Allow self-signed certificates for https connections to locally deployed services #929

New Issue

2026-04-24T23:42:40+02:00

adam commented

2026-04-24 23:42:40 +02:00

Originally created by @schloege on GitHub (Mar 24, 2024).

Steps to reproduce

deploy audiobookshelf-app in home network (docker, reverse proxy traefik etc,, internal DNS)
use self-signed certificate for https
connect to service within local network from android app

Expected behaviour

Connect to server as indented

Actual behaviour

Error: Failed to contact server. (ERROR: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.)

Environment data

Audiobookshelf Version:
0.9.73-beta

Android App?
iOS App?

Android Issue

Android version:
9

Device model:
Galaxy S8

Stock or customized system:
Stock

iOS Issue

iOS Version:

iPhone model:

Originally created by @schloege on GitHub (Mar 24, 2024). ### Steps to reproduce 1. deploy audiobookshelf-app in home network (docker, reverse proxy traefik etc,, internal DNS) 2. use self-signed certificate for https 3. connect to service within local network from android app ### Expected behaviour - Connect to server as indented ### Actual behaviour - Error: Failed to contact server. (ERROR: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.) ### Environment data Audiobookshelf Version: 0.9.73-beta - [x] Android App? - [ ] iOS App? #### Android Issue Android version: 9 Device model: Galaxy S8 Stock or customized system: Stock #### iOS Issue iOS Version: iPhone model:

adam added the bug label 2026-04-24 23:42:40 +02:00

adam closed this issue

2026-04-24 23:42:41 +02:00

adam commented

2026-04-24 23:42:42 +02:00

@advplyr commented on GitHub (Mar 25, 2024):

What is needed for this? I'm not aware of anything to change in the app for this. I thought that these self-signed certs were something you registered on the device and is not associated with a particular app.

@advplyr commented on GitHub (Mar 25, 2024): What is needed for this? I'm not aware of anything to change in the app for this. I thought that these self-signed certs were something you registered on the device and is not associated with a particular app.

adam commented

2026-04-24 23:42:43 +02:00

@schloege commented on GitHub (Apr 22, 2024):

Hi @advplyr, sorry for not responding earlier and thanks for getting back to me so quickly ;) I really like the app and have started hosting and using it regularly. However I need o use http to connect to my server as the self signed certificate I added to my phone does not help in connecting. The issue could be me being too dumb to set this up correctly but I am kind of out of ideas. Do you have any experience with this?

@schloege commented on GitHub (Apr 22, 2024): Hi @advplyr, sorry for not responding earlier and thanks for getting back to me so quickly ;) I really like the app and have started hosting and using it regularly. However I need o use http to connect to my server as the self signed certificate I added to my phone does not help in connecting. The issue could be me being too dumb to set this up correctly but I am kind of out of ideas. Do you have any experience with this?

adam commented

2026-04-24 23:42:47 +02:00

@tylerhunt commented on GitHub (Mar 1, 2025):

You need to add the self-signed root CA to your devices. At least on iOS, multi-step process where after adding it, you have to install it under Settings → General → VPN & Device Management. Then, you have to go under Settings → General → About → Certificate Trust Settings and enable full trust for the newly added root CA.

Details here: https://support.apple.com/en-us/102390

@tylerhunt commented on GitHub (Mar 1, 2025): You need to add the self-signed root CA to your devices. At least on iOS, multi-step process where after adding it, you have to install it under Settings → General → VPN & Device Management. Then, you have to go under Settings → General → About → Certificate Trust Settings and enable full trust for the newly added root CA. Details here: https://support.apple.com/en-us/102390

adam commented

2026-04-24 23:42:54 +02:00

@TheLordDuck commented on GitHub (Dec 2, 2025):

You need to add the self-signed root CA to your devices. At least on iOS, multi-step process where after adding it, you have to install it under Settings → General → VPN & Device Management. Then, you have to go under Settings → General → About → Certificate Trust Settings and enable full trust for the newly added root CA.

Details here: https://support.apple.com/en-us/102390

Not enough to make it work in the app, even changed compose file of traefik to accept certificate but not validate it, like this works, but the moment it has to validate it doesnt work.

@TheLordDuck commented on GitHub (Dec 2, 2025): > You need to add the self-signed root CA to your devices. At least on iOS, multi-step process where after adding it, you have to install it under Settings → General → VPN & Device Management. Then, you have to go under Settings → General → About → Certificate Trust Settings and enable full trust for the newly added root CA. > > Details here: https://support.apple.com/en-us/102390 Not enough to make it work in the app, even changed compose file of traefik to accept certificate but not validate it, like this works, but the moment it has to validate it doesnt work.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/audiobookshelf-app#929