[GH-ISSUE #3304] [Bug]: Desktop App: Server is not running at this URL. #15589

New Issue

GiteaMirror · 2026-04-14T18:37:39-05:00

GiteaMirror commented

2026-04-14 18:37:39 -05:00

Originally created by @atrueresistance on GitHub (Aug 22, 2024).
Original GitHub issue: https://github.com/actualbudget/actual/issues/3304

Verified issue does not already exist?

I have searched and found no existing issue
I will be providing steps how to reproduce the bug (in most cases this will also mean uploading a demo budget file)

What happened?

I'm having an issue with the web server connecting to the desktop application.

The server is up and running using HTTPS and a self signed cert.

Having a self signed cert, you would normally be prompted in Chrome stating that the certificate is not valid. It's probably not the best way to go about it, but if you add it to the Trusted Root Certification Authorities for the current user Chrome inherently trusts it solving the warning. At least on the local machine for the current logged on user. I don't intend on opening the server to the outside, just LAN connection is good enough for me.

The desktop application is being ran on the same machine and user that the certificate was added to the Trusted Root Certification Authorities store.

Where are you hosting Actual?

Docker

What browsers are you seeing the problem on?

Desktop App (Electron)

Operating System

Windows 11

Originally created by @atrueresistance on GitHub (Aug 22, 2024). Original GitHub issue: https://github.com/actualbudget/actual/issues/3304 ### Verified issue does not already exist? - [X] I have searched and found no existing issue - [X] I will be providing steps how to reproduce the bug (in most cases this will also mean uploading a demo budget file) ### What happened? I'm having an issue with the web server connecting to the desktop application. ![image](https://github.com/user-attachments/assets/670eba51-55cb-4b9a-99c4-cf3f1cf9eac1) The server is up and running using HTTPS and a self signed cert. ![image](https://github.com/user-attachments/assets/1a229ecf-0ebf-40e7-b7aa-8b249da1823f) Having a self signed cert, you would normally be prompted in Chrome stating that the certificate is not valid. It's probably not the best way to go about it, but if you add it to the Trusted Root Certification Authorities for the current user Chrome inherently trusts it solving the warning. At least on the local machine for the current logged on user. I don't intend on opening the server to the outside, just LAN connection is good enough for me. ![image](https://github.com/user-attachments/assets/0f7cbd1f-8268-4bb6-b731-8edd7fa322bb) The desktop application is being ran on the same machine and user that the certificate was added to the Trusted Root Certification Authorities store. ### Where are you hosting Actual? Docker ### What browsers are you seeing the problem on? Desktop App (Electron) ### Operating System Windows 11

GiteaMirror added the electron bug labels 2026-04-14 18:37:39 -05:00

GiteaMirror closed this issue

2026-04-14 18:37:40 -05:00

GiteaMirror commented

2026-04-14 18:37:42 -05:00

@MikesGlitch commented on GitHub (Aug 22, 2024):

Confirmed - I'm seeing this also. This may be tricky - we do n't want to turn off TLS validation for security reasons. Having said that, disabling it does work:

process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Anyone got any thoughts on the best approach here?

@MikesGlitch commented on GitHub (Aug 22, 2024): Confirmed - I'm seeing this also. This may be tricky - we do n't want to turn off TLS validation for security reasons. Having said that, disabling it does work: ``` process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0'; ``` Anyone got any thoughts on the best approach here?

GiteaMirror commented

2026-04-14 18:37:43 -05:00

@psybers commented on GitHub (Aug 22, 2024):

https://stackoverflow.com/questions/38986692/how-do-i-trust-a-self-signed-certificate-from-an-electron-app

@psybers commented on GitHub (Aug 22, 2024): https://stackoverflow.com/questions/38986692/how-do-i-trust-a-self-signed-certificate-from-an-electron-app

GiteaMirror commented

2026-04-14 18:37:43 -05:00

@atrueresistance commented on GitHub (Aug 22, 2024):

I'll start of with I know nothing of electron apps. I do agree that TLS validation off is not the default way to ship.

I'm not sure how much work it would be, but would it be possible to have a configuration item in the desktop app that whitelists a specific certificate serial number?

https://www.electronjs.org/docs/latest/api/session#sessetcertificateverifyprocproc

If the certificate is installed in the current user's certificate store can the desktop app use is directly from the store?

@atrueresistance commented on GitHub (Aug 22, 2024): I'll start of with I know nothing of electron apps. I do agree that TLS validation off is not the default way to ship. I'm not sure how much work it would be, but would it be possible to have a configuration item in the desktop app that whitelists a specific certificate serial number? https://www.electronjs.org/docs/latest/api/session#sessetcertificateverifyprocproc If the certificate is installed in the current user's certificate store can the desktop app use is directly from the store?

GiteaMirror commented

2026-04-14 18:37:44 -05:00

@MikesGlitch commented on GitHub (Aug 22, 2024):

We have a bit of an odd setup, we run our loot-core server process (that calls the API and gets the error) in a forked process.

I think that means the session's setCertificateVerifyProc won't pick it up.

Maybe we can configure node-fetch for Electron to figure out the root store 🤔

@MikesGlitch commented on GitHub (Aug 22, 2024): We have a bit of an odd setup, we run our loot-core server process (that calls the API and gets the error) in a forked process. I think that means the session's setCertificateVerifyProc won't pick it up. Maybe we can configure node-fetch for Electron to figure out the root store 🤔

GiteaMirror commented

2026-04-14 18:37:46 -05:00

@MikesGlitch commented on GitHub (Aug 24, 2024):

I have a draft pr up - as expected the electron setCertificateVerifyProc wont work. The only way to make it work is for the user to specify the cert that they want to trust.

@atrueresistance How did you generate your cert? I used makecert to test but want to make sure it also works on your config.

@MikesGlitch commented on GitHub (Aug 24, 2024): I have a draft pr up - as expected the electron setCertificateVerifyProc wont work. The only way to make it work is for the user to specify the cert that they want to trust. @atrueresistance How did you generate your cert? I used makecert to test but want to make sure it also works on your config.

GiteaMirror commented

2026-04-14 18:37:47 -05:00

@atrueresistance commented on GitHub (Aug 24, 2024):

@MikesGlitch I used the same command as in the documentation except with a subject alternative name to match the hostname.

openssl req -x509 -nodes -days 365 -addext "subjectAltName = DNS:orangepi3-lts" -newkey rsa:2048 -keyout selfhost.key -out selfhost.crt

@atrueresistance commented on GitHub (Aug 24, 2024): @MikesGlitch I used the same command as in the documentation except with a subject alternative name to match the hostname. `openssl req -x509 -nodes -days 365 -addext "subjectAltName = DNS:orangepi3-lts" -newkey rsa:2048 -keyout selfhost.key -out selfhost.crt`

GiteaMirror commented

2026-04-14 18:37:48 -05:00

@MikesGlitch commented on GitHub (Aug 24, 2024):

@MikesGlitch I used the same command as in the documentation except with a subject alternative name to match the hostname.

Thanks, I have a build here: https://github.com/actualbudget/actual/actions/runs/10541997136/job/29208287390?pr=3308

Can you confirm if it fixes this issue? If you try it, don't forget to backup your budget first.

@MikesGlitch commented on GitHub (Aug 24, 2024): > @MikesGlitch I used the same command as in the documentation except with a subject alternative name to match the hostname. Thanks, I have a build here: https://github.com/actualbudget/actual/actions/runs/10541997136/job/29208287390?pr=3308 Can you confirm if it fixes this issue? If you try it, don't forget to backup your budget first.

GiteaMirror commented

2026-04-14 18:37:49 -05:00

@atrueresistance commented on GitHub (Aug 26, 2024):

This app package’s publisher certificate could not be verified. Contact your system administrator or the app developer to obtain a new app package with verified certificates. The root certificate and all immediate certificates of the signature in the app package must be verified (0x800B010A)

@atrueresistance commented on GitHub (Aug 26, 2024): `This app package’s publisher certificate could not be verified. Contact your system administrator or the app developer to obtain a new app package with verified certificates. The root certificate and all immediate certificates of the signature in the app package must be verified (0x800B010A)`

GiteaMirror commented

2026-04-14 18:37:50 -05:00

@MikesGlitch commented on GitHub (Aug 26, 2024):

That's what we'd expect for the appx installer - it's for the windows store.

Try the "actual-electron-windows-latest" artifact, that should install as per usual.

@MikesGlitch commented on GitHub (Aug 26, 2024): That's what we'd expect for the appx installer - it's for the windows store. Try the "actual-electron-windows-latest" artifact, that should install as per usual.

GiteaMirror commented

2026-04-14 18:37:51 -05:00

@atrueresistance commented on GitHub (Aug 26, 2024):

Is there a link? Sorry I'm not sure where I should be looking.

@atrueresistance commented on GitHub (Aug 26, 2024): Is there a link? Sorry I'm not sure where I should be looking.

GiteaMirror commented

2026-04-14 18:37:52 -05:00

@MikesGlitch commented on GitHub (Aug 26, 2024):

Is there a link? Sorry I'm not sure where I should be looking.

Ah, this is the direct link to the download: https://github.com/actualbudget/actual/actions/runs/10541997136/artifacts/1850858005

Here's the PR, if interested: https://github.com/actualbudget/actual/pull/3308

@MikesGlitch commented on GitHub (Aug 26, 2024): > Is there a link? Sorry I'm not sure where I should be looking. Ah, this is the direct link to the download: https://github.com/actualbudget/actual/actions/runs/10541997136/artifacts/1850858005 Here's the PR, if interested: https://github.com/actualbudget/actual/pull/3308

GiteaMirror commented

2026-04-14 18:37:52 -05:00

@atrueresistance commented on GitHub (Aug 27, 2024):

@MikesGlitch I was able to download the latest and get it running with the self signed cert.

Thank you so much!

@atrueresistance commented on GitHub (Aug 27, 2024): @MikesGlitch I was able to download the latest and get it running with the self signed cert. Thank you so much! ![image](https://github.com/user-attachments/assets/12c1dd99-e660-4fb2-b468-79cd54c8aab0)

GiteaMirror commented

2026-04-14 18:37:53 -05:00

@crzdg commented on GitHub (Aug 27, 2024):

Nice. I will soon test this as well. Im using Caddy as proxy, so a short-lived certificate. Can I trust the Intermediate / Root, so the short-lived signed certs work?

@crzdg commented on GitHub (Aug 27, 2024): Nice. I will soon test this as well. Im using Caddy as proxy, so a short-lived certificate. Can I trust the Intermediate / Root, so the short-lived signed certs work?

GiteaMirror commented

2026-04-14 18:37:54 -05:00

@MikesGlitch commented on GitHub (Aug 28, 2024):

Nice. I will soon test this as well. Im using Caddy as proxy, so a short-lived certificate. Can I trust the Intermediate / Root, so the short-lived signed certs work?

I'm not too familiar with Caddy so couldn't say. You can trust a certificate that is locally on the PC that is .crt or .pem format.

@MikesGlitch commented on GitHub (Aug 28, 2024): > Nice. I will soon test this as well. Im using Caddy as proxy, so a short-lived certificate. Can I trust the Intermediate / Root, so the short-lived signed certs work? I'm not too familiar with Caddy so couldn't say. You can trust a certificate that is locally on the PC that is .crt or .pem format.

GiteaMirror commented

2026-04-14 18:37:55 -05:00

@MikesGlitch commented on GitHub (Aug 28, 2024):

Closed by https://github.com/actualbudget/actual/pull/3308

@MikesGlitch commented on GitHub (Aug 28, 2024): Closed by https://github.com/actualbudget/actual/pull/3308

GiteaMirror commented

2026-04-14 18:37:56 -05:00

@wgregbrown commented on GitHub (Mar 16, 2025):

Is there anywhere to still get the desktop client that will work with self signed certs. @MikesGlitch put a link

https://github.com/actualbudget/actual/actions/runs/10541997136/job/29208287390?pr=3308

But its empty now.

@wgregbrown commented on GitHub (Mar 16, 2025): Is there anywhere to still get the desktop client that will work with self signed certs. @MikesGlitch put a link https://github.com/actualbudget/actual/actions/runs/10541997136/job/29208287390?pr=3308 But its empty now.

GiteaMirror commented

2026-04-14 18:37:56 -05:00

@MikesGlitch commented on GitHub (Mar 17, 2025):

The latest release has it. You can get it from the GitHub releases page

On Sun, 16 Mar 2025, 23:19 wgregbrown, @.***> wrote:

Is there anywhere to still get the desktop client that will work with self
signed certs. @MikesGlitch https://github.com/MikesGlitch put a link

https://github.com/actualbudget/actual/actions/runs/10541997136/job/29208287390?pr=3308

But its empty now.

—
Reply to this email directly, view it on GitHub
https://github.com/actualbudget/actual/issues/3304#issuecomment-2727708310,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABIKQKBRBBCU5WAB2NAJZXL2UYBINAVCNFSM6AAAAABM6SL4UGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDOMRXG4YDQMZRGA
.
You are receiving this because you were mentioned.Message ID:
@.***>
[image: wgregbrown]wgregbrown left a comment (actualbudget/actual#3304)
https://github.com/actualbudget/actual/issues/3304#issuecomment-2727708310

Is there anywhere to still get the desktop client that will work with self
signed certs. @MikesGlitch https://github.com/MikesGlitch put a link

https://github.com/actualbudget/actual/actions/runs/10541997136/job/29208287390?pr=3308

But its empty now.

—
Reply to this email directly, view it on GitHub
https://github.com/actualbudget/actual/issues/3304#issuecomment-2727708310,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABIKQKBRBBCU5WAB2NAJZXL2UYBINAVCNFSM6AAAAABM6SL4UGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDOMRXG4YDQMZRGA
.
You are receiving this because you were mentioned.Message ID:
@.***>

@MikesGlitch commented on GitHub (Mar 17, 2025): The latest release has it. You can get it from the GitHub releases page On Sun, 16 Mar 2025, 23:19 wgregbrown, ***@***.***> wrote: > Is there anywhere to still get the desktop client that will work with self > signed certs. @MikesGlitch <https://github.com/MikesGlitch> put a link > > > https://github.com/actualbudget/actual/actions/runs/10541997136/job/29208287390?pr=3308 > > But its empty now. > > — > Reply to this email directly, view it on GitHub > <https://github.com/actualbudget/actual/issues/3304#issuecomment-2727708310>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/ABIKQKBRBBCU5WAB2NAJZXL2UYBINAVCNFSM6AAAAABM6SL4UGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDOMRXG4YDQMZRGA> > . > You are receiving this because you were mentioned.Message ID: > ***@***.***> > [image: wgregbrown]*wgregbrown* left a comment (actualbudget/actual#3304) > <https://github.com/actualbudget/actual/issues/3304#issuecomment-2727708310> > > Is there anywhere to still get the desktop client that will work with self > signed certs. @MikesGlitch <https://github.com/MikesGlitch> put a link > > > https://github.com/actualbudget/actual/actions/runs/10541997136/job/29208287390?pr=3308 > > But its empty now. > > — > Reply to this email directly, view it on GitHub > <https://github.com/actualbudget/actual/issues/3304#issuecomment-2727708310>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/ABIKQKBRBBCU5WAB2NAJZXL2UYBINAVCNFSM6AAAAABM6SL4UGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDOMRXG4YDQMZRGA> > . > You are receiving this because you were mentioned.Message ID: > ***@***.***> >

GiteaMirror commented

2026-04-14 18:37:57 -05:00

@neobladerunner commented on GitHub (Apr 4, 2026):

I'm experiencing this issue with latest version 26.3.0 via Flathub. I've generated a self-signed cert via mkcert and can load the app fine via the browser from any device on my network. The desktop app states:

Server is not running at this URL. Make sure you have HTTPS set up properly.
If the server is using a self-signed certificate select it here.

I followed the instructions here to import the root certificate to the desktop app from the device Actual is running on, but the UI doesn't seem to do anything when I import it. Clicking on OK doesn't clear the red error message, and I can't tell if it's rejecting the cert file or not seeing it at all. I suppose I should just use the web client but wanted to try the desktop app if I could.

@neobladerunner commented on GitHub (Apr 4, 2026): I'm experiencing this issue with latest version 26.3.0 via Flathub. I've generated a self-signed cert via mkcert and can load the app fine via the browser from any device on my network. The desktop app states: > Server is not running at this URL. Make sure you have HTTPS set up properly. > If the server is using a self-signed certificate select it here. I followed the instructions [here](https://actualbudget.org/docs/config/https/) to import the root certificate to the desktop app from the device Actual is running on, but the UI doesn't seem to do anything when I import it. Clicking on OK doesn't clear the red error message, and I can't tell if it's rejecting the cert file or not seeing it at all. I suppose I should just use the web client but wanted to try the desktop app if I could.

Sign in to join this conversation.

Branches Tags

master

matiss/fix-publish-npm-cache-input

claude/plan-ci-secure-context-OtEe1

matiss/crdt-source-loading

worktree-misty-wishing-rain

release/v26.5.1

dependabot/npm_and_yarn/uuid-14.0.0

claude/hide-default-categories-1cwBZ

matiss/crdt-protobuf

release/26.5.0

claude/update-issue-template-ykMNn

claude/fix-issue-7667-DPXi3

cursor/formula-feedback-improvements-4223

cursor/resolve-pr-7449-ee11

claude/fix-typescript-build-error-JPtZ5

jfdoming/api-tokens-part-3

jfdoming/api-tokens-part-2

jfdoming/api-tokens-part-1

claude/speed-up-vrt-workflow-ZAyI5

claude/crdt-version-auto-publish-Ph1BH

copilot/add-repository-configs-to-packages

worktree-compressed-drifting-ritchie

worktree-mellow-strolling-dawn

matiss/browser-api

claude/api-consumer-verification-kfz1K

feature/enable-banking

cursor/transaction-table-rewrite-f077

pr-7454

claude/fix-issue-7410-LLLQ4

revert-7350-trim-deps

revert-7220-sankey-report

revert-7242-fix/split-parent-update-corruption

revert-7281-generate-icons

claude/electron-to-tauri-migration-LjBN8

worktree-remotion

claude/browser-compatible-api-QbhHh

claude/improve-cli-transactions-waTUY

claude/publish-react-native-ios-j8qoT

js-proxy

claude/fix-flaky-ci-job-5gDdz

react-query-rules

react-query-useSchedules

claude/nightly-theme-validation-scan-DzOGD

claude/debug-simplefin-error-ZuKzB

matiss/desktop-client-subpath-imports

claude/fix-simplefin-ssrf-T31gX

add-claude-github-actions-1772738270730

cursor/sync-performance-notification-9899

react-query-prefs

matiss/chunked-sync-and-progress-ux

v26.2.1

copilot/sub-pr-6880

fix-react-query-clear-on-close-budget

copilot/sub-pr-6140

feat/auto-note

feat/scoped-bank-sync

cursor/desktop-transactions-react-table-1d0c

fix-exhaustive-deps-App

copilot/fix-find-replace-bug

matiss/browser-tests

mobile-fix-drag-and-drop-across-groups

budget-table-v2

PayeeAutocomplete2

pglite

bugfix/plugins/fix-plugins-sw

feat/plugins/plugins-core-package

matiss/unicode-minus-fix

cursor/fix-actual-github-issue-6206-gemini-3-pro-preview-9c37

TransactionFormPage

cursor/implement-mortgage-and-loan-account-type-78ca

tests-update-fill-with-pressSequentially

mobile/link-modal

deps/25.11

cursor/fix-update-vrt-apply-ci-job-dispatch-b324

sync-server-plugins

cursor/propose-patch-for-github-issue-5680-2a18

fix/compiler-preserve-inner-dollar-escapes

cursor/analyze-actual-budget-issue-and-propose-fix-5b70

coderabbitai/docstrings/0c070e5

cursor/add-wip-prefix-and-comment-to-prs-d78d

jfdoming/08-21-auto-focus-on-navigate-in-all-browsers

show-totals-on-mobile-budget-banners

allow-child-transactions-make-transfer

mobile-calculator-keyboard

payee-geolocation

enhance/restore_scroll_position

dm-fix-second-click-on-mobile-new-transaction-2

scrollToLocationBudget

alert-autofix-38

tsconfig-composite

mobile-fix-uncategorized-transactions-on-tracking-budgets

server-budget-handlers

fix-sql-injection-in-cleanup-template

non-chrome-draggable-workaround

mobile-budget-page-swipe-navigation

ts-db-all

stable

dark-theme-with-brand-colors

fix-mobile-delete-group

ts-db-select

UnderKoen/reconcile-context-menu

master-before-server-merge

v25.2.1

ts-runQuery

rename-redux-hooks

UnderKoen/3557-persist-state-in-history

remove-redux-CLOSE_BUDGET

fix-exhaustive-deps-errors-FinancesApp

redux-toolkit-createSlice-backup

accounts-function-component

ts-useSplitsExpanded

loot-core-server-package

useTransactios-in-TransactionEdit

react-aria-input

move-redux-to-desktop-client

QueryState-type

fix-themes-applied-late

mobile-vrts

revert-3295-spendingCardFix

react-aria-button-4

split-payee-on-mobile

twk3/pin-apis-crdt

notes-tag-autocomplete

ts-LoadBackup

dnd-kit

package-upgrades

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/actual#15589