by acroyear » Mon Aug 29, 2016 5:09 pm
Basically, self-signed certs aren't considered "trusted" by the browsers and vendors. Yeah, YOU trust yours, but in general if a public page just happens to have a cert that isn't signed by an authority, it can appear like it should be trusted by actually be harmful.
Being an html5 app, I am not in control in any way of overriding the webview's policy on accepting self-signed certs.
On Chrome (both web and app), it should accept the if you have created a permanent exception to the cert in the browser by connecting directly to your subsonic server in the same browser at some point.
I do not know if Firefox allows that exception to be permanent anymore, though it used to. I have not tried IE or Edge with a self-signed cert yet.
On android and fire tablets, it is possible (but tedious) to add your own cert to the tablet's internal store, allowing access, but I've never tried it. I've read from one site that it *may* be possible to do it on a Fire TV, but there is no way to do it on the Fire Stick. Amazon has not indicated that they will ever give up that security restriction.
There really is nothing I can do right now. If the platform won't accept the cert, that is by their design, not mine.
Pure native apps have more internal control over that. If I were to package my app differently for Fire, through phonegap instead of using Amazon's app deployment, I may be able to override the setting...or I may get in trouble because it may be a violation of Amazon Fire policy. In addition, it would require me to deploy it as a new app, disconnecting existing users from automatic upgrades. Not currently a risk-benefit gamble I want to take at this time.
--
Joe Shelby
http://subfiresuite.com/
http://subfireplayer.net/