x0b / rcx

Rclone for Android
https://x0b.github.io
GNU General Public License v3.0
1.72k stars 155 forks source link

Mutual tls / client certificate authentication #243

Open ippocratis opened 1 year ago

ippocratis commented 1 year ago

If this is your first feature request, read our contribution guidelines.


Pre-Submission checklist

What version of RCX are you using (About -> App version)?

1.12.2

What problem are you trying to solve?

I have my webdav server configured with mutual tls and it awaits for a client certificate. I have installed the p12 cert on my android device and it can be picked from browsers and compatible apps like e.g. davx5

What should RCX be able to do differently to help with this problem?

Talk with the android keystore and pickup client certificates when it is required

ippocratis commented 1 year ago

More on this

I tried to import a config

Rclone documentation link for webdav mounts States that:

If you want you can serve over https. You will need to supply the --cert and --key flags. If you wish to do client side certificate validation then you will need to supply --client-ca also. --cert should be a either a PEM encoded certificate or a concatenation of that with the CA certificate. --key should be the PEM encoded private key and --client-ca should be the PEM encoded client certificate authority certificate.

My config looks like

[webdav]
type = webdav
url = https://my.webdav.url
vendor = other
user = username
pass = password
client-ca = /path/to/cert_name-CA.crt
client-cert = /path/to/cert_name.crt
client-key = /path/to/cert_name.key

The config imports OK but the webdav does not mount