DNS certificate failure on Android app 5, v23.1.10 blocks all traffic

To directly help you the best way possible please provide the following information:

  1. Where did you download Blokada from?
    Your website then auto updates
  2. Which device do you use? Do you use a custom ROM? Do you know which OS version you are using?
    Pixel 6 running stock Android 13
  3. Please explain the issue as detailed as possible. Also include patterns you observed (like ‘it only happens on wifi’). The more information the better.
    When the VPN is on, all network requests fail
  4. Since when are you facing this issue?
    Two days ago
  5. Did you already try to solve the issue somehow? If so: please state what you did.
    Turn off the VPN

Here’s a portion of the logs:

https://cloudflare-dns.com/dns-query?name=clients3.google.com.&type=a:connection error: error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/ statem/statem_clnt.c:1921: (unable to get local issuer certificate) 23:02:05.381 E blocka_dns lookup failed: ResolveError { kind: Msg('error resolving: query error: connection error: error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/ statem/statem_clnt.c:1921: (unable to get local issuer certificate)"), backtrack: None}
23:02:05.381 E trust dns_ error resolving: Resolution error: error resolving: query error: connection error: error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/ statem/statem _clnt.c:1921: (unable to get local issuer certificate) 23:02:05.382 Metrics (374} DNS-RTT/DNS-ERR/REC-ERR: 43ms/ 0/0
23:02:07.860

Hh Chris,

Can you share the full log with us at hello@blokada.org?

Hello,

Also please double check that your current date and time settings on your device is correct

Yes, the time and date are correct, set by the phone network.

Note that we recently changed our time from UTC+13 to UTC+12 but I don’t think that correlates with the certificate failure.

1 Like

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.