starred/vaultwarden

Fork 0

mirror of https://github.com/dani-garcia/vaultwarden.git synced 2026-04-26 09:46:00 +03:00

[GH-ISSUE #1209] Error when logging in bitwarden using Android client. #853

New issue

Closed

opened 2026-03-03 02:04:02 +03:00 by kerem · 4 comments

kerem commented

2026-03-03 02:04:02 +03:00

Owner

Originally created by @benzBrake on GitHub (Oct 30, 2020).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/1209

Subject of the issue

Cannot loggin to my bitwarden server with Bitwarden Android 2.6.0 with error message Exception Message: Chain validation failed.

Your environment

Bitwarden_rs version: Docker image id 4f627c5a63f0

Install method: Docker
Clients used: Bitwarden Android 2.6.1
Reverse proxy and version: Caddy 1.0.4
SSL certificate: Let's Encrypt Elliptic Curve 256 2020-12-08
Other relevant information: I tried to logging on my iPad, there's no problem.

Steps to reproduce

Using docker-compose, my config is

  bitwarden:
    image: bitwardenrs/server 
    container_name: bitwarden
    restart: always
    volumes:
      - /data/bitwarden:/data/bitwarden
    env_file:
      - /data/bitwarden/config.env

Conent of config.env

SIGNUPS_ALLOWED=false
DOMAIN=http://localhost
DATABASE_URL=/data/bitwarden/database.db
ROCKET_WORKERS=10
WEB_VAULT_ENABLED=true

I'm using caddy 1.0.4 for reserve proxy.
Config of caddy

mydomain {
    tls webmaster@mydomain
    #rewrite / {
    #    if_op or
    #    if {>User-Agent} not_has "Bitwarden"
    #    if {>User-Agent} not_has "Waterfox"
    #    to /404.html
    #}
    proxy /notifications/hub/negotiate bitwarden:80 {
        transparent
    }
    proxy /notifications/hub bitwarden:3012 {
        websocket
    }
    proxy / bitwarden:80 {
        transparent
    }
}

Expected behaviour

Actual behaviour

Relevant logs

Originally created by @benzBrake on GitHub (Oct 30, 2020). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/1209   ### Subject of the issue Cannot loggin to my bitwarden server with Bitwarden Android 2.6.0 with error message `Exception Message: Chain validation failed`. ### Your environment   * Bitwarden_rs version: Docker image id 4f627c5a63f0  * Install method: Docker * Clients used: Bitwarden Android 2.6.1 * Reverse proxy and version: Caddy 1.0.4 * SSL certificate: Let's Encrypt Elliptic Curve 256 2020-12-08 * Other relevant information: I tried to logging on my iPad, there's no problem. ### Steps to reproduce  Using docker-compose, my config is ``` bitwarden: image: bitwardenrs/server container_name: bitwarden restart: always volumes: - /data/bitwarden:/data/bitwarden env_file: - /data/bitwarden/config.env ``` Conent of config.env ``` SIGNUPS_ALLOWED=false DOMAIN=http://localhost DATABASE_URL=/data/bitwarden/database.db ROCKET_WORKERS=10 WEB_VAULT_ENABLED=true ``` I'm using caddy 1.0.4 for reserve proxy. Config of caddy ``` mydomain { tls webmaster@mydomain #rewrite / { # if_op or # if {>User-Agent} not_has "Bitwarden" # if {>User-Agent} not_has "Waterfox" # to /404.html #} proxy /notifications/hub/negotiate bitwarden:80 { transparent } proxy /notifications/hub bitwarden:3012 { websocket } proxy / bitwarden:80 { transparent } } ``` ### Expected behaviour  ### Actual behaviour  ### Relevant logs

kerem

2026-03-03 02:04:02 +03:00

closed this issue
added the
better for forum
label

kerem commented

2026-03-03 02:04:03 +03:00

Author

Owner

@jssta15646461234 commented on GitHub (Nov 3, 2020):

same here. same docker image,

@jssta15646461234 commented on GitHub (Nov 3, 2020): same here. same docker image,

kerem commented

2026-03-03 02:04:03 +03:00

Author

Owner

@benzBrake commented on GitHub (Nov 8, 2020):

same here. same docker image,

Have you using let's encrypt as ssl certificate?
It seems that my problem solved by changing ceriticate to cloudflare's

@benzBrake commented on GitHub (Nov 8, 2020): > > > same here. same docker image, Have you using let's encrypt as ssl certificate? It seems that my problem solved by changing ceriticate to cloudflare's

kerem commented

2026-03-03 02:04:03 +03:00

Author

Owner

@BlackDex commented on GitHub (Nov 16, 2020):

Well, the error is very clear, the chain is not valid.
Please check if you have the full chain served instead of only the domain cert.
So, it should be fullchain.pem instead of cert.pem for example.

Else most mobile client's will not understand the certificate, as do some browsers.

@BlackDex commented on GitHub (Nov 16, 2020): Well, the error is very clear, the chain is not valid. Please check if you have the full chain served instead of only the domain cert. So, it should be `fullchain.pem` instead of `cert.pem` for example. Else most mobile client's will not understand the certificate, as do some browsers.

kerem commented

2026-03-03 02:04:04 +03:00

Author

Owner

@BlackDex commented on GitHub (Nov 18, 2020):

Closing this ticket.
Feel free to continue this discussion on the forum: https://bitwardenrs.discourse.group/

We suggest to use a reverse-proxy for ssl-offloading, because reverse proxy are better in handling SSL.
Also checkout some of the updated/new wiki articles:
https://github.com/dani-garcia/bitwarden_rs/wiki/Enabling-HTTPS (Especially the Check if certificate is valid part)
https://github.com/dani-garcia/bitwarden_rs/wiki/Running-a-private-bitwarden_rs-instance-with-Let%27s-Encrypt-certs
https://github.com/dani-garcia/bitwarden_rs/wiki/Private-CA-and-self-signed-certs-that-work-with-Chrome

@BlackDex commented on GitHub (Nov 18, 2020): Closing this ticket. Feel free to continue this discussion on the forum: https://bitwardenrs.discourse.group/ We suggest to use a reverse-proxy for ssl-offloading, because reverse proxy are better in handling SSL. Also checkout some of the updated/new wiki articles: https://github.com/dani-garcia/bitwarden_rs/wiki/Enabling-HTTPS (Especially the `Check if certificate is valid` part) https://github.com/dani-garcia/bitwarden_rs/wiki/Running-a-private-bitwarden_rs-instance-with-Let%27s-Encrypt-certs https://github.com/dani-garcia/bitwarden_rs/wiki/Private-CA-and-self-signed-certs-that-work-with-Chrome