Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Element Android tries to reach standard https port (443) even when homeserver I choose has a different port specified #8824

Closed
DarkmatterUAE opened this issue May 8, 2024 · 1 comment
Labels
T-Defect Something isn't working: bugs, crashes, hangs and other reported problems

Comments

@DarkmatterUAE
Copy link

DarkmatterUAE commented May 8, 2024

Steps to reproduce

  1. Run any matrix server on a port other than 443 (For example: 16443), with HTTPS.
  2. Launch Element Android.
  3. Enter homeserver address (as in: domain:16443) when asked and press Next.

Outcome

What did you expect?

Element Android only reaches out to port 16443 to communicate with homeserver, and I only need to trust one self-signed certificate (My homeserver certificate) on my phone.

What happened instead?

Element desktop reaches out to both port 16443 and port 443 to communicate with homeserver, and asked me to explicitly trust TWO certificates (first the certificate on the broadband router, then my homeserver certificate) before I can continue, which makes me extremely nervous, thinking that I am being actively eavesdropped.

Element Android first prompted me to trust a certificate with fingerprint I have not seen (Only later I recognized it on my broadband router). I want to NOT trust this certificate but this is the only way I can continue setting up.

First screenshot, showing a certificate fingerprint I don't recognize.

After clicking TRUST, a second self-signed certificate prompt showed up, prompting me to trust this certificate. This fingerprint represent the certificate I installed on my homeserver.

Second screenshot, showing the certificate I installed on my homeserver

Similar issue exist in Element Desktop but is more concealed because it's only logged in terminal when started from command line.

Your phone model

Xiaomi 8

Operating system version

Android 13

Application version and app store

Element Android 1.6.14 F-Droid varient

Homeserver

conduit 0.7.0 but should not matter, this problem should be able to be replicated even if only have I have nginx setted up

Will you send logs?

No

Are you willing to provide a PR?

No

@DarkmatterUAE DarkmatterUAE added the T-Defect Something isn't working: bugs, crashes, hangs and other reported problems label May 8, 2024
@DarkmatterUAE
Copy link
Author

element-hq/element-desktop#1660 (comment)

Turns out that specifying https:// is necessary to only talk to the specified port, as specified by the spec.

@DarkmatterUAE DarkmatterUAE closed this as not planned Won't fix, can't repro, duplicate, stale May 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
T-Defect Something isn't working: bugs, crashes, hangs and other reported problems
Projects
None yet
Development

No branches or pull requests

1 participant