[Bug]: App not working with self-signed certificates #1308

Open
opened 2026-04-24 23:57:02 +02:00 by adam · 1 comment
Owner

Originally created by @TheLordDuck on GitHub (Nov 25, 2025).

I have verified that the bug is not already awaiting release

Yes

What was the Problem?

I have audiobookservice service with traefik working perfectly with the resolvers of letsencrypt to test the app for my homeserver and works perfectly but the moment I use my self-signed certificates the app throws an error

"failed to contact server read error ssl=0xb400006f24c6b958: Failure in ssl onessl internal:tlsv1_alert"

The web service with my CA certificates works great but not in the mobile app.

When ussing this certificate request from the traefik tls

in tls.yml of traefik config
tls:
certificates:
....
options:
internal:
clientAuth:
caFiles: "-----------"
clientAuthType: RequireAndVerifyClientCert
public:
minVersion: VersionTLS12

works with clientAuthType: RequestClientCert - Asks for a certificate but proceeds anyway if none is provided.

but should work with clientAuthType: RequireAndVerifyClientCert - Requires a certificate, which must be signed by a CA listed in clientAuth.caFiles or in clientAuth.secretNames

options from the traefik docs
https://doc.traefik.io/traefik/reference/routing-configuration/http/tls/tls-options/

Steps to Reproduce the Issue

  1. The error throws when is trying to connect to a domain with a self signed certificate.

What was Expected?

  1. Expected to accept and verify a certificate if the connection expects or needs one, because currenlty i think your app expects the connection to dont have a client certificate.

Phone Model

Nothing Phone (2)

Phone OS

Android 15

Audiobookshelf App Version

Android App - 0.10.1

Installation Source

Google Play Store

Additional Notes

No response

Originally created by @TheLordDuck on GitHub (Nov 25, 2025). ### I have verified that the [bug is not already awaiting release](https://github.com/advplyr/audiobookshelf-app/issues?q=is%3Aissue%20label%3A%22awaiting%20release%22) Yes ### What was the Problem? I have audiobookservice service with traefik working perfectly with the resolvers of letsencrypt to test the app for my homeserver and works perfectly but the moment I use my self-signed certificates the app throws an error "failed to contact server read error ssl=0xb400006f24c6b958: Failure in ssl onessl internal:tlsv1_alert" The web service with my CA certificates works great but not in the mobile app. When ussing this certificate request from the traefik tls in tls.yml of traefik config tls: certificates: .... options: internal: clientAuth: caFiles: "-----------" clientAuthType: RequireAndVerifyClientCert public: minVersion: VersionTLS12 works with clientAuthType: RequestClientCert - Asks for a certificate but proceeds anyway if none is provided. but should work with clientAuthType: RequireAndVerifyClientCert - Requires a certificate, which must be signed by a CA listed in clientAuth.caFiles or in clientAuth.secretNames options from the traefik docs https://doc.traefik.io/traefik/reference/routing-configuration/http/tls/tls-options/ ### Steps to Reproduce the Issue 1. The error throws when is trying to connect to a domain with a self signed certificate. ### What was Expected? 1. Expected to accept and verify a certificate if the connection expects or needs one, because currenlty i think your app expects the connection to dont have a client certificate. ### Phone Model Nothing Phone (2) ### Phone OS Android 15 ### Audiobookshelf App Version Android App - 0.10.1 ### Installation Source Google Play Store ### Additional Notes _No response_
adam added the bug label 2026-04-24 23:57:02 +02:00
Author
Owner
@nichwall commented on GitHub (Nov 25, 2025): Related to https://github.com/advplyr/audiobookshelf-app/issues/1152 and https://github.com/advplyr/audiobookshelf-app/issues/353
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/audiobookshelf-app#1308