Self-signed SSL certificate for API?
Closed this issue · 6 comments
Install root certificate in Android Trusted, but https://… in API doesn't work. =(
Im not certain what this means, https should work. What error is getting logged?
I don't know. =(
I added certificate into Trusted (Settings->Security), and it's work in browser, but not in app. =(
For local IP addresses, I dont think https is required. Have you tried just using http?
But I'm not always at home... But the server is.
Screenshot just example, I was at home at the time.
For public IP address, I prefer https. =)
It would be nice if the program took certificates from Encryption & Credentials self-signed CA storage.
I'm not an android developer, but maybe this will help?
https://developer.android.com/privacy-and-security/security-config?hl=ru#TrustingAdditionalCas
<certificates src=["system" | "user" | "raw resource"]
overridePins=["true" | "false"] />
"user" for user-added CA certificates
from here: https://stackoverflow.com/a/71535883
At the moment, I'm not too sure what are the possible security concerns this may raise, for now, i'd suggest using services vpn services such as Tailscale or Zerotier for routing to private networks remotely. Though it is possible to implement, it would require some prebuild configuration which is rather annoying.
I'll update this issue once I've decided on a resolution.
Pre-release uploaded that should grant the use of user-defined SSL certs. UI on pre-release is a bit buggy.
Feel free to reopen the issue if it doesn't work.