Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable accepting self-signed certificate that are trusted by the OS #272

Open
thiagorb opened this issue Dec 26, 2022 · 4 comments
Open
Assignees
Labels
refinement Something that can work/look better

Comments

@thiagorb
Copy link

thiagorb commented Dec 26, 2022

What can be improved?
I'm able to add a self-signed certificate to iOS settings, so that Safari accepts it, but the same certificate won't be accepted by KeePassium.

The solution you'd like
Any of this would work:

  • Accept self-signed certificates (or add a toggle for that) that are trusted by the OS.
  • Show the invalid certificate and allow white-listing this specific certificate.
  • Allow selecting a pem file that matches the one used by the WebDAV server.

Additional context
I configured a WebDAV server on a PC on my local network, and would like to configure my other devices to sync with this WebDAV server, so I don't have to rely on any cloud storage. This works fine, but I would need to have a valid certificate. Trusting any certificate would be the same as dropping the SSL (some man in the middle could use a different certificate and act as a proxy), and I would like to be able to sync my DB on networks other than my own.

@thiagorb thiagorb added the refinement Something that can work/look better label Dec 26, 2022
@keepassium
Copy link
Owner

Thank you, Thiago, I will look into this.

@keepassium keepassium self-assigned this Dec 26, 2022
@lordyavin
Copy link

So what's the status here? I have the same problem.

@keepassium
Copy link
Owner

@lordyavin , still in the queue (the issue is open) with pretty low priority (two "thumbs up" in two years).

Have you tried these steps?

@a-dmg
Copy link

a-dmg commented Nov 20, 2024

@lordyavin , still in the queue (the issue is open) with pretty low priority (two "thumbs up" in two years).

Have you tried these steps?

Unfortunately, if I understand it well, this does not import the certificate to Keepassium's keystore. Keepassium needs to have a special feature to import certificates to its keystore and provide them when a server asks for them. Of course, you can do it as described here, but to my knowledge, this only makes them available in Safari/Mail or Apple apps. So synchronisation from Keepassium does not work.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
refinement Something that can work/look better
Projects
None yet
Development

No branches or pull requests

4 participants