iOS/ipadOS 13.x cannot login on selfhosted bitwarden instance #831

Closed
opened 2025-11-26 22:31:40 -06:00 by GiteaMirror · 4 comments
Owner

Originally created by @l0rda on GitHub (Sep 26, 2019).

Hello,
i have own bw instance in docker container at local network.
CA certificate is added to ipad and iphone. It is fully trusted. I can login via browser, but mobile app says: "There is a problem connecting to the server". Of course, https is enabled. Container logs are empty, so i think there is problem with certificate.

This is started when updated to ios/ipados 13.1 (also maybe 13.0).

Originally created by @l0rda on GitHub (Sep 26, 2019). <!-- Please do not submit feature requests. The [Community Forums][1] has a section for submitting, voting for, and discussing product feature requests. [1]: https://community.bitwarden.com --> Hello, i have own bw instance in docker container at local network. CA certificate is added to ipad and iphone. It is fully trusted. I can login via browser, but mobile app says: "There is a problem connecting to the server". Of course, https is enabled. Container logs are empty, so i think there is problem with certificate. This is started when updated to ios/ipados 13.1 (also maybe 13.0).
Author
Owner

@nessor commented on GitHub (Sep 26, 2019):

Can't confirm this with iOS 13 and iOS 13.1.

Are you trying to login the first time or are you already logged in while updating to the new iOS?

@nessor commented on GitHub (Sep 26, 2019): Can't confirm this with iOS 13 and iOS 13.1. Are you trying to login the first time or are you already logged in while updating to the new iOS?
Author
Owner

@l0rda commented on GitHub (Sep 26, 2019):

On ipadOS was clean install.
On phone i was previously logged in. I tried to sync and it is not work, then logged out and tried to log in again, got this error.

@l0rda commented on GitHub (Sep 26, 2019): On ipadOS was clean install. On phone i was previously logged in. I tried to sync and it is not work, then logged out and tried to log in again, got this error.
Author
Owner

@l0rda commented on GitHub (Sep 26, 2019):

I found, what can be a problem:
https://support.apple.com/en-us/HT210176

Additionally, all TLS server certificates issued after July 1, 2019 (as indicated in the NotBefore field of the certificate) must follow these guidelines:
TLS server certificates must contain an ExtendedKeyUsage (EKU) extension containing the id-kp-serverAuth OID.
TLS server certificates must have a validity period of 825 days or fewer (as expressed in the NotBefore and NotAfter fields of the certificate).
Connections to TLS servers violating these new requirements will fail and may cause network failures, apps to fail, and websites to not load in Safari in iOS 13 and macOS 10.15.

@l0rda commented on GitHub (Sep 26, 2019): I found, what can be a problem: https://support.apple.com/en-us/HT210176 Additionally, all TLS server certificates issued after July 1, 2019 (as indicated in the NotBefore field of the certificate) must follow these guidelines: TLS server certificates must contain an ExtendedKeyUsage (EKU) extension containing the id-kp-serverAuth OID. TLS server certificates must have a validity period of 825 days or fewer (as expressed in the NotBefore and NotAfter fields of the certificate). Connections to TLS servers violating these new requirements will fail and may cause network failures, apps to fail, and websites to not load in Safari in iOS 13 and macOS 10.15.
Author
Owner

@l0rda commented on GitHub (Sep 26, 2019):

I confirm, certificate was issued at 9 july 2019 and has a validity period more than 825.
With new server certificate all work fine.

@l0rda commented on GitHub (Sep 26, 2019): I confirm, certificate was issued at 9 july 2019 and has a validity period more than 825. With new server certificate all work fine.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#831