Android Question Caching of HTPPS certificates in Webview

[Derek Johnson]

I've come across a strange problem when using a Webview to access some particular sites using my Nexus 5X. I'm getting warnings that the website that I am accessing is using a certificate that will soon become distrusted by Google. This is the console log entry:

The certificate used to load https://xxxxx uses an SSL certificate that will be distrusted in the future. Once distrusted, users will be prevented from loading this resource. See https://g.co/chrome/symantecpkicerts for more information.

This does not happen on other devices that I have tried. Now if I take this exact reference and paste it into my browser, there is no certificate error because the certificate has been updated past the date when it was once an issue. So I assume that somehow an old certificate is being used on my Nexus 5X to access this particular website.

So several questions really:

1. How can old certificates get used by Webview?

2. How can I locate and delete such certificates? (I've tried using WebViewExtras1.ClearCache(True))

3. How can I get the details of the certificate being used?

PS Current user agent details:

Mozilla/5.0 (Linux; Android 8.0.0; Nexus 5X Build/OPR6.170623.023; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/62.0.3202.84 Mobile Safari/537.36

Derek

 

[Erel]

It will probably not help by worth a try:

Dim jo As javaObject = WebView1
jo.RunMethod("clearSslPreferences", null)

Other than that I don't see any other related API: https://developer.android.com/reference/android/webkit/WebView.html#clearSslPreferences()

 

[Derek Johnson]

It will probably not help by worth a try:

Dim jo As javaObject = WebView1
jo.RunMethod("clearSslPreferences", null)

Other than that I don't see any other related API: https://developer.android.com/reference/android/webkit/WebView.html#clearSslPreferences()

It didn't change things, but it was worth trying and for thanks for the suggestion.