Open apfelnutzer opened 4 hours ago
... a quick workaround could be to allow login in anyway - currently the login button is deactivated.
Hi!
See https://github.com/paulgessinger/swift-paperless/issues/109 for previous discussion on this topic.
It's possible to work with self signed certificates using the OS trust store.
Certificates ostensibly need to use a CA, rather than using the CA cert directly, their lifetime needs to be short enough, and they need to be properly configured for your domain.
Anything else leads to certificate errors, which I can't really provide better error messaging for.
Safari seems to be slightly more tolerant towards faulty configurations (see the other issue) but it's definitely possible to get this to work with the current version of the app.
Not allowing certificates rejected by the OS networking layer is a security decision, and I currently do not intend to change this.
I host paperless ngx locally and use Traefik to provide https access to it. Everything works fine in the browser, but the app does not accept my self signed certificate although I imported and trusted it on my iPhone.