2025-07-26, 10:22 PM
(This post was last modified: 2025-07-26, 10:29 PM by OmegaSupreme3. Edited 4 times in total.)
Coming back to this issue. So for future reference, I will post my solution. The problem didn't have anything to do with the Jellyfin app or server.
As usual, problems are hardly every caused by a single factor ...
How did I found out?
Checking debug logs for both the reverse proxy and Jellyfin server did not give any indication. So I eventually took the sources of Jellyfin Android TV, had to change some code (min-server-version, app-version) to actually make it work with my Jellyfin server and fired up the debugger in Android Studio. After testing some scenarios I found the cause of the connection problems in the stacktrace (shortened for readability): Trust anchor for certification path not found.
Would be nice if the Jellyfin app could show a stacktrace of the last known issue (e.g. located behind a "Show Error" button).
As usual, problems are hardly every caused by a single factor ...
- It turned out that, unknown to me, my room mate had recently renewed the SSL certificate and updated it on the reverse proxy
- Sectigo updated and migrated their root certificates last april 2025 in all known major root stores (https://www.sectigo.com/knowledge-base/d...0000003RoT)
- However, it appears the certificate store of Android 14 doesn't seem to be entirely up-to-date yet (no problems on Android 16!). So to circumvent this issue, the root certificate had to be added on the reverse proxy.
How did I found out?
Checking debug logs for both the reverse proxy and Jellyfin server did not give any indication. So I eventually took the sources of Jellyfin Android TV, had to change some code (min-server-version, app-version) to actually make it work with my Jellyfin server and fired up the debugger in Android Studio. After testing some scenarios I found the cause of the connection problems in the stacktrace (shortened for readability): Trust anchor for certification path not found.
Code:
org.jellyf...HttpClient org.jellyfin.androidtv.debug E Unknown SSL error occurred
org.jellyf...HttpClient org.jellyfin.androidtv.debug E javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.
org.jellyf...HttpClient org.jellyfin.androidtv.debug E at com.android.org.conscrypt.SSLUtils.toSSLHandshakeException(SSLUtils.java:356)
org.jellyf...HttpClient org.jellyfin.androidtv.debug E at com.android.org.conscrypt.ConscryptEngineSocket.startHandshake(ConscryptEngineSocket.java:218)
org.jellyf...HttpClient org.jellyfin.androidtv.debug E Caused by: java.security.cert.CertificateException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.Would be nice if the Jellyfin app could show a stacktrace of the last known issue (e.g. located behind a "Show Error" button).
