worker SSL issue - trust anchor not found
đź‘‹ Hello! We're using a cloudflare worker at {subdomain}.{my-project}.workers.dev - and some android clients are rejecting the SSL with
CertPathValidatorException: Trust anchor for certification path not found.
These are all android 9+ , so I dont think it has to do with any of the Lets Encrypt changes ... but we dont control that workers.dev SSL cert, its managed by Cloudflare... so I don't really even know what to look at next as to why its not liking the SSL.
not sure if related, but other machines are failing with `Unable to resolve host "{subdomain}.{myproject}.workers.dev": No address associated with hostname” - but the vast majority (30,000 per day) are fine. Seems to be some sort of a DNS issue, not sure if related.
Thanks for anything you can point me to! ✊1 Reply
Some googling suggests "The certificate was self signed rather than signed by a CA" -- but this is CF's own SSL, we dont do anything for it whatsoever - seems like it should be signed by a CA?
And it only effects a small number of android machines - again 30,000+ requests per day are succeeding ...