[GH-ISSUE #2911] Certification error with the SSL cert isssued by ZeroSSL #27665

Closed
opened 2026-04-18 11:11:14 -05:00 by GiteaMirror · 4 comments
Owner

Originally created by @zen010101 on GitHub (Dec 21, 2023).
Original GitHub issue: https://github.com/bitwarden/android/issues/2911

Steps To Reproduce

self-host using docker and issed a new ssl cert for it using the acme.sh with the ZeroSSL server:
acme.sh --server ZeroSSL --issue -d dns_dp -d *.example.com

then login on the android with the Bitwarden app which version is 22023.12.0(8588). it will display an error message after click the Next button which will let me input the self-host server address:

java.security.cert.CertPathValidatiorException: Trust anchor for certification path not found.

then I change a new cert issued by Let's encrypt , all things work well.

Expected Result

let me input the self-host server address

Actual Result

java.security.cert.CertPathValidatiorException: Trust anchor for certification path not found.

Screenshots or Videos

No response

Additional Context

No response

Operating System

Android

Operating System Version

No response

Device

Xiaomi 10 Ultra

Build Version

2023.12.0(8588)

Beta

  • Using a pre-release version of the application.
Originally created by @zen010101 on GitHub (Dec 21, 2023). Original GitHub issue: https://github.com/bitwarden/android/issues/2911 ### Steps To Reproduce self-host using docker and issed a new ssl cert for it using the acme.sh with the ZeroSSL server: acme.sh --server ZeroSSL --issue -d dns_dp -d *.example.com then login on the android with the Bitwarden app which version is 22023.12.0(8588). it will display an error message after click the Next button which will let me input the self-host server address: **java.security.cert.CertPathValidatiorException: Trust anchor for certification path not found.** then I change a new cert issued by Let's encrypt , all things work well. ### Expected Result let me input the self-host server address ### Actual Result java.security.cert.CertPathValidatiorException: Trust anchor for certification path not found. ### Screenshots or Videos _No response_ ### Additional Context _No response_ ### Operating System Android ### Operating System Version _No response_ ### Device Xiaomi 10 Ultra ### Build Version 2023.12.0(8588) ### Beta - [ ] Using a pre-release version of the application.
GiteaMirror added the bug label 2026-04-18 11:11:14 -05:00
Author
Owner

@Krychaz commented on GitHub (Dec 21, 2023):

This indicates that your device is missing some certificate files. Please follow the steps here: https://community.bitwarden.com/t/android-client-login-bitwarden-https-cert-problem/12132 to download the missing certificate files, and then follow the instructions here: https://support.google.com/pixelphone/answer/2844832?hl=en to upload those files to your device.

Please note that if you're self-hosting your own Bitwarden server, you'll need to supply the certificates you're using and not use the ones for our web vault. Also note that the procedure to upload the certificate files to your device may be slightly different from the guide above and will depend on the make and model of your Android device.

More information here: https://bitwarden.com/help/certificates/#trust-a-self-signed-certificate

<!-- gh-comment-id:1866530393 --> @Krychaz commented on GitHub (Dec 21, 2023): This indicates that your device is missing some certificate files. Please follow the steps here: https://community.bitwarden.com/t/android-client-login-bitwarden-https-cert-problem/12132 to download the missing certificate files, and then follow the instructions here: https://support.google.com/pixelphone/answer/2844832?hl=en to upload those files to your device. Please note that if you're self-hosting your own Bitwarden server, you'll need to supply the certificates you're using and not use the ones for our web vault. Also note that the procedure to upload the certificate files to your device may be slightly different from the guide above and will depend on the make and model of your Android device. More information here: [https://bitwarden.com/help/certificates/#trust-a-self-signed-certificate](https://bitwarden.com/help/article/certificates/#trust-a-self-signed-certificate)
Author
Owner

@zen010101 commented on GitHub (Dec 22, 2023):

but, when I browse my self-host web site with the same cert, the Edge and other browsers are all no problem. why only bitwarden client meets errors.

<!-- gh-comment-id:1867417878 --> @zen010101 commented on GitHub (Dec 22, 2023): but, when I browse my self-host web site with the same cert, the Edge and other browsers are all no problem. why only bitwarden client meets errors.
Author
Owner

@Krychaz commented on GitHub (Dec 22, 2023):

As explained in the links above, the web vault has the SSL certificate when you access it via the web. However the apps do not have this ability, they need a certificate file in order to work properly.

<!-- gh-comment-id:1867479030 --> @Krychaz commented on GitHub (Dec 22, 2023): As explained in the links above, the web vault has the SSL certificate when you access it via the web. However the apps do not have this ability, they need a certificate file in order to work properly.
Author
Owner

@zen010101 commented on GitHub (Dec 24, 2023):

It doesn't work following the steps gived by the site you mentioned.
Finally, I downloaded the cert from official site:
https://letsencrypt.org/certs/lets-encrypt-r4.pem and installed to my phone
successfully.

Krystian Kan @.***> 于2023年12月22日周五 17:55写道:

As explained in the links above, the web vault has the SSL certificate
when you access it via the web. However the apps do not have this ability,
they need a certificate file in order to work properly.


Reply to this email directly, view it on GitHub
https://github.com/bitwarden/mobile/issues/2911#issuecomment-1867479030,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AOOETFF4EPWHTJDHMEKASH3YKVKHTAVCNFSM6AAAAABA6OWYZ6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQNRXGQ3TSMBTGA
.
You are receiving this because you authored the thread.Message ID:
@.***>

<!-- gh-comment-id:1868471156 --> @zen010101 commented on GitHub (Dec 24, 2023): It doesn't work following the steps gived by the site you mentioned. Finally, I downloaded the cert from official site: https://letsencrypt.org/certs/lets-encrypt-r4.pem and installed to my phone successfully. Krystian Kan ***@***.***> 于2023年12月22日周五 17:55写道: > As explained in the links above, the web vault has the SSL certificate > when you access it via the web. However the apps do not have this ability, > they need a certificate file in order to work properly. > > — > Reply to this email directly, view it on GitHub > <https://github.com/bitwarden/mobile/issues/2911#issuecomment-1867479030>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AOOETFF4EPWHTJDHMEKASH3YKVKHTAVCNFSM6AAAAABA6OWYZ6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQNRXGQ3TSMBTGA> > . > You are receiving this because you authored the thread.Message ID: > ***@***.***> >
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#27665