can't build ANdroid mobile app getting error

[Babu Ajay]

Hello

Here is my forum website.
Even though it runs on https, i still get the error.
<<Incorrect URL scheme. You must use a secure server for IOS applications. See here>>

here is my forum link:
https://www.kannadagrahakarakoota.org/forums/

[Wayne Luke]

You need to access your site via HTTPS and have a proper SSL Certificate assigned to your domain. Wildcard SSL for an entire server will not work.

Your certifcate must meet the requirements from the linked page within Apple's documentation:

Requirements for Connecting Using ATS


With App Transport Security (ATS) fully enabled, the system requires that your app’s HTTP connections use HTTPS and that they satisfy the following security requirements:

• The X.509 digital server certificate must meet at least one of the following trust requirements:
  • Issued by a certificate authority (CA) whose root certificate is incorporated into the operating system
  • Issued by a trusted root CA and installed by the user or a system administrator
• The negotiated Transport Layer Security (TLS) version must be TLS 1.2. Attempts to connect without TLS/SSL protection, or with an older version of TLS/SSL, are denied by default.
• The connection must use either the AES-128 or AES-256 symmetric cipher. The negotiated TLS connection cipher suite must support perfect forward secrecy (PFS) through Elliptic Curve Diffie-Hellman Ephemeral (ECDHE) key exchange, and must be one of the following:
  • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
  • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
  • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
  • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
• The leaf server certificate must be signed with one of the following types of keys:
  • Rivest-Shamir-Adleman (RSA) key with a length of at least 2048 bits
  • Elliptic-Curve Cryptography (ECC) key with a size of at least 256 bits
  
  In addition, the leaf server certificate hashing algorithm must be Secure Hash Algorithm 2 (SHA-2) with a digest length, sometimes called a “fingerprint,” of at least 256 (that is, SHA-256 or greater).

The requirements listed in this section are current as of this document’s publication date, with stricter requirements possible in the future. Changes to these requirements will not break app binary compatibility.

The most common issue is not using TLS 1.2.

[Babu Ajay]

Thank you for clarification Wayne.
Can you pls suggest where we can buy this SSL Certificate or which is suggested and works without any issues with vBulletin.
Of course vBulletin is not responsible to provide support on it, but want to know which all works seemlessly with vBulletin so that we can purchase the same.
any pointers or link to go through it would be helpful.

Thanks
Ajay

[Wayne Luke]

Buying your SSL certificate is a question better suited towards your Hosting Provider. They may even offer free certificates from a provider like Let's Encrypt.

SSL Encryption is actually done at the web server level. In this regard vBulletin is agnostic. It simply handles requests from the Web Server and then provides the resulting data. The way things work, vBulletin only deals with decrypted data.

[Babu Ajay]

Hi Thanks for the response.
I did purchase comodo SSL from here.
https://www.nettigritty.com/sslcertificate.php
and it was applied as well to my site, but i still get that error as originally mentioned.

https://www.kannadagrahakarakoota.org/forums/

[Babu Ajay]

Also as per requirment these are enabled cipher suites.

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xC030) 256 ECDH 256-bit (P-256)
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xC028) 256 ECDH 256-bit (P-256)
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xC02F) 128 ECDH 256-bit (P-256)
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xC027) 128 ECDH 256-bit (P-256)

but still the original error persists. pls advise.

[Wayne Luke]

You had http entered into the Mobile Publisher. You did not tell it to use https. I've corrected this issue for you. You will need to upload the missing images required in order to continue.

[Babu Ajay]

Thank you wayne.
You mean all 4 images need to be uploaded right?
1) Desktop App store
2) Iphone App icon
3) Android App icon
4) Android draw screen

only then we can proceed?

[Wayne Luke]

You need to upload the two iOS images listed on the final screen. The Mobile Publisher is building both an IOS and an Android app. The images are required by Apple.

[Babu Ajay]

Hello
I am trying to upload the apk to android store and getting below error.

Your app has an apk with version code 1903070858 that requests the following permission(s): android.permission.CAMERA,android.permission.READ_PHONE_STATE. Apps using these permissions in an APK are required to have a privacy policy set.

Could you pls advise.

Thanks in advance.

[Wayne Luke]

You need to create a Privacy Policy on your website and provide that to Google during the submission process. This is a Google requirement that we have no control over.