# java.security.cert.CertPathValidatorException
**URL:** https://forum.antennapod.org/t/java-security-cert-certpathvalidatorexception/4731
**Category:** Support
**Created:** [May 27, 2024, 2:36pm UTC](https://forum.antennapod.org/t/java-security-cert-certpathvalidatorexception/4731 "2024-05-27T14:36:06Z")
**Posts on this page:** 12
**Page:** 1
### Author:  [@kostecke](https://forum.antennapod.org/u/kostecke)
#### Post date: [May 27, 2024, 2:36pm UTC](https://forum.antennapod.org/t/java-security-cert-certpathvalidatorexception/4731/1 "2024-05-27T14:36:06Z")
**App version** : 3.4.0 F-Droid
**Android version** : 9 Verizon
**Device model** : Samsung Galaxy S-8
**Expected behavior** : Download / stream podcast episodes from [ARRL Audio News](https://feeds.blubrry.com/feeds/arrlaudionews.xml)
**Current behavior** : Download attempts fail with this error message:
```auto
Unable to establish a secure connection. This can mean that another app on your device (like a VPN or an ad blocker) blocked the download, or that something is wrong with the server certificates.
Technical reason:
java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.
File URL:
https://media.blubrry.com/arrlaudionews/content.blubrry.com/arrlaudionews/AAN-2024-05-17.mp3
```
I see a similar error message when attempting to stream an episode of this podcast.
I **AM** able to paste the podcast episode link into my browser (Chrome on my S-8) and play it there.
**First occurred** : Approximately 10 days ago
**Steps to reproduce** :
1. Wait for the auto-download to start
2. Read the error message in my notifications area
_ **OR** _
1. Open the queue
2. Click the _ **Download** _ icon for a failed episode
3. Wait for the download attempt to time out and read the error in a dialog box (or eventually in my notifications area)
_ **OR** _
1. Open an episode page
2. Click the _ **Stream** _ icon
3. Wait for the download attempt to time out and read the error in a dialog box
**Environment** :
This issue occurs whether or not I have my wired “ear buds” plugged in.
- Keep updated is enabled
- Include in auto downloads is enabled
- No authentication
- No tags
- Uses global default playback speed
- No autoskip
- Uses global default auto delete
- No volume adaptation
- Uses global default new episodes action
- No episode filter settings
---
### Author:  [@andbenn](https://forum.antennapod.org/u/andbenn)
#### Post date: [May 27, 2024, 6:01pm UTC](https://forum.antennapod.org/t/java-security-cert-certpathvalidatorexception/4731/2 "2024-05-27T18:01:49Z")
Are you using an app called AdAway? [Reference](https://forum.antennapod.org/t/cannot-download-some-podcasts-for-24h/740/8) It got in the way of a few others as you see in that thread.
Other thought is your Android version is very old, and the certificates that came with it might have expired or will soon.
---
### Author:  [@kostecke](https://forum.antennapod.org/u/kostecke)
#### Post date: [May 27, 2024, 11:23pm UTC](https://forum.antennapod.org/t/java-security-cert-certpathvalidatorexception/4731/3 "2024-05-27T23:23:44Z")
(I had to post this through the WebUI due to the forum’s e-mail security settings)
andbenn via AntennaPod Forum said:
> Are you using an app called AdAway? It got in the way of a few others as you
> see in that thread.
I’m not using AdAway or a VPN.
> Other thought is your Android version is very old, and the certificates
> that came with it might have expired or will soon.
The [media.blubrry.com](http://media.blubrry.com) podcast links work for me in the Chrome browser
on my phone, so I’m not sure that we can blame my Android version.
It may be notable that the [media.blubrry.com](http://media.blubrry.com) SSL cert was updated on May
15th, shortly before I encountered this error.
---
### Author:  [@kostecke](https://forum.antennapod.org/u/kostecke)
#### Post date: [May 27, 2024, 11:25pm UTC](https://forum.antennapod.org/t/java-security-cert-certpathvalidatorexception/4731/4 "2024-05-27T23:25:37Z")
This issue is also being discussed at
> [@Cannot stream nor download from podcast](https://forum.antennapod.org/t/cannot-stream-nor-download-from-podcast/4699/12):
>
> I’m having the same issue with another podcast hosted at blubrry. It seems that it started around the time that the [media.blubrry.com](http://media.blubrry.com) SSL cert was renewed.
---
### Author:  [@Canflu](https://forum.antennapod.org/u/Canflu)
#### Post date: [May 28, 2024, 10:34am UTC](https://forum.antennapod.org/t/java-security-cert-certpathvalidatorexception/4731/5 "2024-05-28T10:34:08Z")
I reckon Chrome on Android doesn’t use the system certificate store, which is why it works. But if you install another browser - I tried with the Duck Duck Go one - then it does show a warning when accessing media.blubrry.com, although it just says the certificate “is not valid” vaguely.
Antenna Pod shipped CAs for old devices before [Ship our own CA certificates for old devices by ByteHamster · Pull Request #4497 · AntennaPod/AntennaPod · GitHub](https://github.com/AntennaPod/AntennaPod/pull/4497) - it’d be great if somehow the powers that be could add the missing CA from GlobalSign nv-sa 🥺
---
### Author:  [@kostecke](https://forum.antennapod.org/u/kostecke)
#### Post date: [May 29, 2024, 4:05pm UTC](https://forum.antennapod.org/t/java-security-cert-certpathvalidatorexception/4731/7 "2024-05-29T16:05:59Z")
Canflu via AntennaPod Forum said:
> I reckon Chrome on Android doesn’t use the system certificate store,
> which is why it works. But if you install another browser - I tried
> with the Duck Duck Go one - then it does show a warn ing when accessing
> media.blubrry.com, although it just says the certificate “is not
> valid” vaguely.
As of this morning AntennaPod now downloads from [media.blubrry.org](http://media.blubrry.org)
And I didn’t see an error in DuckDukGo.
---
### Author:  [@Listener](https://forum.antennapod.org/u/Listener)
#### Post date: [May 29, 2024, 11:16pm UTC](https://forum.antennapod.org/t/java-security-cert-certpathvalidatorexception/4731/8 "2024-05-29T23:16:24Z")
> [@Cannot stream nor download from podcast](https://forum.antennapod.org/t/cannot-stream-nor-download-from-podcast/4699/13):
>
> I contacted blubrry support out of desperation, and I think they fixed it! I’ve been able to download again anyway.
Carrying-over the solution solved by @Canflu efforts
---
### Author:  [@Canflu](https://forum.antennapod.org/u/Canflu)
#### Post date: [July 9, 2024, 1:31pm UTC](https://forum.antennapod.org/t/java-security-cert-certpathvalidatorexception/4731/9 "2024-07-09T13:31:52Z")
Sadly, it seems like this has broken again in the last few days. This morning the error returned on a download that worked last week. I give up, I’ll probably buy a new phone soon because other errors and glitches are starting to stack up on it (entirely unrelated to this).
---
### Author:  [@Listener](https://forum.antennapod.org/u/Listener)
#### Post date: [July 9, 2024, 6:27pm UTC](https://forum.antennapod.org/t/java-security-cert-certpathvalidatorexception/4731/10 "2024-07-09T18:27:58Z")
A newer phone (with a newer OS version) is certainly a good plan when
> [@Canflu](#):
>
> errors and glitches are starting to stack up
Time to ping Blubrry again if the new phone purchase isn’t imminent?
---
### Author:  [@jdstraye](https://forum.antennapod.org/u/jdstraye)
#### Post date: [July 18, 2024, 4:02pm UTC](https://forum.antennapod.org/t/java-security-cert-certpathvalidatorexception/4731/11 "2024-07-18T16:02:39Z")
What is the best path forward – talking to blubrry, who seem to revert back to unusability frequently or ship our own CA certificates again?
If the latter, do we merely need to update the certificates in core/src/main/java/de/danoeh/antennapod/core/ssl/BackportCaCerts.java?
---
### Author:  [@ByteHamster](https://forum.antennapod.org/u/ByteHamster)
#### Post date: [July 18, 2024, 8:50pm UTC](https://forum.antennapod.org/t/java-security-cert-certpathvalidatorexception/4731/12 "2024-07-18T20:50:31Z")
Certificate added. Will be released in AntennaPod 3.5
---
### Author:  [@system](https://forum.antennapod.org/u/system)
#### Post date: [November 15, 2024, 8:50pm UTC](https://forum.antennapod.org/t/java-security-cert-certpathvalidatorexception/4731/13 "2024-11-15T20:50:45Z")
This topic was automatically closed 120 days after the last reply. New replies are no longer allowed.