#SSL Error in Android WebView with Cloudflare Proxy ON

9 messages · Page 1 of 1 (latest)

frigid hamlet
#

Hey everyone 👋

I’m running into a weird SSL issue with Android WebView when my site is proxied through Cloudflare.

🔗 Domain: https://www.watchbrew.com/in/ghich-pich?platform=webview
⚠️ Error:

Error code: 3  
SSL error: The certificate authority is not trusted

What’s happening:

  • Site works fine on all browsers (desktop + mobile) ✅
  • Works fine on iPhones ✅
  • Fails on most Android devices ❌ (WebView latest, Android 14/15)
  • Works if I disable Cloudflare proxy (grey cloud) 🔄
  • One of my other domains with similar setup (createstir.com) works fine in WebView even with proxy ON.
  • I noticed Cloudflare issued SSL certs from SSL.com for watchbrew.com, but from another CA for createstir.com.
  • So it looks like Android WebView doesn’t fully trust SSL.com’s root CA, even on modern devices.

Steps I’ve tried:

  • Checked Nginx config — fine.
  • Toggled between “Full” and “Full (Strict)” modes.
  • Disabled proxy — works.
  • Waited for cert reissue — still SSL.com.

💡 Questions:

  1. Can I force Cloudflare to use a different CA (like Google Trust Services or DigiCert)?
  2. Would Advanced Certificate Manager let me fix this?
  3. Any known workarounds for WebView-specific SSL CA issues?

Any help or insight would be awesome 🙏

woeful snow
frigid hamlet
#

Yes, ACM fixed it! thanks

gentle maple
#

This post was CLUTCH, thanks @woeful snow and @frigid hamlet for pointing me in the right direction. Issuing a new certificate using ACM fixed our issues too.

random kelp
#

@woeful snow, do you happen to know why ssl.com certs are no longer trusted by Android? Is there any official announcement / bulletin about this?

woeful snow
#

I'll look for an announcement in a few minutes.

somber smelt
woeful snow