TLS Root Certificates (can anyone with a 245 help?)

Hi all,

I've been investigating some issues surrounding TLS lately, in particular, cases where the root TLS certificate store on the devices may differ between each other. To better understand the issue, I built a little open source widget that tests connectivity across a few services that ultimately reference different root certificates. The project is here: https://github.com/rconradharris/CheckTLS

ASK: If anyone has a 245 / 245 Music, could they build and sideload the widget onto their device and then report the results back to this thread? I think the 245 may differ from other devices I've tested, but since I don't have a 245 myself, I can't confirm this yet.

I'll be following up with the results from different devices I own as well as the simulator.

Thanks!

-Rick

rconradharris over 5 years ago

Here's the Fenix 5 Plus. The second line indicates that Let's Encrypt certs won't work (when using the watch itself, when using the phone proxy it will).

rconradharris over 5 years ago

And here's the simulator. Neither Let's Encrypt nor Sectigo (the new name for Comodo?) certs work here.

Travis.ConnectIQ over 5 years ago

I'm sorry nobody has replied to you sooner. I should be able to test this on a fr245m tonight.

rconradharris over 5 years ago in reply to Travis.ConnectIQ

Thanks! I think as more folks start to use Communications.SyncDelegate, this thread will become useful. The phone proxy means that devs almost never run into any TLS issues, but once device Wi-Fi is used, the device's certificate store becomes a big concern.

Travis.ConnectIQ over 5 years ago

fr245m reports:

[ OK ] Comodo ECC
[ FAIL ] DST Root CA X3
[ OK ] USERTrust RSA

rconradharris over 5 years ago in reply to Travis.ConnectIQ

Travis, thanks so much for going out of your way to run this, much appreciated. These results match the other devices I've tested, including the V3m and the fr645.

Travis.ConnectIQ over 5 years ago in reply to rconradharris

You're welcome. Sorry it took so long to get someone to get back to you.