Describe the bug
For the last few weeks, the media in posts stopped showing on Pachli. I get the blured version in the timeline, and when I tap on it, it's all black.
Profile pictures only show the default avatar for all accounts.
To Reproduce
Steps to reproduce the behavior:
- Go to the Home timeline
- Find a post with an image/video (it is blurred)
- Tap the image/video (it is black)
- Tap on Share
- See error: "Could not download ... network error ... CertPathValidatorException" (fuller message below)
Expected behavior
I expect the image/video to show a clear preview in the Home timeline.
Also for the picture/video to display correctly when I tap it
Screenshots or video
This is a screenshot of the error when I tap on Share
This seems to be the full error
"java.io.IOException: java.util.concurrent.ExecutionException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found."
Links
It is happening on all posts in my timeline, but as a working example:
https://mastodon.org.uk/@bigben/116132573841272860
which fails to show/download the corresponding picture from https://nfts.freeradical.zone/cache/media_attachments/files/116/132/573/978/051/418/original/f968dba3f18fdfab.jpg
Versions
When this started happening, I was still on an older version of pachli (2.?)
I then updated to the latest I could find a few days ago (3.3.0) and the incorrect behaviour remains.
I am running /e/OS 3.5 (based on Android 14). which is the latest /e/OS version available.
Additional context
The admin of my instance (freeradical.zone) recognised the issue from other users having the same problems: it's an SSL handshake error because Sectigo, their SSL certificate provider, changed their root certificate in December 2025 and the old root is not supported by older versions of Android.
However: I can see the image correctly via the browser on my phone by copying the link to the image then share then Open URL via Browser. So, as far as I can see/understand, it's not an issue with the OS itself.
I have also found a similar issue reported on Tusky. Of course, the team at Pachli might have different views on how to solve the problem, but I mention it as an example of what might be done, i.e. import the old certs into the app: https://codeberg.org/tusky/Tusky/issues/5423
Affirmation
Yes: I have checked other issues for this project (open and closed) and I cannot find one that matches the problem I am reporting.
Describe the bug
For the last few weeks, the media in posts stopped showing on Pachli. I get the blured version in the timeline, and when I tap on it, it's all black.
Profile pictures only show the default avatar for all accounts.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
I expect the image/video to show a clear preview in the Home timeline.
Also for the picture/video to display correctly when I tap it
Screenshots or video
This is a screenshot of the error when I tap on Share
This seems to be the full error
"java.io.IOException: java.util.concurrent.ExecutionException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found."
Links
It is happening on all posts in my timeline, but as a working example:
https://mastodon.org.uk/@bigben/116132573841272860
which fails to show/download the corresponding picture from https://nfts.freeradical.zone/cache/media_attachments/files/116/132/573/978/051/418/original/f968dba3f18fdfab.jpg
Versions
When this started happening, I was still on an older version of pachli (2.?)
I then updated to the latest I could find a few days ago (3.3.0) and the incorrect behaviour remains.
I am running /e/OS 3.5 (based on Android 14). which is the latest /e/OS version available.
Additional context
The admin of my instance (freeradical.zone) recognised the issue from other users having the same problems: it's an SSL handshake error because Sectigo, their SSL certificate provider, changed their root certificate in December 2025 and the old root is not supported by older versions of Android.
However: I can see the image correctly via the browser on my phone by copying the link to the image then share then Open URL via Browser. So, as far as I can see/understand, it's not an issue with the OS itself.
I have also found a similar issue reported on Tusky. Of course, the team at Pachli might have different views on how to solve the problem, but I mention it as an example of what might be done, i.e. import the old certs into the app: https://codeberg.org/tusky/Tusky/issues/5423
Affirmation
Yes: I have checked other issues for this project (open and closed) and I cannot find one that matches the problem I am reporting.