search

lamarios / clipious

Invidious client for android
GNU Affero General Public License v3.0
968 stars 32 forks source link

Trust self-signed SSL certs #620

Closed ddscentral closed 4 weeks ago

ddscentral commented 4 weeks ago

Is your feature request related to a problem? Please describe. I have an private Invidious instance without public access that I wish to use SSL with. However, currently it's not possible to use it in Clipious as there's no way to trust self-signed certs.

Describe the solution you'd like Ability to trust the currently used SSL certificate eg. by storing it's modulus (that is, pinning it to a specific instance). This would not compromise SSL while allowing self-signed certificates to be used. There are examples of this, e.g. Proxmox VE Backup server client.

Describe alternatives you've considered Use a "real" hostname (something which can be resolved publicly) mapped to an internal IP and use a publicly trusted certificate for SSL. This is doable but very cumbersome to setup due to the way my instance is hosted.

Additional context

lamarios commented 4 weeks ago

The SSL verification skip does not work for you ?

ddscentral commented 4 weeks ago

I cannot add the server, the app says the server is invalid and shows a certificate error. Is there an option already ? I did look but I could not find one.

lamarios commented 4 weeks ago

Screenshot_20241016-184252~2

ddscentral commented 4 weeks ago

Silly me, the option was right above the server list, didn't notice it. Sorry for bothering you.

lamarios commented 4 weeks ago

Yeah it is not an ideal way of doing this I have to agree. But it was the quickest to implement last time.

Glad that it works now.