NET::ERR_CERT_AUTHORITY_INVALID https in red color

Question

When i try to access my ruby site from android mobile device i get following error, can anyone help me solving this problem.

With following added error NET::ERR_CERT_AUTHORITY_INVALID

Answer 1

You need to add intermediate certificate file in your nginx configuration. Here is the powerfull tool by zakjan to obtain the intermediate certificate files using your main certificate, Store obtained crt file to your server and mentioned it in the nginx.conf in ssl_certificate

Answer 2

If it's not self-signed then one of certificates in your ssl certificate chain may use vulnerable encryption algorithms like SHA-1. Check what encryption each certificate uses (you may do it on PC). Probably you will need to find ssl registrator which does not uses old encryption algorithms. you may use https://www.ssllabs.com/ssltest/ to check if your site has issues with SSL configuration or certificate itself.

In fact i just checked it and here's result http://i.imgur.com/X9dPX8Q.jpg . The vulnerabilities it output could be the reason why mobile chrome is not trusting the certificate and shows you warning.

Another possible issue is man in the middle attack on your device. What network are you using? is it the same as your PC network? if not, it could be mitm attack on you.