github-starred/vaultwarden
2
0
Fork 0
mirror of https://github.com/dani-garcia/vaultwarden.git synced 2026-08-28 22:32:18 -05:00
Code Issues 534 Packages Projects Releases 86 Wiki Activity

Update wiki Private CA/Self Signed certs #4205

New Issue
Closed
opened 2026-03-07 19:33:28 -06:00 by GiteaMirror · 4 comments
GiteaMirror commented 2026-03-07 19:33:28 -06:00
Owner
Copy Link
Copy Source

Originally created by @stshontikidis on GitHub (Jan 16, 2020).

Subject of the issue

Wiki entry on working with private CA issuers and self signed certs has some example commands that are no longer valid for iOS 13 and macOS 10.15. https://support.apple.com/en-us/HT210176
Wiki should reflect that valid server certificate can not have expiry > 825 and ExtendedKeyUsage = Server Authentication

I did a little writeup here
https://www.reddit.com/r/Bitwarden/comments/ep9qyz/self_signed_certs_iosmacos_issue_solved/

Your environment

  • Bitwarden_rs version: 2.12.1
  • Install method: Docker Image
  • Clients used: iOS app, macOS app, chrome
  • Reverse proxy and version: nginx/1.10.3
  • Other relevant information: iOS 13.3

Steps to reproduce

Followed steps in wiki https://github.com/dani-garcia/bitwarden_rs/wiki/Private-CA-and-self-signed-certs-that-work-with-Chrome and then add certs to iOS >= 13.0.

Expected behaviour

SSL handshake should be successful

Actual behaviour

iOS app has generic server connection error

Relevant logs

nginx
2020/01/15 16:12:31 [info] 13834#13834: *44031 peer closed connection in SSL handshake while SSL handshaking, client: 192.168.1.42, server: 0.0.0.0:443
2020/01/15 16:13:25 [info] 13834#13834: *44032 peer closed connection in SSL handshake while SSL handshaking, client: 192.168.1.42, server: 0.0.0.0:443

Originally created by @stshontikidis on GitHub (Jan 16, 2020). ### Subject of the issue Wiki entry on working with private CA issuers and self signed certs has some example commands that are no longer valid for iOS 13 and macOS 10.15. https://support.apple.com/en-us/HT210176 Wiki should reflect that valid server certificate can not have expiry > 825 and ExtendedKeyUsage = Server Authentication I did a little writeup here https://www.reddit.com/r/Bitwarden/comments/ep9qyz/self_signed_certs_iosmacos_issue_solved/ ### Your environment <!-- The version number, obtained from the logs or the admin page --> * Bitwarden_rs version: 2.12.1 <!-- How the server was installed: Docker image / package / built from source --> * Install method: Docker Image * Clients used: iOS app, macOS app, chrome * Reverse proxy and version: nginx/1.10.3 * Other relevant information: iOS 13.3 ### Steps to reproduce Followed steps in wiki https://github.com/dani-garcia/bitwarden_rs/wiki/Private-CA-and-self-signed-certs-that-work-with-Chrome and then add certs to iOS >= 13.0. ### Expected behaviour SSL handshake should be successful ### Actual behaviour iOS app has generic server connection error ### Relevant logs nginx 2020/01/15 16:12:31 [info] 13834#13834: *44031 peer closed connection in SSL handshake while SSL handshaking, client: 192.168.1.42, server: 0.0.0.0:443 2020/01/15 16:13:25 [info] 13834#13834: *44032 peer closed connection in SSL handshake while SSL handshaking, client: 192.168.1.42, server: 0.0.0.0:443
GiteaMirror commented 2026-03-07 19:33:29 -06:00
Author
Owner
Copy Link
Copy Source

@stshontikidis commented on GitHub (Jan 16, 2020):

I am willing to update the wiki but I am not involved in the project and did not just want to edit unannounced.

@stshontikidis commented on GitHub (Jan 16, 2020): I am willing to update the wiki but I am not involved in the project and did not just want to edit unannounced.
GiteaMirror commented 2026-03-07 19:33:29 -06:00
Author
Owner
Copy Link
Copy Source

@dani-garcia commented on GitHub (Jan 18, 2020):

Yeah of course, I'd appreciate if you could update the wiki to include the info you mention, thanks!

@dani-garcia commented on GitHub (Jan 18, 2020): Yeah of course, I'd appreciate if you could update the wiki to include the info you mention, thanks!
GiteaMirror commented 2026-03-07 19:33:29 -06:00
Author
Owner
Copy Link
Copy Source

@stshontikidis commented on GitHub (Jan 18, 2020):

Made the small update to ext file and server cert command, along with note to source of apple requirements. Take a look and I think we can close this thread.

@stshontikidis commented on GitHub (Jan 18, 2020): Made the small update to ext file and server cert command, along with note to source of apple requirements. Take a look and I think we can close this thread.
GiteaMirror commented 2026-03-07 19:33:30 -06:00
Author
Owner
Copy Link
Copy Source

@dani-garcia commented on GitHub (Jan 18, 2020):

Looks good to me, thanks!

@dani-garcia commented on GitHub (Jan 18, 2020): Looks good to me, thanks!
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
better for forum
bug
documentation
duplicate
enhancement
future Vault
good first issue
help wanted
low priority
notes
pull-request
Mirrored from GitHub Pull Request
 question
SSO
Third party
troubleshooting
wontfix
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
GiteaMirror ninjasurge (Kaehlen Rog)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/vaultwarden#4205