android


ssl page with ssl iframe broken on android 5.1


I have an ssl page with an iframe that is another ssl page. This works fine on my desktop using chrome or edge.
But on Mobile, using android 5.1 and either Chrome or FF the iframe is not displayed, there is no error, just a blank area with a little page icon with a frowney face.
There is no mixed content as far as I can tell.
On the same site I also have youtube videos that run in an iframe and they work fine.
Page with iframe that doesn't work with Adroid:
https://prolabprints.com/order-online/simple-file-uploader/
the page that is in the iframe:
https://uploads.prolabprints.com/
The main site is a static site hosted via AWS S3 and then Cloudfront, using their free TLS cert.
The iframe page (uploader) is running on an EC2 instance, and uses a free letsencrypt cert.
Here is a page that has an iframe for a youtube video that works when the uploads page is broken on android:
https://prolabprints.com/videos/roes-intro-video/
I have tried an Ipod touch, and it works. I have tried with a couple android phones and they don't work.
I have also tried removing onload="scroll(0,0)" from the iframe and it doesn't make a difference.
I have tried doing the url for the iframe as //uploads.prolabprints.com like the youtube embed is and that doesn't work.
Why would the iframe for my uploader not work when the Youtube iframe does? Is this because of the type of ssl cert that I have?
A short look at the SSLabs report for uploads.prolabprints.com shows that the server sends an incomplete certificate chain:
This server's certificate chain is incomplete. Grade capped to B.
...
Chain issues Incomplete, Extra certs
While desktop browsers often deal with this kind of problem by downloading the missing intermediate certificates from the internet (Google Chrome) or using cached certificates from visits to other sites (Firefox) mobile browsers are usually not that much forgiving.
A closer look reveals that there was an attempt to send an intermediate certificate but that instead of "Let's Encrypt Authority X3" the certificate for "Let's Encrypt Authority X1" was sent, causing "Incomplete" (X3 missing) and "Extra certs" (X1 not needed).

Related Links

For Wifi performance is there a need to keep wake lock?
android database exception
Compare two tables in one query
android: convert mp3 to wav using Jlayer
android runtime error unable to instansiate application. classnotfoundexception
BackStack Implementation for Fragments in android Tabs
IllegalArgumentException when switching to settings activity in live wallpaper
Android - Issues with tabhost and aligning imageview and textview
How to perform Undo and Redo operation on canvas in android
How to simulate click on recent app by code?
How to update Sqlite database for only one column using WHERE clause in android [duplicate]
how to scroll listview background with item
html text input broken - Nexus-S 4G / Android 4
Disable overscroll on 2.3.5? Or change colour?
Append action bar items in Android
font style ad padding for normal edittext and password?

Categories

HOME
phantom-dsl
kentico
prism
flex
interface
jsf-2.2
pclxl
emscripten
bookmarks
trac
fhir
watson-conversation
mautic
line
jsonpath
spring-social
powershell-v5.0
chargify
mapstruct
enterprise-miner
windows-xp
undertow
dpdk
named-entity-recognition
parcelable
mongoid6
epsilon
short-url
google-cloud-print
gpio
angularjs-components
outliers
entity-relationship-model
xbox
dumpbin
erb
card.io
jwplayer6
mnist
sharepoint-workflow
swagger-php
parse-tree
imagenet
demo
glm-math
jboss-4.2.x
ntvs
openal
sonarlint-eclipse
spring-integration-sftp
reportservice2010
manova
flyout
cpu-cache
javafx-css
taocp
simplepie
pytables
lrs
mapinfo
hclust
respondcms
google-query-language
kango-framework
uiactionsheet
thread-sleep
grass
cycle2
qbxml
state-restoration
rewrite
extjs-grid
visual-sourcesafe-2005
rrule
gamekit
public-html
cocos3d
device-tree
linkedin-jsapi
cbind
create.js
artemis
scrypt
isqlquery
monotouch.dialog
zope.interface
jsr286
denied
winmain
http-daemon
socketserver
ie-compatibility-mode
delimited-text
scrollbars

Resources

Encrypt Message