search

quexten / goldwarden

A feature-packed Bitwarden compatible desktop client
MIT License
554 stars 17 forks source link

Docs about self-signed certificated #208

Open ai opened 1 month ago

ai commented 1 month ago

I have Valutwarden server on passwords.local with self-signed certificate.

I add this certificate to my Fedora 40 system by:

sudo cp sitniks.crt /etc/pki/ca-trust/source/anchors/sitniks.pem
sudo update-ca-trust

curl works:

$ curl https://passwords.local
<!doctype html><html class="theme_light"><head><meta charset="utf-8"/><meta name="viewport" content="width=1010"/><meta name="theme-color" content="#175DDC"/><title page-title>Vaultwarden Web</title>…

But when I try to login in GoldWarden I got Traffic looks unusual after I enter password:

Captura desde 2024-05-09 18-51-04

I assume that GoldWarden doesn’t see my certificate:

  1. What is the right way to add it?
  2. Maybe we should add note to README.md or wiki
quexten commented 1 month ago

Unusual traffic error is very weird and should only happen on the official instance, not on local vaultwarden instances. Need to figure out what's going on.

ai commented 1 month ago

Can I collect some debug information? I run Gold Warden in terminal, but output was small without useful any detail.

vinaysb commented 1 month ago

This is happening to me too

ai commented 1 month ago

How I can collect more debug data? Maybe there is some verbose mode?

ai commented 1 month ago

I also tried to set client ID and client secret (from API key), but got the same Unusual Traffic error

quexten commented 1 month ago

Your self hosted server was never being used, due to a bug in the GUI code, that part should be fixed here: #213 Not sure yet about whether self-signed certs are accepted or not, you can either try the latest flatpak from the CI pipeline or wait for next release.

quexten commented 1 month ago

0.3.2 is out now, should be on FlatHub within a few hours. Please try again there.

ai commented 1 month ago

Thanks! But now I get Failed to set server — The server you entered is invalid.

I use https://passwords.local.

This URL works in Firefox and with curl.

K1kc4 commented 2 weeks ago

Having similar problem ,when i try to login with cli i am getting tls: failed to verify certificate: x509: certificate signed by unknown authority . I have CA in my /etc/ssl/certs and it works without problems with browser/curl/bitwarden app.

OS is Fedora 40. Have tried both (flatpak and rpm).