Android app don't connect to server with self cert

Help
1

Hi,
Sorry if I don’t use right terms, I am n00b.
So, I installed Bitwardenrs in docker container, with self created certs. From my deskop, I can connect to server using IP address, but I could not connect from my Android phone, using server IP (Wi-Fi, connected to my local network) I receive this error msg

11

Edit: In my former setup, I have domain.duckns.org with nginx reverse proxy and Lets encrypt, but now, I prefer not to open ports and connect Bitwarden_rs to internet.

1 Like
2

It is not recommended to use self-signed certs, because it causes these kind of issues.
Please see:

1 Like
3

@BlackDex thank you for answer.

I use Caddy with DNS challenge from Using Docker Compose · dani-garcia/bitwarden_rs Wiki · GitHub. Obviously, I miss something, because I receive “The connection has timed out” error.
My docker-compose.yml:

version: '3'

services:
  bitwarden:
    image: bitwardenrs/server:latest
    container_name: bitwarden
    restart: always
    environment:
      - WEBSOCKET_ENABLED=true  # Enable WebSocket notifications.
    volumes:
      - /srv/appdata/bw_data_https:/data

  caddy:
    image: caddy:2
    container_name: caddy
    restart: always
    ports:
      - 80:80
      - 443:443
    volumes:
      - ./caddy:/usr/bin/caddy  # Your custom build of Caddy.
      - ./Caddyfile:/etc/caddy/Caddyfile:ro
      - ./caddy-config:/config
      - ./caddy-data:/data
    environment:
      - DOMAIN=mydomain.duckdns.org  # Your domain.
      - EMAIL=myemail       # The email address to use for ACME registration.
      - DUCKDNS_TOKEN=my DuckDNS token         # Your Duck DNS token.
      - LOG_FILE=/data/access.log

And I DO NOT open the ports on my router.
Stupid question: what I’m doing wrong?

4

@damaskin I was facing same error during last few days. Then i saw your post. Thanks for doing this for me. :slightly_smiling_face:

5

how did you create the certificate ? did you try adding the certificate to trusted certs on your phone ?

6

Well, I don’t. :slight_smile: I try to insert

ROCKET_TLS: '{certs = "/ssl/bitwarden.crt", key = "/ssl/bitwarden.key"}'
LOG_FILE: '/data/bitwarden.log'
SIGNUPS_ALLOWED: 'true'
ADMIN_TOKEN: longstringhere

but have an error from docker-compose