Hi Guys,
I am getting an Error saying "Form Listing Failed.
Error:java.security.cert.CertPathValidatorException: Could not
validate certificate while accessing http://compartamos-sur.appspot.com/formList."
I am using ODK Collect 1.1.7 and Aggregate 1.0.
Does anyone know what the problem could be?
Thanks,
Sanjeev
what security certificate are you using on the server?
Fascinating. I've never seen this error.
Using your phone's browser, see if you can browse to this URL. Does it work
or do you see an error?
Using a laptop, also browse to this URL. Do you see the same error there?
Note that the URL should read "https://..." -- Aggregate 1.0 sends
everything over an encrypted channel for improved privacy.
If it reads http://, there will be an extra round-trip to switch the phone
over to https://.
This error would indicate that either:
(1) your phone does not have up-to-date "root certificates" that are used to
verify the identity of Google's appspot. If your phone is very old this
might be the case, but these should be updated with updates to the operating
system, so if your phone is running, say, 2.0 or higher, this is unlikely to
be the case. Or, perhaps, your phone has malware on it that has somehow
tampered with certificate verification. Is your phone standard, or does it
have carrier-specific modifications? You may need to talk to their
technical support.
(2) someone is spoofing appspot and sending an invalid server identification
certificate back to the phone. Or, perhaps, Google had a glitch in their
systems that caused a bad certificate to be used.
If this doesn't occur when accessing the URL through the phone browser or
when accessing it from a laptop, the cause is likely to be (1) (the browser
seems to maintain a separate set of root certificates from those used by
ordinary applications like ODK Collect).
If this sometimes happens and sometimes doesn't, and you see the same
behavior from browser and laptop, the cause is likely to be (2).
Mitch
Hi Guys,
I am getting an Error saying "Form Listing Failed.
Error:java.security.cert.CertPathValidatorException: Could not
validate certificate while accessing
http://compartamos-sur.appspot.com/formList."I am using ODK Collect 1.1.7 and Aggregate 1.0.
Does anyone know what the problem could be?
Thanks,
Sanjeev
--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en
--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com
Hi Guys,
Sorry for the late reply.
The certificate information says that the connection to my server is
encrypted with a 128-bit encryption and the connection uses TLS 1.0.
The connection is encrypted using RC4_128 with SHA1 for message
authentication and ECDHE_RSA as the key exchange mechanism.
When I use the tablet's browser to access the server, it shows me a
certificate warning message. This message is not showing up when I
access the server through the laptop. However, when I connect to
http://odk-tutorial.appspot.com using ODK Collect, the certificate
warning does not show up.
I am using android version 2.2
I am very near to completing my survey and any help on this issue will
be appreciated.
Thanks in advance,
Sanjeev
This is an issue you should file against Google here:
http://code.google.com/p/googleappengine/issues/list
Click "New Issue" and choose a "Production Issue" template.
When you explain what you're seeing, please clearly identify what
differences you're seeing between Android and your Laptop.
This may be a certificate upgrade issue on your Android, too. Check to see
if there is an update for your phone.
Please send us the issue # so we can add ourselves to watch the issue; we'll
pipe in with clarifications about Collect and Aggregate as needed.
Mitch
Hi Guys,
Sorry for the late reply.
The certificate information says that the connection to my server is
encrypted with a 128-bit encryption and the connection uses TLS 1.0.
The connection is encrypted using RC4_128 with SHA1 for message
authentication and ECDHE_RSA as the key exchange mechanism.When I use the tablet's browser to access the server, it shows me a
certificate warning message. This message is not showing up when I
access the server through the laptop. However, when I connect to
http://odk-tutorial.appspot.com using ODK Collect, the certificate
warning does not show up.I am using android version 2.2
I am very near to completing my survey and any help on this issue will
be appreciated.Thanks in advance,
Sanjeev
On Oct 13, 1:24 pm, Mitch Sundt msu...@cs.washington.edu wrote:
Fascinating. I've never seen this error.
Using your phone's browser, see if you can browse to this URL. Does it
work
or do you see an error?
Using a laptop, also browse to this URL. Do you see the same error
there?Note that the URL should read "https://..." -- Aggregate 1.0 sends
everything over an encrypted channel for improved privacy.
If it reads http://, there will be an extra round-trip to switch the
phone
over to https://.This error would indicate that either:
(1) your phone does not have up-to-date "root certificates" that are used
to
verify the identity of Google's appspot. If your phone is very old this
might be the case, but these should be updated with updates to the
operating
system, so if your phone is running, say, 2.0 or higher, this is unlikely
to
be the case. Or, perhaps, your phone has malware on it that has somehow
tampered with certificate verification. Is your phone standard, or does
it
have carrier-specific modifications? You may need to talk to their
technical support.(2) someone is spoofing appspot and sending an invalid server
identification
certificate back to the phone. Or, perhaps, Google had a glitch in their
systems that caused a bad certificate to be used.If this doesn't occur when accessing the URL through the phone browser or
when accessing it from a laptop, the cause is likely to be (1) (the
browser
seems to maintain a separate set of root certificates from those used by
ordinary applications like ODK Collect).If this sometimes happens and sometimes doesn't, and you see the same
behavior from browser and laptop, the cause is likely to be (2).Mitch
On Thu, Oct 13, 2011 at 9:34 AM, Sanjeev Swamy < ssw...@poverty-action.org>wrote:
Hi Guys,
I am getting an Error saying "Form Listing Failed.
Error:java.security.cert.CertPathValidatorException: Could not
validate certificate while accessing
http://compartamos-sur.appspot.com/formList."I am using ODK Collect 1.1.7 and Aggregate 1.0.
Does anyone know what the problem could be?
Thanks,
Sanjeev
--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options:http://groups.google.com/group/opendatakit?hl=en--
Mitch Sundt
Software Engineerhttp://www.OpenDataKit.org
University of Washington
mitchellsu...@gmail.com--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en
--
Mitch Sundt
Software Engineer
http://www.OpenDataKit.org
University of Washington
mitchellsundt@gmail.com
Sanjeev
I was able to repeat this on the Coby using the default browser and on my
desktop using Firefox. When typing the full URL into the address bar...
https://www.your-name.appspot.com https://www.site-name.appspot.com
https://www.odk-tutorial.appspot.com
results in a security warning....
if you leave off the https://www and just enter...
your-name.appspot.com http://site-name.appspot.com
odk-tutorial.appspot.com
It works,
This also works
https://your-nam.appspot.com https://site-nam.appspot.com
https://odk-tutorial.appspot.com
... no security warning...and you can access the site normally. This seems
to be an issue with how the redirection is occurring and how the address is
being appended behind the scene. The https://www combination is screwing
things up.
So when you set up the URL in ODK Collect to connect to the server...I would
suggest leaving the www out of the address..
Scott
Hi Guys,
Sorry for the late reply.
The certificate information says that the connection to my server is
encrypted with a 128-bit encryption and the connection uses TLS 1.0.
The connection is encrypted using RC4_128 with SHA1 for message
authentication and ECDHE_RSA as the key exchange mechanism.When I use the tablet's browser to access the server, it shows me a
certificate warning message. This message is not showing up when I
access the server through the laptop. However, when I connect to
http://odk-tutorial.appspot.com using ODK Collect, the certificate
warning does not show up.I am using android version 2.2
I am very near to completing my survey and any help on this issue will
be appreciated.Thanks in advance,
Sanjeev
On Oct 13, 1:24 pm, Mitch Sundt msu...@cs.washington.edu wrote:
Fascinating. I've never seen this error.
Using your phone's browser, see if you can browse to this URL. Does it
work
or do you see an error?
Using a laptop, also browse to this URL. Do you see the same error
there?Note that the URL should read "https://..." -- Aggregate 1.0 sends
everything over an encrypted channel for improved privacy.
If it reads http://, there will be an extra round-trip to switch the
phone
over to https://.This error would indicate that either:
(1) your phone does not have up-to-date "root certificates" that are used
to
verify the identity of Google's appspot. If your phone is very old this
might be the case, but these should be updated with updates to the
operating
system, so if your phone is running, say, 2.0 or higher, this is unlikely
to
be the case. Or, perhaps, your phone has malware on it that has somehow
tampered with certificate verification. Is your phone standard, or does
it
have carrier-specific modifications? You may need to talk to their
technical support.(2) someone is spoofing appspot and sending an invalid server
identification
certificate back to the phone. Or, perhaps, Google had a glitch in their
systems that caused a bad certificate to be used.If this doesn't occur when accessing the URL through the phone browser or
when accessing it from a laptop, the cause is likely to be (1) (the
browser
seems to maintain a separate set of root certificates from those used by
ordinary applications like ODK Collect).If this sometimes happens and sometimes doesn't, and you see the same
behavior from browser and laptop, the cause is likely to be (2).Mitch
On Thu, Oct 13, 2011 at 9:34 AM, Sanjeev Swamy < ssw...@poverty-action.org>wrote:
Hi Guys,
I am getting an Error saying "Form Listing Failed.
Error:java.security.cert.CertPathValidatorException: Could not
validate certificate while accessing
http://compartamos-sur.appspot.com/formList."I am using ODK Collect 1.1.7 and Aggregate 1.0.
Does anyone know what the problem could be?
Thanks,
Sanjeev
--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options:http://groups.google.com/group/opendatakit?hl=en--
Mitch Sundt
Software Engineerhttp://www.OpenDataKit.org
University of Washington
mitchellsu...@gmail.com--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en
--
Need Support from IT? Submit a request at:
http://support.poverty-action.org
IPA IT/TECH SUPPORT: ITdept@poverty-action.org
203-772-2216 ext. 210 | skype: spattersonipa | email:
spatterson@poverty-action.org
http://support.poverty-action.org
and in that ticket you file, please describe the make (i.e., htc) and
model (i.e., nexus one).
also, go to menu > settings > about phone and
then scroll to the bottom. put the module number,
android/baseband/kernel version, and the build number.
Yes, the appspot instances do not have "www." in front of them.
You should still specify the URL with the 'https://' prefix, e.g.,
https://your-name.appspot.com
This is critical for ODK Collect 1.1.5, which requires the prefix.
Sanjeev -- from your earlier posts, it doesn't look like this was the issue
you were reporting. Let us know either way.
Mitch
Sanjeev
I was able to repeat this on the Coby using the default browser and on my
desktop using Firefox. When typing the full URL into the address bar...https://www.your-name.appspot.com https://www.site-name.appspot.com
https://www.odk-tutorial.appspot.comresults in a security warning....
if you leave off the https://www and just enter...
your-name.appspot.com http://site-name.appspot.com
odk-tutorial.appspot.comIt works,
This also workshttps://your-nam.appspot.com https://site-nam.appspot.com
https://odk-tutorial.appspot.com... no security warning...and you can access the site normally. This seems
to be an issue with how the redirection is occurring and how the address is
being appended behind the scene. The https://www combination is screwing
things up.So when you set up the URL in ODK Collect to connect to the server...I
would suggest leaving the www out of the address..Scott
On Sat, Oct 22, 2011 at 6:29 PM, Sanjeev Swamy sswamy@poverty-action.orgwrote:
Hi Guys,
Sorry for the late reply.
The certificate information says that the connection to my server is
encrypted with a 128-bit encryption and the connection uses TLS 1.0.
The connection is encrypted using RC4_128 with SHA1 for message
authentication and ECDHE_RSA as the key exchange mechanism.When I use the tablet's browser to access the server, it shows me a
certificate warning message. This message is not showing up when I
access the server through the laptop. However, when I connect to
http://odk-tutorial.appspot.com using ODK Collect, the certificate
warning does not show up.I am using android version 2.2
I am very near to completing my survey and any help on this issue will
be appreciated.Thanks in advance,
Sanjeev
On Oct 13, 1:24 pm, Mitch Sundt msu...@cs.washington.edu wrote:
Fascinating. I've never seen this error.
Using your phone's browser, see if you can browse to this URL. Does it
work
or do you see an error?
Using a laptop, also browse to this URL. Do you see the same error
there?Note that the URL should read "https://..." -- Aggregate 1.0 sends
everything over an encrypted channel for improved privacy.
If it reads http://, there will be an extra round-trip to switch the
phone
over to https://.This error would indicate that either:
(1) your phone does not have up-to-date "root certificates" that are
used to
verify the identity of Google's appspot. If your phone is very old this
might be the case, but these should be updated with updates to the
operating
system, so if your phone is running, say, 2.0 or higher, this is
unlikely to
be the case. Or, perhaps, your phone has malware on it that has somehow
tampered with certificate verification. Is your phone standard, or does
it
have carrier-specific modifications? You may need to talk to their
technical support.(2) someone is spoofing appspot and sending an invalid server
identification
certificate back to the phone. Or, perhaps, Google had a glitch in
their
systems that caused a bad certificate to be used.If this doesn't occur when accessing the URL through the phone browser
or
when accessing it from a laptop, the cause is likely to be (1) (the
browser
seems to maintain a separate set of root certificates from those used by
ordinary applications like ODK Collect).If this sometimes happens and sometimes doesn't, and you see the same
behavior from browser and laptop, the cause is likely to be (2).Mitch
On Thu, Oct 13, 2011 at 9:34 AM, Sanjeev Swamy < ssw...@poverty-action.org>wrote:
Hi Guys,
I am getting an Error saying "Form Listing Failed.
Error:java.security.cert.CertPathValidatorException: Could not
validate certificate while accessing
http://compartamos-sur.appspot.com/formList."I am using ODK Collect 1.1.7 and Aggregate 1.0.
Does anyone know what the problem could be?
Thanks,
Sanjeev
--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options:http://groups.google.com/group/opendatakit?hl=en--
Mitch Sundt
Software Engineerhttp://www.OpenDataKit.org
University of Washington
mitchellsu...@gmail.com--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en--
Need Support from IT? Submit a request at:
http://support.poverty-action.org
IPA IT/TECH SUPPORT: ITdept@poverty-action.org
203-772-2216 ext. 210 | skype: spattersonipa | email:
spatterson@poverty-action.orghttp://support.poverty-action.org
The information contained in this communication, sent from a member of the IPA IT Department, is intended solely for the use of the individual or entity to whom it is addressed. It may contain confidential or legally privileged information. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or use of the contents of this information is strictly prohibited. If you have received this communication in error, please notify the IT Deparment immediately by responding to this email or by fax (+203 772 2428) and then delete it from your system. If this e-mail is not related to the business of IPA, it is sent by the sender in the sender's individual capacity
Please click here http://support.poverty-action.org to place a support request with the IPA IT Deparment.
--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
--
Mitch Sundt
Software Engineer
http://www.OpenDataKit.org
University of Washington
mitchellsundt@gmail.com
Hi Guys,
This problem has been resolved! The error was showing up as a result
of our tablet having the wrong date and time configured. The date and
time in the certificate was of a later time than what was set with the
tablet.
Sanjeev