Minor Android-only Update to Survey123 available (November 19)

[IsmaelChivite]

A minor update to the Survey123 field app in the Google Play and Amazon stores has just been made available. This new build, addresses BUG-000117493, which affected Android 7.0 (and newer) devices when attempting to connect to an ArcGIS Enterprise portal using non-CA-signed certificates.

BUG-000117493 "SSL Handshake failed (6)" error is generated in Survey123 app when attempting to connect from Android 7.0 or higher to an ArcGIS Enterprise portal using non-CA-signed certificate.

The new build number for the Survey123 field app on Android is 3.1.159.

[Marie-LouLabuschagne]

Updated the Survey123 app on the Samsung phone to version 3.1.159, but I still get the SSL handshake failed error message.  The survey works perfectly on iPhones, iPads, Surface Pro's and desktop.

[JohnathanHasthorpe]

Hi Marie-Lou

Can you confirm a couple of things:

1) What is the model and version of Android you are using?

2) That you have installed the portal Root certificate on the Android device:

Cert Install Steps (for Android 😎

Use Internet Edge to export the portal .crt file

1. Open Microsft Edge
2. Navigate to https://<portal url including domain>/<webadaptor>/sharing/rest/portals/self?f=pjson
3. Click on the padlock in the address bar and select View certificate
4. Select the Root certificate
5. Click Export to file
6. Save it as a X.509 .crt file

Copy the .crt file to the storage card of the Android device and install

1. Once the .crt file is on the device, open Settings
2. On the "Settings" page select "Security & location"
3. On the "Security & location" page select "Encryption & credentials"
4. On "Encryption & credentials" page select "Install from storage"
5. Locate the .crt file
6. You may be challenged for additional security (e.g. fingerprint or pin to continue)
7. Name the certificate

Thanks

John

[Marie-LouLabuschagne]

Hi John

1. Samsung Galaxy 8 with Android 8.0.0

2. We managed to find the certificate, save it as a X.509.crt file and copy it to the phone.

However, when we look on “Settings”, we can’t find “Security & location” - so we can’t install the certificate on the phone. We tried “Install from storage”, but can’t see the certificate….

Cheers!

Marie-Lou

[JohnathanHasthorpe]

Hi Marie-Lou

Install from storage is the correct place to be. Just make sure that you navigate to the directory that you copied the file to (and make sure it was successfully copied). Android does not filter by file type - so if you are in the right directory, you should see the file.

Thanks

John

[Marie-LouLabuschagne]

Hi John

We installed the certificate onto the Samsung phone, but we still get the SSL handshake failed error message....

Marie-Lou

[JohnathanHasthorpe]

Hi Marie-Lou

There are a number of issues that could cause SSL handshake failures, such as the following:

• Check that the certificate is valid, including details such as expiration date, common name, and issuer.
• Check that the root certificate in the certificate chain is correct and deployed to all devices.
• Check the intermediate certificates in the certificate chain.
• Check that the encryption algorithm used in the certificate is supported by the device. The typically used algorithm is SHA256.

You can test the SSL certificates used in a web server using an online tester such as: SSL Server Test (Powered by Qualys SSL Labs) 

Feel free to contact me directly if this requires further troubleshooting.

jhasthorpe@esri.com

Thanks

John