title: Certificate issue: SSL page brings up "you need to set a lock screen pin or password before you can use credential storage" on Android
body: <p>We've setup the certificates on our server and when requesting <a href="https://www.ourserver.org" rel="noreferrer">https://www.ourserver.org</a>, Android (whatever the browser used) shows a little popup </p>
  
  <pre><code>You need to set a lock screen pin or password 
  before you can use credential storage
  </code></pre>
  
  <p>Which is wrong, it seems that the phone is trying to register that certificate..?</p>
  
  <p><strong>It does happen only on Android so far</strong> it's fine on iPhone and desktop browsers</p>
  
  <p>our Stunnel config:</p>
  
  <pre><code>[www.ourserver.org]
    cert = /etc/stunnel/certs/www.ourserver.org.crt
    key = /etc/stunnel/keys/www.ourserver.org.key
    CAfile = /etc/stunnel/certs/www.ourserver.org.intermediate.crt
    accept  = 10.10.54.2:9443
    connect = 10.10.54.2:9444
    verify=1
    xforwardedfor = yes
    TIMEOUTclose = 0
  </code></pre>
  
  <p><code>cert</code> file is issued by RapidSSL. The intermediate <code>CAfile</code> contains both: the intermediate certificate first and <code>cert certificate</code>.</p>
  
  <p>Any idea of what went wrong on our certificate config ?</p>
  
  <p>If I go through the process of securing my phone with a lock screen, accessing the same page then shows</p>
  
  <pre><code>No certificates found
  
  The app Chrome has requested a certificate. 
  Choosing a certificate will let the app use this 
  identity with servers now and in the future. The 
  app has identified the requesting server as (...), 
  but you should only give the app access to the 
  certificate if you trust the app. You can install 
  certificates from a PKCS#12 file with a .pfx or a 
  .p12 extension located in external storage."
  </code></pre>