Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Notice: The certificate for TLS must be .cer extension #14

Closed
elliott10 opened this issue Nov 9, 2019 · 2 comments
Closed

Notice: The certificate for TLS must be .cer extension #14

elliott10 opened this issue Nov 9, 2019 · 2 comments

Comments

@elliott10
Copy link

elliott10 commented Nov 9, 2019

  • The certificate for TLS must be .cer extension.
    Content-Type: application/pkix-cert

  • And if you have encountered error:
    E v2ray : v2ray.com/core/transport/internet/tls: failed to load system root certificate > v2ray.com/core/transport/internet/tls: append cert to root
    Please refer to this: Fix passing self signed cert via arg/env v2ray-plugin#128

@jeffshead
Copy link

jeffshead commented Dec 4, 2019

I have Shadowsocks and v2ray-plugin installed on a CentOS 7 server. It is set up with Caddy and has a Let’s Encrypt SSL cert (i.e., ws+tls+web).

How do you install the cert in the Android Shadowsocks app? I installed the v2ray Plugin and under the v2ray settings, is an option to add the Certificate for TLS verification. I have downloaded the cert to the phone and tried to select it but the v2ray plugin will not import it. I gave the cert a .cer extension and I also tried .crt.

Also, since it's a Let's Encrypt cert, it's only good for 90 days. Is it necessary to add the cert to the Android v2ray plugin? It seems to work without it.

@Mygod Mygod closed this as completed Dec 18, 2019
@elliott10
Copy link
Author

Download shadowsocks on GooglePlay, then download v2ray-plugin on F-droid.
Because the v2ray-plugin on GooglePlay does not work properly.

After configure a server with a certificate from Let’s Encrypt, copy the xxx.pem certificate to Android directory /sdcard/Download/. Rename the xxx.pem file to xxx.cer

In shadowsocks app profile, select the v2ray plugin with websocket-tls transport mode, your server domain name. Click "BROWSE..." in "Certificate for TLS verification", then select the /sdcard/Download/xxx.cer

v2ray-plugin from F-droid works fine in Android 8.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants