Error Reason: 2001; App does not work anymore

[gagamail]

EDIT: Corona-Warn-App Open Source Team

Solved: See FAQ:

• DE https://www.coronawarn.app/de/faq/#cause2001
• EN https://www.coronawarn.app/en/faq/#cause2001
• In-App error notification will be linked to FAQ

---

ORIGINAL POST

Avoid duplicates

• Bug is not mentioned in the FAQ
• Bug is specific for Android only, for general issues / questions that apply to iOS and Android please raise them in the documentation repository
• Bug is not already reported in another issue

Describe the bug

When I open the App I immediatley get the error message "Ursache: 2001 an error occured while trying to establish a secure connection to the server". This results in a not working App. Deinstalling and restarting did not help. Last confirmed working of the App was on July, 20th, first time I saw the error was on July, 23rd. In between I did not start the App.

Expected behaviour

The App should work

Steps to reproduce the issue

Starting the App is enough, I did not do anything specific and I did not change anything on my own on my Smartphone since the App is not working anymore.

Technical details

• Mobile device: Samsung Galaxy Note 8 SM-N950F
• Android version: 9, July security patch
• CWA version: 1.1.1

Possible Fix

No idea

Additional context

My first thought was that Blokada changed something. Deactivating Blokada did not help. And even if so I am not willing to deactivate it completely (CWA is on the Allowed Apps list) as the App worked with it before.

---

Internal Tracking ID: EXPOSUREAPP-10944

[SebastianWolf-SAP]

Thanks for the report. We've also been getting similar reports from Play Store comments. Reports from there show that

• it seems to be unrelated from rooting/modifications, personal firewalls or similar measures
• it seems to be independent from the used network (wi-fi or cellular)
• it might be related to the latest update 1.1.1 as some people report that it occurs only since the latest update

Quotes from Play Store:

Initially, but for several days (even after reinstallation) a "Cause 2001" error worked: a secure connection to the server could not be established. EDIT: The error suddenly appeared / without changing the network, is in all WLAN networks, and also in mobile data mode. EDIT 2: the device was not modified and no firewall was installed. Resetting the network settings did not solve the problem

Until the update - all errors correcting - the app ran really well. No error message or similar. However, since the update: Error: CAUSE 2001. Rien ne va plus! No more risk assessment. This is how the app helps me - especially when the number of cases increases again. Please troubleshoot here. Then I also like to upgrade.

Unfortunately now without function. Something has been made worse, now it only shows that something went wrong. Cause of error 2001. Under "Details" there follows a cryptic error message. Android 9, Samsung S8. No blockers active. Own WiFi without restrictions. And before I get any tips like updating: I have installed version 1.5. Theoretically should correct errors, but in practice does the opposite. I uninstalled the app first.

After the update to 1.1.1 only error message 2001 comes. Even a restart of the cell phone brought no improvement. Risk determination is active, risk status is only displayed after the error message. Cause 2001 is displayed. Something went wrong. I am logged in to my own WLAN and have not made any changes to the network. Even a new installation did not bring any improvement. After the risk determination has been switched off, the error message disappears.

A different error after each update. Now after the latest update on 07/25/2020 "Cause 2001" on Huawei P8 Android 6.0. an error occured while trying to establish a secure connection to the server. Tried 3 different WLANs as well as cell phones. All unsuccessful. With another device - Samsung J3 - it works in the same networks.

The following error message appears when the APP is called: CAUSE: 2001 Something went wrong an error occured while trying to establish a secure connection to the server What can I do? Thank you for your help_______________________________ Edit: Unfortunately a restart does nothing to change this behavior. ___________________________________________ Edit: The error has occurred since the update to version 1.1.1. Lenovo Moto G5. Android 8.0.1, Google Play Store 21.0.17-all, services 20.24.14

The following error message appears when the APP is called: CAUSE: 2001 Something went wrong an error occured while trying to establish a secure connection to the server What can I do? Thank you for your help. The device has been restarted several times since it first appeared. The error always comes reliably since the update to version 1.1.1

Reported devices (all on CWA 1.1.1):

• moto g(6) (ali_n), Android 9
• OnePlus5, Android 10
• Huawei P30 Pro (HWVOG), Android 10
• Huawei P8 Android 6.0
• Galaxy S8 (dreamlte), Android 9
• HTC U11 (htc_ocndugl), Android 9
• Moto G (5th Gen) (cedric), Android 8.1

As reports are increasing, we will address this with high priority to product management to prioritize analyses and a fix.

Mit freundlichen Grüßen/Best regards,
SW
Corona Warn-App Open Source Team

[thomasaugsten]

@gagamail Can you please contact me directly to provide more details about the network setup

[vaubaehn]

@thomasaugsten @gagamail
Hi, gagamail listed Android July Patch for his device settings.
The July Patch also consists of Qualcomm fixes that seem to affect wifi.
May there be any (timely) relation to the July Patch?
https://source.android.com/security/bulletin/2020-07-01?hl=en

[gagamail]

@thomasaugsten @gagamail
Hi, gagamail listed Android July Patch for his device settings.
The July Patch also consists of Qualcomm fixes that seem to affect wifi.

The SM-N950F is the version with the Samsung Exynos Processor and not Qualcomm Snapdragon. So I guess it can't be related?

May there be any (timely) relation to the July Patch?
https://source.android.com/security/bulletin/2020-07-01?hl=en

According to the logfiles I installed the last upgrade (i don't think there was any other upgrade besides the July Patch) on July, 28th which would mean it already did not work without July Patch.

[DerPlankton13]

Hi all,
I am effected by this bug as well (last working was the 20th July as well).
Since the error message gives more details hinting in the direction of the error, I wanted to provide some information from it. Unfortunately I am not allowed to take a screenshot of the error message and will thus not type the whole error stack.
The full error message starts with:

Etwas ist shiefgelaufen.
Ursache:
de.rki.coronawarnapp.exception.CwaWebSecurityException: an error occurred while trying to establish a secure connection to the server

And it ends with:

Caused by: java.securit.cert.CertPathValidatorException: Trust anchor for certification path not found.

I hope this helps :)

Cheers

[vaubaehn]

Hi @gagamail , thanks for clearing up!

According to the logfiles I installed the last upgrade (i don't think there was any other upgrade besides the July Patch) on July, 28th which would mean it already did not work without July Patch.

So, any problems with 2001 related to that patch can be completely excluded then.
And you are right, Qualcomm for that model is US market only. Anyway, there were also some Samsung internal fixes and Android kernel fixes. However, doesn't play any role here.

[vaubaehn]

Hi @DerPlankton13 , thanks for your report!
You mentioned that app was working well until July 20th.
Interestingly, around July 21st/22nd, CWA-server 1.2.0 was released...
May there be any correlation, @thomasaugsten @EvgeniiSkrebtcov ?

[thomasaugsten]

Hi,
the issues is the app cannot verify the ssl certificate of the diagnosis key server (Introduced with v1.1.1). This can caused by multiple things.

1. Date/Time is not correct.
2. Android Root/CA certificates are not up to date
3. Antivirus App is breaking the ssl chain
4. Network/Firewall tool like pi-hole is breaking the ssl chain

Maybe you can provide a screenshot of
Open Settings
Tap “Security & location”
Tap “Encryption & credentials”
Tap “Trusted credentials.”

[vaubaehn]

maybe any problem in server certificate pinning?

[gagamail]

1. Date/Time is not correct.

Is correct.

2. Android Root/CA certificates are not up to date

I have one certificate which is not up to date. Thats an old Deutsche Telekom Root CA 2 which I needed in the past for WLAN access.

3. Antivirus App is breaking the ssl chain

No Antivirus App installed

4. Network/Firewall tool like pi-hole is breaking the ssl chain

In my home WLAN I have a pi-hole, but the App also does not work outside of this WLAN. On the smartphone I have Blokada which I completely deactivated. Before July 21st the App worked with both activated.

[thomasaugsten]

@gagamail Can you remove the old CA and test again?