[GH-ISSUE #198] Can't connect to server from IOS app when https is enabled #101

Closed
opened 2026-03-03 01:24:54 +03:00 by kerem · 11 comments
Owner

Originally created by @ghost on GitHub (Sep 24, 2018).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/198

Get "There is a problem connecting to the server"

I am using 1.2.0 docker container with ROCKET_TLS and ROCKET_PORT = 443

Originally created by @ghost on GitHub (Sep 24, 2018). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/198 Get "There is a problem connecting to the server" I am using 1.2.0 docker container with ROCKET_TLS and ROCKET_PORT = 443
kerem 2026-03-03 01:24:54 +03:00
Author
Owner

@mprasil commented on GitHub (Sep 24, 2018):

Hi can you paste the docker logs here? Just the starting part that prints the configuration used would be helpful. Also can you see any requests in the logs when you try to use the iOS app? Does the Vault interface work for you?

<!-- gh-comment-id:424024375 --> @mprasil commented on GitHub (Sep 24, 2018): Hi can you paste the docker logs here? Just the starting part that prints the configuration used would be helpful. Also can you see any requests in the logs when you try to use the iOS app? Does the Vault interface work for you?
Author
Owner

@ghost commented on GitHub (Sep 24, 2018):

Vault web interface works when opening in Chrome desktop but can;t open from ios and ios mobile bitwarden app

my server ip is https://192.168.0.19

https://pastebin.com/raw/AtH6hHwg

<!-- gh-comment-id:424026717 --> @ghost commented on GitHub (Sep 24, 2018): Vault web interface works when opening in Chrome desktop but can;t open from ios and ios mobile bitwarden app my server ip is https://192.168.0.19 https://pastebin.com/raw/AtH6hHwg
Author
Owner

@mprasil commented on GitHub (Sep 24, 2018):

It looks like it starts with proper configuration. Are there any requests appearing in the logs when you try to use the iOS app? Do I understand right that you can't even use the Vault interface using Safari on iOS device?

<!-- gh-comment-id:424028633 --> @mprasil commented on GitHub (Sep 24, 2018): It looks like it starts with proper configuration. Are there any requests appearing in the logs when you try to use the iOS app? Do I understand right that you can't even use the Vault interface using Safari on iOS device?
Author
Owner

@ghost commented on GitHub (Sep 24, 2018):

There is no requests in logs when trying to access from iOS.
I bet this is a problem with self signed cert on iOS.
"Do I understand right that you can't even use the Vault interface using Safari on iOS device?" Yes, exactly
My cert is:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

You can decode it here: https://www.sslshopper.com/certificate-decoder.html

Can you provide proper command to create self signed certificate for my docker container?

<!-- gh-comment-id:424029892 --> @ghost commented on GitHub (Sep 24, 2018): There is no requests in logs when trying to access from iOS. I bet this is a problem with self signed cert on iOS. "Do I understand right that you can't even use the Vault interface using Safari on iOS device?" Yes, exactly My cert is: ``` -----BEGIN CERTIFICATE----- MIIDtTCCAp2gAwIBAgIJANBGXG6c3YAPMA0GCSqGSIb3DQEBCwUAMEUxCzAJBgNV BAYTAlBMMRMwEQYDVQQIEwpTb21lLVN0YXRlMSEwHwYDVQQKExhJbnRlcm5ldCBX aWRnaXRzIFB0eSBMdGQwHhcNMTgwOTAxMTYwMzIxWhcNMTkwOTAxMTYwMzIxWjBF MQswCQYDVQQGEwJQTDETMBEGA1UECBMKU29tZS1TdGF0ZTEhMB8GA1UEChMYSW50 ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAssICQ7RrRjJAxy/FKm5ccZlwFV5PgYgzuaMa2SPEMgpkLhmMEjoWrb0N oqmcJEX8Gm4fAosY6Xu2pFXiCnfYdX2wi8KPICUgUuYqg4j4DiIrgbdp1vKVr4lQ 0Cc13TqsXAs+r3dxV3yuUSd/ZEpHNJe7oGkaQMwKTPYi5ny9kmb0csPBKLt8Bor0 vHMeiT+ipQnc9EadudqiC9S/SeMG4NHAQp7cpTu4pSpprDJa0hDXKsJOPrAzYZq4 4xQ9O02iGU3QA51QyxU7yLjRczlIXHQ6uzGxsP4SAW/CO0IfstuW3fZOALJ3ITCe /HAEVNMnNy7VNRT1loG/azKYJMb0BQIDAQABo4GnMIGkMB0GA1UdDgQWBBR/WGkT meKdAEtjSAEEfLLI/UkSxzB1BgNVHSMEbjBsgBR/WGkTmeKdAEtjSAEEfLLI/UkS x6FJpEcwRTELMAkGA1UEBhMCUEwxEzARBgNVBAgTClNvbWUtU3RhdGUxITAfBgNV BAoTGEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZIIJANBGXG6c3YAPMAwGA1UdEwQF MAMBAf8wDQYJKoZIhvcNAQELBQADggEBAJzHHHkmcQuvSwp+dYh7H0OI6evSlE6Z nIRWu1ebyzRL2+N/KtdNZnXZg6wvJPNVAfHIQNNWP0gd8MV+LMT2+X4zk86zooNl J7RESnH9wq4U3Tq5T2rvtxSLF+4oZUvUn10pbkxjAmQY7OHftB1aCQ3fRMygyccF 6qsavEr5qhrGPUBt8LfRjTAI4V3tg8+C0v/AqNUDRxolGBJLh7kkLj6DZw1bI6Q1 KJodmtnmZIiwpMcLlf53BianmFZK4LXtMPunbNBd/3fwsI7t62ZUTb2XvijpHpss hQqNf7lu+/6VLtSc8sGUS5LAVy58hc+w7WffelHl3tgS0KWdDZa6oqQ= -----END CERTIFICATE----- ``` You can decode it here: https://www.sslshopper.com/certificate-decoder.html Can you provide proper command to create self signed certificate for my docker container?
Author
Owner

@dani-garcia commented on GitHub (Sep 24, 2018):

I'm using bitwarden_rs on iOS and it works for me. I'm running the server directly (without docker), behind my own domain and with let's encrypt certs. Maybe iOS blocks self signed certs?

<!-- gh-comment-id:424031273 --> @dani-garcia commented on GitHub (Sep 24, 2018): I'm using bitwarden_rs on iOS and it works for me. I'm running the server directly (without docker), behind my own domain and with let's encrypt certs. Maybe iOS blocks self signed certs?
Author
Owner

@ghost commented on GitHub (Sep 24, 2018):

I think there is a problem with self signed certs on iOS, can't generate the proper one.
openssl req -x509 -newkey rsa:2048 -sha256 -nodes -keyout key.key -out cert.crt -subj "/CN=192.168.0.19" -days 3650
This command generate cert and key but still cant connect on iOS

<!-- gh-comment-id:424043942 --> @ghost commented on GitHub (Sep 24, 2018): I think there is a problem with self signed certs on iOS, can't generate the proper one. `` openssl req -x509 -newkey rsa:2048 -sha256 -nodes -keyout key.key -out cert.crt -subj "/CN=192.168.0.19" -days 3650 `` This command generate cert and key but still cant connect on iOS
Author
Owner

@mprasil commented on GitHub (Sep 24, 2018):

Can you add that cert as trusted on your iOS device?

<!-- gh-comment-id:424048726 --> @mprasil commented on GitHub (Sep 24, 2018): Can you add that cert as trusted on your iOS device?
Author
Owner

@ghost commented on GitHub (Sep 24, 2018):

I can't. No option to install it when opening from mail

<!-- gh-comment-id:424049640 --> @ghost commented on GitHub (Sep 24, 2018): I can't. No option to install it when opening from mail
Author
Owner

@mprasil commented on GitHub (Sep 24, 2018):

I'm on mobile, so can't really test this, but I wonder if iOS will accept certificate for IP address. Quick googling around suggests, that it might not.

<!-- gh-comment-id:424053152 --> @mprasil commented on GitHub (Sep 24, 2018): I'm on mobile, so can't really test this, but I wonder if iOS will accept certificate for IP address. Quick googling around suggests, that it might not.
Author
Owner

@ghost commented on GitHub (Sep 24, 2018):

Make it works on Safari (need to add port: https://192.168.0.19:443) but still no success with app.

<!-- gh-comment-id:424072362 --> @ghost commented on GitHub (Sep 24, 2018): Make it works on Safari (need to add port: https://192.168.0.19:443) but still no success with app.
Author
Owner

@ghost commented on GitHub (Sep 25, 2018):

I made it works. Need to create CA certificate then server certificate

<!-- gh-comment-id:424218826 --> @ghost commented on GitHub (Sep 25, 2018): I made it works. Need to create CA certificate then server certificate
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/vaultwarden#101
No description provided.