#david-walker_unexpected
rocky pathBOT
👋 Welcome to your new thread!
⏱️ We automatically close idle threads, which makes them read-only. Make sure you stick around to chat in realtime!
🔗 This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1212534779879231528
📝 Have more to share? You can add more detail below, including code, screenshots, videos, etc.
⏲️ We'll be here soon! Typically we respond in a few minutes, but sometimes we might take a bit longer if the server is busy or if you have a particularly tricky question. Thank you for your patience!
keen bridgeBOT
idle temple
Hi 👋
Have you been able to use these ceriticates in the past in a live POS system?
idle temple
And this error is occurring at what point in your integration? What requests are being blocked because of this cert error?
keen bridgeBOT
full plank
We are unable to connect to a websocket, it's hosted at https://live.tangohq.com/ordering
This is an app running on an S700
The connection works properly when the same app is running on an off-the-shelf android device
But on S700 we get java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.
FYI this is an issue in production right now. We have an active critical incident related to this issue
idle temple
Unfortunately, because this is a beta program, I can't help you troubleshoot directly here. I'll have to ask you to write in to Support https://support.stripe.com/contact or any contact you have with the Beta team. However, I will raise this internally so we can start investigating right away.
Do you have the ID (tmr_) or serial number for this S700 that you could share?
full plank
All of our S700s are affected
idle temple
In that case, could you provide your account ID? We need some way to clearly identify the imapcted account(s) and devices.
idle temple
Perfect. That gives me all I need.
full plank
Thank you
idle temple
Okay, I have raised this issue interally. If you have not already, I recommend writing in to Support describing the issue with the same clarity and detail as you did here. https://support.stripe.com/contact.
full plank
Okay, thanks for the update. I'll attach some additional info in my report and here
The S700 appears to support the following certificate authorities
Not included among them is ISRG Root X1 which we have relied on for some time
idle temple
Apparently there is an issue with missing certificates in the current ROM. An update has be created that addresses this issue but we don't have a timeline on when it will be released. In the meantime, you can bundle the missing certificates in your application andinclude the the certificates from your production certificate chain. I do not have guidance on exactly how to perform this but other users have mitigated the issue in that way.
full plank
Is it possible to prioritize an app review for a build which bundles said certificates?
We're dead in the water here
idle temple
Unfortunately I don't have those details because this is still in private beta.
full plank
Can you give us a call on our account's listed number?
idle temple
No I can't. I'm sorry but your best option is to reach out via the Support link I shared. If you have a direct contact with the beta program that would also be a good avenue. Beyond reporting the issue there isn't any more I can do to help, sorry.