[Bug]: Unable to get local issuer certificate error when setting up Android client 1.6.0

[tylerpriice]

Summary

When entering the URL and token into a fresh Android install of Defguard the error "Device registration failed! Error DioException [unknown]: null Error: HandshakeException: Handshake error in client (OS Error: CERTIFICATE_VERIFY_FAILED: unable to get local issuer certificate(handshake.cc:295))" is produced. The device does not get initialized in the client.

Steps to reproduce

1. Generate device config for user in admin portal.
2. Download Defguard Android client from Google Playstore.
3. Copy URL and token to client. Clicking "add instance" will output the error.

Expected behavior

Instance gets added to Android client.

Actual behavior

When clicking "add instance" the error "Device registration failed! Error DioException [unknown]: null Error: HandshakeException: Handshake error in client (OS Error: CERTIFICATE_VERIFY_FAILED: unable to get local issuer certificate(handshake.cc:295))" is produced. No instance is added.

Defguard version

Core: 1.6.5, Gateway: 1.6.5, Edge: 1.6.5, Mobile client: 1.6.0

Environment details

Core: 24.04, Gateway: 24.04, Edge: 24.04, Mobile: Android 14

Deployment / install method

One-line script

Relevant logs / output

Relevant configuration (redacted)