[GH-ISSUE #997] Android WebDAV unable to connect E17 - Self Signed Cetificate #652

Closed
opened 2026-02-25 22:37:44 +03:00 by kerem · 4 comments
Owner

Originally created by @elmodor on GitHub (Nov 17, 2021).
Original GitHub issue: https://github.com/floccusaddon/floccus/issues/997

Describe the bug

I'm unable to connect to my webdav on the android app.
I believe the issue is that I use a self signed certificate on my webdav server for https. The certificate is installed as "user" certificate in my android system. However, the default setting for Android apps is to allow only "system" certificates. For "user" certificates to be accepted, this has to be stated in the AndroidManifest.xml. I recently found this out because I run into this issue in a different app.

To Reproduce

Steps to reproduce the behavior:

  1. Spin up a caddy server as reverse proxy and redirect to the webdav server
  2. Spin up a webdav server
  3. Install the root.crt form caddy in the android phone
  4. Try to connect to the webdav server in the android app

Expected behavior

Able to connect to the webdav server with a self signed certificate.

Screenshots

Desktop

Android

  • Floccus 4.8.4

Server

  • OS: Debian 10
  • Webdav Server

Debug log

  • Debug log provided

Additional context

The "behavior" is described here:
https://developer.android.com/training/articles/security-config#base-config
https://developer.android.com/training/articles/security-config#certificates

A fix would be to add this to the AndroidManifest.xml:

<network-security-config>
    <base-config cleartextTrafficPermitted="true">
        <trust-anchors>
           <certificates src="system" />
           <certificates src="user" />
        </trust-anchors>
    </base-config>
</network-security-config>

This is a MR that fixed this issue in a different app where I found the same problem:
github.com/advplyr/audiobookshelf-app@44f535020d

This allows that certificates added by the user to the android system are allowed to be used to verify the https certificates.

Originally created by @elmodor on GitHub (Nov 17, 2021). Original GitHub issue: https://github.com/floccusaddon/floccus/issues/997 ### Describe the bug I'm unable to connect to my webdav on the android app. I believe the issue is that I use a self signed certificate on my webdav server for https. The certificate is installed as "user" certificate in my android system. However, the default setting for Android apps is to allow only "system" certificates. For "user" certificates to be accepted, this has to be stated in the AndroidManifest.xml. I recently found this out because I run into this issue in a different app. ### To Reproduce Steps to reproduce the behavior: 1. Spin up a caddy server as reverse proxy and redirect to the webdav server 2. Spin up a webdav server 3. Install the root.crt form caddy in the android phone 4. Try to connect to the webdav server in the android app ### Expected behavior Able to connect to the webdav server with a self signed certificate. ### Screenshots - ### Desktop - ### Android - Floccus 4.8.4 ### Server - OS: Debian 10 - Webdav Server ### Debug log - [ ] Debug log provided ### Additional context The "behavior" is described here: https://developer.android.com/training/articles/security-config#base-config https://developer.android.com/training/articles/security-config#certificates A fix would be to add this to the AndroidManifest.xml: ``` <network-security-config> <base-config cleartextTrafficPermitted="true"> <trust-anchors> <certificates src="system" /> <certificates src="user" /> </trust-anchors> </base-config> </network-security-config> ``` This is a MR that fixed this issue in a different app where I found the same problem: https://github.com/advplyr/audiobookshelf-app/commit/44f535020d591ee56038c6d7ab9792ff29ce7445 This allows that certificates added by the user to the android system are allowed to be used to verify the https certificates.
kerem 2026-02-25 22:37:44 +03:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@nagyrobi commented on GitHub (Nov 30, 2021):

I have the same problem. Please add support for self signed certs.

<!-- gh-comment-id:983058471 --> @nagyrobi commented on GitHub (Nov 30, 2021): I have the same problem. Please add support for self signed certs.
Author
Owner

@marcelklehr commented on GitHub (Dec 6, 2021):

Can you confirm, whether this works in the latest version?

<!-- gh-comment-id:986960575 --> @marcelklehr commented on GitHub (Dec 6, 2021): Can you confirm, whether this works in the latest version?
Author
Owner

@elmodor commented on GitHub (Dec 6, 2021):

I can confirm that it works now, thank you very much ❤️
Had to uninstall and install the app again for it to work.

<!-- gh-comment-id:986986898 --> @elmodor commented on GitHub (Dec 6, 2021): I can confirm that it works now, thank you very much :heart: Had to uninstall and install the app again for it to work.
Author
Owner

@github-actions[bot] commented on GitHub (Mar 20, 2023):

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

<!-- gh-comment-id:1476409649 --> @github-actions[bot] commented on GitHub (Mar 20, 2023): This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/floccus#652
No description provided.