Connection to station list failed about radiodroid

[Baryczka]

I might fixed it on my device by installing Root certificate from https://letsencrypt.org/certificates:
First check if you have current Root certificate of LetsEncrypt in Android Settings>security>TrustedCredentials and search for Internet Security Research Group If it is not there then try to download them (pem files) from those links or above one

• https://letsencrypt.org/certs/isrgrootx1.pem
• https://letsencrypt.org/certs/lets-encrypt-r3.pem

To install go to Android Settings>security>Certificate storage:Install from SD card, and select those two .pem files. Then try to play any station.

[narupara]

Thank you, Baryczka-san.
Thanks to your valuable information, I am able to use RadioDroid 2 again.

Now that I can use it again, there is a new restriction that requires me to set a screen lock, which I haven't been using until now. However, I understand this as a trade-off.

[SimSon2710]

I might fixed it on my device by installing Root certificate from https://letsencrypt.org/certificates:
First check if you have current Root certificate of LetsEncrypt in Android Settings>security>TrustedCredentials and search for Internet Security Research Group If it is not there then try to download them (pem files) from those links or above one

• https://letsencrypt.org/certs/isrgrootx1.pem
• https://letsencrypt.org/certs/lets-encrypt-r3.pem

To install go to Android Settings>security>Certificate storage:Install from SD card, and select those two .pem files. Then try to play any station.

Nice! This is a perfect workaround for my use case.

[KippA67]

Hallo,
ich habe das gleiche Problem...

[narupara]

I'm the same as you. Since 3 days ago, it has become impossible to connect only certain devices.

[whatamesss]

can confirm the SSL issue has cropped up again. would really like my radiodroid back!

[Baryczka]

The same issue. Attaching some logs that might be significant.
In my case it is Lenovo tablet with Android 6.0.1

03-08 21:39:38.146  1563  2553 I MediaFocusControl:  AudioFocus  requestAudioFocus() from [e-mail]$2@87584df req=1flags=0x0
03-08 21:39:38.149  1563  1563 D NotificationService: [buzzBeepBlinkLocked] net.programmierecke.radiodroid2 not set FLAG_SHOW_LIGHTS
03-08 21:39:38.152 22178 22319 I UTIL    : StationUUID:e3c8273c-f0d6-4d73-b922-00d67964ff67
03-08 21:39:38.152 22178 22319 I DOWN    : Url=https://de1.api.radio-browser.info/json/url/e3c8273c-f0d6-4d73-b922-00d67964ff67
03-08 21:39:38.152 22178 22319 I DOWN    : Url=https://de1.api.radio-browser.info/json/url/e3c8273c-f0d6-4d73-b922-00d67964ff67 (not cached)
03-08 21:39:38.175  1563  1563 D NotificationService: [buzzBeepBlinkLocked] net.programmierecke.radiodroid2 not set FLAG_SHOW_LIGHTS

# here the only error line
03-08 21:39:38.220 22178 22319 E UTIL    : downloadFeed() javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.
# here the only error line

03-08 21:39:38.241  2047  2047 W Binder_4: type=1400 audit(0.0:98835): avc: denied { ioctl } for path="socket:[1275083]" dev="sockfs" ino=1275083 ioctlcmd=7704 scontext=u:r:system_server:s0 tcontext=u:r:system_server:s0 tclass=unix_stream_socket permissive=0
03-08 21:39:38.241  2047  2047 W Binder_4: type=1400 audit(0.0:98836): avc: denied { ioctl } for path="socket:[1275083]" dev="sockfs" ino=1275083 ioctlcmd=7704 scontext=u:r:system_server:s0 tcontext=u:r:system_server:s0 tclass=unix_stream_socket permissive=0
03-08 21:39:38.254 22178 22178 I ExoPlayerWrapper: Pause. Stopping exoplayer.
03-08 21:39:38.298  1563  1563 D NotificationService: [buzzBeepBlinkLocked] net.programmierecke.radiodroid2 not set FLAG_SHOW_LIGHTS
03-08 21:39:38.320  1563  1563 D NotificationService: [buzzBeepBlinkLocked] net.programmierecke.radiodroid2 not set FLAG_SHOW_LIGHTS

[grave-digga]

Same here, upgraded from (i think) 83 or 84 to the newest version because "öffentlich rechtliche" stations in germany didn't work for a longer time, only private stations. Did that yesterday. Now i get the error message on any version and could not connect to any station because i couldn't search for them. Now the device is somehow broken (Xoro HMT 200) because RadioDroid2 was the best Player without many lags and good handling. It's an really old Internet radio but with RD2 it simply works fine. :)

[osminogig]

Please do something !
Stopped working on Android 5.1
I really appreciate your radio !

[vanrob13]

Same problem on Samsung Galaxy 5 Mini - Android 6.0.1
Yesterday at the same time installed on Samsung Galaxy 4 Mini - Lineage 14 fortunately working w/o problems.

[JyFrite]

Hello,
Same problem since few days on my Galaxy A3, Andoid 7.0
I tried to press
Parameters->Connectivity->Proxy
and press Test without any proxy name...
and... RadioDroid works !!!
I hope it will be usefull for you too !

[SimSon2710]

Hello,
Same problem since few days on my Galaxy A3, Andoid 7.0
I tried to press
Parameters->Connectivity->Proxy
and press Test without any proxy name...
and... RadioDroid works !!!
I hope it will be usefull for you too !

Unfortunately, this didn't solve it in my case.

[Baryczka]

Great to hear that @narupara ! I totally forgot to mention that lock screen will be required 😅 . I had the same case as using this a bit aged but still functional device to play internet radios via BT. Now it require pattern unlock, even worse, it was not working great on this tablet causing hungs when unlocking but for now is better to have something working. Let's see if this is possible to fix on app level and then custom CA can be disabled again. I wonder if letsencrypt will prolong these cross signed certificates(DST/ISRG) again for older devices.

[whatamesss]

unfortunately, i dont think i can install root certificates on my blackberry passport with android runtime 4.3..
one option i'm still investigating is using my proxy server as man-in-the-middle...maybe this can work.

[whatamesss]

great news! i was able to fix the issue on my blackberry passport by installing the 4 .pem certs from let's encrypt!
i guess the android runtime copies them from the host system at launch...as radiodroid works again! awesome!
bonus: i dont have to enable a lockscreen! good luck to the rest of you...hope you can get it working too!

[SimSon2710]

great news! i was able to fix the issue on my blackberry passport by installing the 4 .pem certs from let's encrypt!
i guess the android runtime copies them from the host system at launch...as radiodroid works again! awesome!
bonus: i dont have to enable a lockscreen! good luck to the rest of you...hope you can get it working too!

Could you specify which certificate exactly you used? I tried several of the pem files and all required me to add an extra layer of protection :/

[everloop2]

great news! i was able to fix the issue on my blackberry passport by installing the 4 .pem certs from let's encrypt!
i guess the android runtime copies them from the host system at launch...as radiodroid works again! awesome!
bonus: i dont have to enable a lockscreen! good luck to the rest of you...hope you can get it working too!

Could you specify which certificate exactly you used? I tried several of the pem files and all required me to add an extra layer of protection :/

Mobile Samsung Xcover3 (android 6.0.1/radiodroid 0.86) https://letsencrypt.org/certs/lets-encrypt-r3.pem confirmed workin as user or system (root) certificate.

Add it to user certificates first and try RadioDroid like mentioned.
If user cert wont install, u have to "add an extra layer of protection :/ " first, aka set screen lock, seen on android 4.x.x.

To get rid of "extra layer of protection" u need root access to copy certificate to write proteced
/system/etc/security/cacerts/ via ADB.

For root try https://f-droid.org/de/packages/com.topjohnwu.magisk/ to patch SuperUser to a backup of ur boot.img -> i used custom recovery TWRP to backup and flash rooted boot.img, alternatives: CWM or Fastboot.

Connect via ADB and follow: https://systemweakness.com/importing-a-certificate-and-installing-it-on-android-67867b8dcd80

on Linux:

cert hash:
openssl x509 -inform PEM -subject_hash_old -in lets-encrypt-r3.pem | head -1

hash: dec71a0b

!rename! cert to cert hash.0 - else cert wont work and copy cert to device

cp lets-encrypt-r3.pem dec71a0b.0
adb push dec71a0b.0 /sdcard

mount device system read/write

adb shell
su
mount -o rw,remount /system

copy cert to cacerts
cp /sdcard/dec71a0b.0 /system/etc/security/cacerts/

set cert permissions

cd /system/etc/security/cacerts/
chmod 644 dec71a0b.0

done.

Afterwards u can delete user certificate and get rid of annoying "extra layer of protection" ,)