Home Assistant certificate authority is not trusted

Mobile Apps Home Assistant Companion for Android
1

I’m sure this has been asked numerous times, but I’ve searched & searched and cannot find a solution that works for me:

  1. I used to have a .xyz domain that I used with the Home Assistant Cloudflare AddOn for remote access over a Cloudflare tunnel. It worked brilliantly.
  2. My .xyz domain expired and I bought a new domain
  3. I created a new Cloudflare tunnel & configured it with the new domain and it works fine over a Chrome webbrowser, but
  4. I cannot get the Home Assistant Companion App to connect over the tunnel. It keeps telling me “Unable to connect to Home Assistant. The Home Assistant certificate authority is not trusted”

Now, from Google, I understand something about Chrome & Android Apps having two different certificate setups, but I’m not entirely sure what this means? Where are they?

I don’t recall having to do anything with certificates the first time I setup Home Assistant Companion App with my original domain?? I just configured the AddOn, opened the URL in the AddOn log & it created the Cloudflare tunnel & job done.

Do I have to download a certificate from somewhere? In Cloudflare dashboard, I don’t see anything domain/tunnel related that allows me to download a certificate that I can install somewhere on my phone??

My tunnel is working, I can connect using my new .xyz domain over Chrome, but not using the Home Assistant Companion App.

Anyone able to explain that last part of the jigsaw that I’m not understanding??

2

The other thing I’ve noticed:

If I logout of Home Assistant Companion App & delete the app data and then try to connect over WiFi on my local LAN, it searches for Home Assistant Servers and offers me my old .xyz domain for remote access. Where is it picking that up from? It must be on my Home Assistant server somewhere, but where?

3

Sorry, I think I found my problem - my own stupid fault :grimacing:

When on 4G data, my phone switches to using NextDNS as my DNS provider, and in there I had the default setting to:

“Block Newly Registered Domains (NRDs)”

and presumably as my new .xyz domain was only registered today, it’s being blocked (I think anyway, it seems to be working)

I’ll leave this Post in case it helps anyone else Googling.