011 at 12:29 PM, Scott Patterson < spatterson@poverty-action.org> wrote:

Sanjeev

I was able to repeat this on the Coby using the default browser and on my
desktop using Firefox. When typing the full URL into the address bar...

https://www.your-name.appspot.com https://www.site-name.appspot.com
https://www.odk-tutorial.appspot.com

results in a security warning....

if you leave off the https://www and just enter...

your-name.appspot.com http://site-name.appspot.com
odk-tutorial.appspot.com

It works,
This also works

https://your-nam.appspot.com https://site-nam.appspot.com
https://odk-tutorial.appspot.com

... no security warning...and you can access the site normally. This seems
to be an issue with how the redirection is occurring and how the address is
being appended behind the scene. The https://www combination is screwing
things up.

So when you set up the URL in ODK Collect to connect to the server...I
would suggest leaving the www out of the address..

Scott

On Sat, Oct 22, 2011 at 6:29 PM, Sanjeev Swamy sswamy@poverty-action.orgwrote:

Hi Guys,

Sorry for the late reply.

The certificate information says that the connection to my server is
encrypted with a 128-bit encryption and the connection uses TLS 1.0.
The connection is encrypted using RC4_128 with SHA1 for message
authentication and ECDHE_RSA as the key exchange mechanism.

When I use the tablet's browser to access the server, it shows me a
certificate warning message. This message is not showing up when I
access the server through the laptop. However, when I connect to
http://odk-tutorial.appspot.com using ODK Collect, the certificate
warning does not show up.

I am using android version 2.2

I am very near to completing my survey and any help on this issue will
be appreciated.

Thanks in advance,

Sanjeev

On Oct 13, 1:24 pm, Mitch Sundt msu...@cs.washington.edu wrote:

Fascinating. I've never seen this error.

Using your phone's browser, see if you can browse to this URL. Does it
work
or do you see an error?
Using a laptop, also browse to this URL. Do you see the same error
there?

Note that the URL should read "https://..." -- Aggregate 1.0 sends
everything over an encrypted channel for improved privacy.
If it reads http://, there will be an extra round-trip to switch the
phone
over to https://.

This error would indicate that either:

(1) your phone does not have up-to-date "root certificates" that are
used to
verify the identity of Google's appspot. If your phone is very old this
might be the case, but these should be updated with updates to the
operating
system, so if your phone is running, say, 2.0 or higher, this is
unlikely to
be the case. Or, perhaps, your phone has malware on it that has somehow
tampered with certificate verification. Is your phone standard, or does
it
have carrier-specific modifications? You may need to talk to their
technical support.

(2) someone is spoofing appspot and sending an invalid server
identification
certificate back to the phone. Or, perhaps, Google had a glitch in
their
systems that caused a bad certificate to be used.

If this doesn't occur when accessing the URL through the phone browser
or
when accessing it from a laptop, the cause is likely to be (1) (the
browser
seems to maintain a separate set of root certificates from those used by
ordinary applications like ODK Collect).

If this sometimes happens and sometimes doesn't, and you see the same
behavior from browser and laptop, the cause is likely to be (2).

Mitch

On Thu, Oct 13, 2011 at 9:34 AM, Sanjeev Swamy < ssw...@poverty-action.org>wrote:

Hi Guys,

I am getting an Error saying "Form Listing Failed.
Error:java.security.cert.CertPathValidatorException: Could not
validate certificate while accessing
http://compartamos-sur.appspot.com/formList."

I am using ODK Collect 1.1.7 and Aggregate 1.0.

Does anyone know what the problem could be?

Thanks,

Sanjeev

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options:http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineerhttp://www.OpenDataKit.org
University of Washington
mitchellsu...@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--

Need Support from IT? Submit a request at:
http://support.poverty-action.org
IPA IT/TECH SUPPORT: ITdept@poverty-action.org
203-772-2216 ext. 210 | skype: spattersonipa | email:
spatterson@poverty-action.org

http://support.poverty-action.org


The information contained in this communication, sent from a member of the IPA IT Department, is intended solely for the use of the individual or entity to whom it is addressed. It may contain confidential or legally privileged information. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or use of the contents of this information is strictly prohibited. If you have received this communication in error, please notify the IT Deparment immediately by responding to this email or by fax (+203 772 2428) and then delete it from your system. If this e-mail is not related to the business of IPA, it is sent by the sender in the sender's individual capacity

Please click here http://support.poverty-action.org to place a support request with the IPA IT Deparment.

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer


University of Washington
mitchellsundt@gmail.com

Hi Guys,

This problem has been resolved! The error was showing up as a result
of our tablet having the wrong date and time configured. The date and
time in the certificate was of a later time than what was set with the
tablet.

Sanjeev

··· On Oct 25, 4:05 pm, Mitch Sundt wrote: > Yes, the appspot instances do not have "www." in front of them. > > You should still specify the URL with the 'https://' prefix, e.g.,https://your-name.appspot.com > > This is critical for ODK Collect 1.1.5, which requires the prefix. > > Sanjeev -- from your earlier posts, it doesn't look like this was the issue > you were reporting. Let us know either way. > > Mitch > > On Tue, Oct 25, 2011 at 12:29 PM, Scott Patterson < spatter...@poverty-action.org> wrote: > > Sanjeev > > > I was able to repeat this on the Coby using the default browser and on my > > desktop using Firefox. When typing the full URL into the address bar... > > >https://www.your-name.appspot.com > >https://www.odk-tutorial.appspot.com > > > results in a security warning.... > > > if you leave off thehttps://wwwand just enter... > > > your-name.appspot.com > > odk-tutorial.appspot.com > > > It works, > > This also works > > >https://your-nam.appspot.com > >https://odk-tutorial.appspot.com > > > ... no security warning...and you can access the site normally. This seems > > to be an issue with how the redirection is occurring and how the address is > > being appended behind the scene. Thehttps://www combination is screwing > > things up. > > > So when you set up the URL in ODK Collect to connect to the server...I > > would suggest leaving the www out of the address.. > > > Scott > > > On Sat, Oct 22, 2011 at 6:29 PM, Sanjeev Swamy wrote: > > >> Hi Guys, > > >> Sorry for the late reply. > > >> The certificate information says that the connection to my server is > >> encrypted with a 128-bit encryption and the connection uses TLS 1.0. > >> The connection is encrypted using RC4_128 with SHA1 for message > >> authentication and ECDHE_RSA as the key exchange mechanism. > > >> When I use the tablet's browser to access the server, it shows me a > >> certificate warning message. This message is not showing up when I > >> access the server through the laptop. However, when I connect to > >>http://odk-tutorial.appspot.comusing ODK Collect, the certificate > >> warning does not show up. > > >> I am using android version 2.2 > > >> I am very near to completing my survey and any help on this issue will > >> be appreciated. > > >> Thanks in advance, > > >> Sanjeev > > >> On Oct 13, 1:24 pm, Mitch Sundt wrote: > >> > Fascinating. I've never seen this error. > > >> > Using your phone's browser, see if you can browse to this URL. Does it > >> work > >> > or do you see an error? > >> > Using a laptop, also browse to this URL. Do you see the same error > >> there? > > >> > Note that the URL should read "https://..." -- Aggregate 1.0 sends > >> > everything over an encrypted channel for improved privacy. > >> > If it reads http://, there will be an extra round-trip to switch the > >> phone > >> > over to https://. > > >> > This error would indicate that either: > > >> > (1) your phone does not have up-to-date "root certificates" that are > >> used to > >> > verify the identity of Google's appspot. If your phone is very old this > >> > might be the case, but these should be updated with updates to the > >> operating > >> > system, so if your phone is running, say, 2.0 or higher, this is > >> unlikely to > >> > be the case. Or, perhaps, your phone has malware on it that has somehow > >> > tampered with certificate verification. Is your phone standard, or does > >> it > >> > have carrier-specific modifications? You may need to talk to their > >> > technical support. > > >> > (2) someone is spoofing appspot and sending an invalid server > >> identification > >> > certificate back to the phone. Or, perhaps, Google had a glitch in > >> their > >> > systems that caused a bad certificate to be used. > > >> > If this doesn't occur when accessing the URL through the phone browser > >> or > >> > when accessing it from a laptop, the cause is likely to be (1) (the > >> browser > >> > seems to maintain a separate set of root certificates from those used by > >> > ordinary applications like ODK Collect). > > >> > If this sometimes happens and sometimes doesn't, and you see the same > >> > behavior from browser and laptop, the cause is likely to be (2). > > >> > Mitch > > >> > On Thu, Oct 13, 2011 at 9:34 AM, Sanjeev Swamy < ssw...@poverty-action.org>wrote: > > >> > > Hi Guys, > > >> > > I am getting an Error saying "Form Listing Failed. > >> > > Error:java.security.cert.CertPathValidatorException: Could not > >> > > validate certificate while accessing > >> > >http://compartamos-sur.appspot.com/formList." > > >> > > I am using ODK Collect 1.1.7 and Aggregate 1.0. > > >> > > Does anyone know what the problem could be? > > >> > > Thanks, > > >> > > Sanjeev > > >> > > -- > >> > > Post: opendatakit@googlegroups.com > >> > > Unsubscribe: opendatakit+unsubscribe@googlegroups.com > >> > > Options:http://groups.google.com/group/opendatakit?hl=en > > >> > -- > >> > Mitch Sundt > >> > Software Engineerhttp://www.OpenDataKit.org > >> > University of Washington > >> > mitchellsu...@gmail.com > > >> -- > >> Post: opendatakit@googlegroups.com > >> Unsubscribe: opendatakit+unsubscribe@googlegroups.com > >> Options:http://groups.google.com/group/opendatakit?hl=en > > > -- > > > *Need Support from IT?* Submit a request at: > >http://support.poverty-action.org > > IPA IT/TECH SUPPORT: ITd...@poverty-action.org > > 203-772-2216 ext. 210 | skype: spattersonipa | email: > > spatter...@poverty-action.org > > > > > > ------------------------------ > > > The information contained in this communication, sent from a member of the IPA IT Department, is intended solely for the use of the individual or entity to whom it is addressed. It may contain confidential or legally privileged information. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or use of the contents of this information is strictly prohibited. If you have received this communication in error, please notify the IT Deparment immediately by responding to this email or by fax (+203 772 2428) and then delete it from your system. If this e-mail is not related to the business of IPA, it is sent by the sender in the sender's individual capacity > > > Please click here to place a support request with the IPA IT Deparment. > > ------------------------------ > > > -- > > > Post: opendatakit@googlegroups.com > > > Unsubscribe: opendatakit+unsubscribe@googlegroups.com > > > Options:http://groups.google.com/group/opendatakit?hl=en > > -- > Mitch Sundt > Software Engineerhttp://www.OpenDataKit.org > University of Washington > mitchellsu...@gmail.com