starred/vaultwarden

Fork 0

mirror of https://github.com/dani-garcia/vaultwarden.git synced 2026-04-26 01:35:54 +03:00

[GH-ISSUE #814] Update wiki Private CA/Self Signed certs #565

New issue

Closed

opened 2026-03-03 01:30:36 +03:00 by kerem · 4 comments

kerem commented

2026-03-03 01:30:36 +03:00

Owner

Originally created by @stshontikidis on GitHub (Jan 16, 2020).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/814

Subject of the issue

Wiki entry on working with private CA issuers and self signed certs has some example commands that are no longer valid for iOS 13 and macOS 10.15. https://support.apple.com/en-us/HT210176
Wiki should reflect that valid server certificate can not have expiry > 825 and ExtendedKeyUsage = Server Authentication

I did a little writeup here
https://www.reddit.com/r/Bitwarden/comments/ep9qyz/self_signed_certs_iosmacos_issue_solved/

Your environment

Bitwarden_rs version: 2.12.1

Install method: Docker Image
Clients used: iOS app, macOS app, chrome
Reverse proxy and version: nginx/1.10.3
Other relevant information: iOS 13.3

Steps to reproduce

Followed steps in wiki https://github.com/dani-garcia/bitwarden_rs/wiki/Private-CA-and-self-signed-certs-that-work-with-Chrome and then add certs to iOS >= 13.0.

Expected behaviour

SSL handshake should be successful

Actual behaviour

iOS app has generic server connection error

Relevant logs

nginx
2020/01/15 16:12:31 [info] 13834#13834: *44031 peer closed connection in SSL handshake while SSL handshaking, client: 192.168.1.42, server: 0.0.0.0:443
2020/01/15 16:13:25 [info] 13834#13834: *44032 peer closed connection in SSL handshake while SSL handshaking, client: 192.168.1.42, server: 0.0.0.0:443

Originally created by @stshontikidis on GitHub (Jan 16, 2020). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/814 ### Subject of the issue Wiki entry on working with private CA issuers and self signed certs has some example commands that are no longer valid for iOS 13 and macOS 10.15. https://support.apple.com/en-us/HT210176 Wiki should reflect that valid server certificate can not have expiry > 825 and ExtendedKeyUsage = Server Authentication I did a little writeup here https://www.reddit.com/r/Bitwarden/comments/ep9qyz/self_signed_certs_iosmacos_issue_solved/ ### Your environment  * Bitwarden_rs version: 2.12.1  * Install method: Docker Image * Clients used: iOS app, macOS app, chrome * Reverse proxy and version: nginx/1.10.3 * Other relevant information: iOS 13.3 ### Steps to reproduce Followed steps in wiki https://github.com/dani-garcia/bitwarden_rs/wiki/Private-CA-and-self-signed-certs-that-work-with-Chrome and then add certs to iOS >= 13.0. ### Expected behaviour SSL handshake should be successful ### Actual behaviour iOS app has generic server connection error ### Relevant logs nginx 2020/01/15 16:12:31 [info] 13834#13834: *44031 peer closed connection in SSL handshake while SSL handshaking, client: 192.168.1.42, server: 0.0.0.0:443 2020/01/15 16:13:25 [info] 13834#13834: *44032 peer closed connection in SSL handshake while SSL handshaking, client: 192.168.1.42, server: 0.0.0.0:443

kerem closed this issue

2026-03-03 01:30:36 +03:00

kerem commented

2026-03-03 01:30:37 +03:00

Author

Owner

@stshontikidis commented on GitHub (Jan 16, 2020):

I am willing to update the wiki but I am not involved in the project and did not just want to edit unannounced.

@stshontikidis commented on GitHub (Jan 16, 2020): I am willing to update the wiki but I am not involved in the project and did not just want to edit unannounced.

kerem commented

2026-03-03 01:30:37 +03:00

Author

Owner

@dani-garcia commented on GitHub (Jan 18, 2020):

Yeah of course, I'd appreciate if you could update the wiki to include the info you mention, thanks!

@dani-garcia commented on GitHub (Jan 18, 2020): Yeah of course, I'd appreciate if you could update the wiki to include the info you mention, thanks!

kerem commented

2026-03-03 01:30:37 +03:00

Author

Owner

@stshontikidis commented on GitHub (Jan 18, 2020):

Made the small update to ext file and server cert command, along with note to source of apple requirements. Take a look and I think we can close this thread.

@stshontikidis commented on GitHub (Jan 18, 2020): Made the small update to ext file and server cert command, along with note to source of apple requirements. Take a look and I think we can close this thread.

kerem commented

2026-03-03 01:30:37 +03:00

Author

Owner

@dani-garcia commented on GitHub (Jan 18, 2020):

Looks good to me, thanks!

@dani-garcia commented on GitHub (Jan 18, 2020): Looks good to me, thanks!

kerem referenced this issue

2026-03-03 08:52:59 +03:00

[PR #644] [MERGED] Fixed issue #565 #2767