this post was submitted on 15 Sep 2024
23 points (96.0% liked)

Selfhosted

40200 readers
522 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
23
How to login to Davx5 with certificate? (github.com)
submitted 2 months ago by [email protected] to c/[email protected]
7 comments fedilink hide all child comments
 

This may be more of an Android issue than self-hosting, but i run Radicale on my personal server to host caldav/carddav services. I want to login with uname&pword with a certificate. I found this video in Davx5 github page showing that a user can select the cert:

video

I generated a self-signed cert from my server and installed that to my Android phone via Settings > Security&Privacy > Encryption&Credentials. But i dont get the same as the video. It keeps telling me No certificate found

Clicking the install button and selecting my cert will say

Install CA certificates in Settings This certificate from null must be installed in Settings. Only install CA certificates from organizations you trust.

top 7 comments
sorted by: hot top controversial new old
[–] [email protected] 2 points 2 months ago* (last edited 2 months ago) (1 children)

Do you install the CA certificate or the client certificate? Because both aren't the same. The app needs to authenticate with a client certificate file. The server has a server certificate that is checked against the CA certificate. So you'd install that (CA) in the android system certificate store and additionally give a client certificate file to the app.

[–] [email protected] 2 points 2 months ago

Oh i thought they are the same. I look into how to create a self-signed CA and see if it helps

[–] [email protected] 2 points 2 months ago* (last edited 2 months ago) (1 children)

Just use Login with URL and user name 😁

[–] [email protected] 1 points 2 months ago (1 children)

Yeah that's what im using right now. But i want to add security by using a certificate when logging in

[–] [email protected] 0 points 2 months ago

Add a certificate to the endpoint using your reverse proxy

[–] [email protected] 1 points 2 months ago* (last edited 2 months ago) (1 children)

I have a self-hosted Baikal server with self-signed CA on Android 14 and it works.

However, I didn't had to add the certificate to Davx⁵ itself. Adding a rootCA into your device and your reverse proxy handling the request should work as expected over https.

Those kind of things are difficult to troubleshoot, this could be:

  • Bad rootCA certificate, missing the necessary options ?
  • Wrong certificate handled by your reverse proxy ?
  • Radicale doesn't recognize your certificate extension ?
  • Wrong networking configuration ?
  • Bug ?
  • ....

We need more infos about your setup:

  • Do you use a reverse proxy ?
  • Had you already any success with this certificate within an other application ?
  • Any logs from your Android, Davx⁵?
[–] [email protected] 1 points 2 months ago

like the other commenter said, CA is different from a client cert. I'll try that and see how it goes