My Android app cannot enter the meeting about jitsi-meet-sdk-samples

[Noah1991]

The SSL certificate being used is a free certificate from DigiCert, and it has 6 months left until expiration.

[saghul]

I am unable to access that domain. Is it up?

[Noah1991]

By modifying the local hosts file to point the domain name to an IP address within the local network, I'm aiming to make the SSL certificate within the local network trusted.

[Noah1991]

The server deployment version is stable-9364.

[saghul]

It's hard to tell without being able to test it. Android is complaining it cannot connect to it. This could be because the full chain cert is not presented, for example. Or because a self-signed cert is used.

[Noah1991]

The certificate being used is trusted, and this domain name mapped to the certificate on a public network service is recognized normally. Additionally, after mapping it to a local IP, Chrome also considers the connection secure, recognizing the certificate as trusted.

You can try modifying your hosts file locally to point a domain name to your local IP address and then attempt to access it using the Android client.

[Noah1991]

And the local network is connected to the public network, not isolated.

[saghul]

Not sure what your network scenario is, but the SDK uses okhttp unde the hood, and it's not liking the certificate.

[damencho]

What does https://whatsmychaincert.com/ say about your deployment? Do you have the full chain in there?

[saghul]

The problem is that URL doesn't seem to be accessible from the outside so it errors.

[Noah1991]

I'll start by summarizing my configuration and actions:
1、 A laptop capable of creating a WiFi, and an Android smartphone.

2、A public domain name is needed, and you'll also need to apply for a CA certificate for that domain name. The certificate authority (CA) issuing the certificate is DigiCert.

3、On the laptop, run the Jitsi Meet service using Docker. Modify the .env file to set PUBLIC_URL to your domain name. Import the cert.crt and cert.key files associated with the domain name into the config/keys/ directory. Then, run the Jitsi Meet service.

4、Modify the hosts configuration on your laptop to point the domain name to your local IP address. The hosts file is located at C:\Windows\System32\drivers\etc.

For example:

Open the hosts file located at C:\Windows\System32\drivers\etc\hosts using a text editor like Notepad.
Add a new line at the end of the file with the following format: your_local_ip domain_name
Save the hosts file after making the changes.
Replace your_local_ip with the actual IP address of your laptop and domain_name with the domain name you want to map to your local IP address.

5、At this point, if you access the domain name "https://your_domain:8443" in your computer's browser, the connection should be trusted.

6、When you connect your Android phone to the WiFi created by the computer, both the computer and the phone are on the same local network. At this point, the phone's browser can also access the Jitsi Meet service using the domain name. There's no need to modify the hosts file on the phone because the phone is connected to the WiFi created by the computer, so its requests pass through the computer and are forwarded, making the hosts modification on the computer sufficient.

7、After everything is set up, install the Jitsi Meet demo app on your Android phone. Then, modify the server address in the app to your domain name: "https://your_domain:8443".

The domain name and certificate I used locally were purchased from a professional organization, and they can be deployed on the public network for others to access. I've just utilized them within the local network.

[Noah1991]

Not sure what your network scenario is, but the SDK uses okhttp unde the hood, and it's not liking the certificate.

I've also tried running another service locally and developed an Android app using OkHttp to access the service's API. It can access the service normally without any HTTPS-related warnings.

[saghul]

I don't know what to tell you. It's not possible for us to replicate your use case.

[Noah1991]

I have given up on this approach and currently use webview to load the iframe so Android can use it. Thank you for your patient answer