Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Device connection fails after authentication due to invalid certificate errors #769

Open
Iss-in opened this issue Jan 4, 2025 · 2 comments
Labels
bug An issue that is confirmed as a bug needs info An issue that needs more information

Comments

@Iss-in
Copy link

Iss-in commented Jan 4, 2025

Current Behavior

KDEconnect/Playstore in moto edge device
valent-git 1.0.0.alpha.46.r94.g1ce2347-1/ AUR

After the first pair, Device disconnects from valent

on refreshing client on either side , device momentarily shows up and disappear again with same error.

I am able to connect to kdeconnect on some other device without any issue. But that other device is also working with valent without any issues

Expected Behavior

show stay connected after pairing

Desktop

Other (please specify)

Other Desktop

hyprland

Operating System

Arch

Installed from

Other

Version

1.0.0.alpha

Devices

No response

Plugins

No response

Logs

9:56:05.1163     valent-lan-channel-service:    DEBUG: incoming_broadcast_task(): authenticating (192.168.1.57:1716): Invalid certificate for "f3943726_4104_4a5b_bad5_f3383f92d564"
09:56:08.3976     valent-lan-channel-service:    DEBUG: incoming_broadcast_task(): authenticating (192.168.1.57:1716): Invalid certificate for "f3943726_4104_4a5b_bad5_f3383f92d564"


### Screenshots

_No response_
@Iss-in Iss-in added the triage An issue that needs confirmation and labeling label Jan 4, 2025
@andyholmes andyholmes added bug An issue that is confirmed as a bug needs info An issue that needs more information and removed triage An issue that needs confirmation and labeling labels Jan 4, 2025
@andyholmes
Copy link
Owner

Thanks! I haven't seen this myself, but something is going funky.

For reference, KDE Connect devices store their device ID in the subject of the TLS certificate. In other words, the TLS certificate is a reliable source of truth for the device ID, so this bug "shouldn't" happen.

The obvious security breach is someone creating a new TLS certificate with a spoofed device ID, but they'd need to be on your LAN and so on; pretty unlikely. I'll see what I can dig up :)

@Iss-in
Copy link
Author

Iss-in commented Jan 5, 2025

this is happening only with my brand new moto edge 50 neo, which idk if relevant or not , letme know if i can help in debugging with it in any way

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug An issue that is confirmed as a bug needs info An issue that needs more information
Projects
None yet
Development

No branches or pull requests

2 participants