nextcloud / nextcloud/ios

Run always in "trustCertificateError" if server accept client certificate (not needed for nextcloud) - Tasks proceed even if I click to NO to "trusted question"

Open
#2,384 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Swift
Stars
2.5k
Forks
1k
Avg merge
2d 18h
Merged PRs (30d)
13

Description

Steps to reproduce
  1. run nextcloud behind Haproxy with this bind options: bind *:443 ssl crt /etc/haproxy/certs ca-file /root/pki/ca.crt verify optional crt-ignore-err all
  2. open iOS app
  3. click through folders
Expected behaviour

First: There is nor error message about changed certificate shown or at least not shown anymore after submitting "yes" one time.

Actual behaviour

The error message attached is shown every time. "The certificate for this server seems to have changed". Clicking on certificate details shows always the correct nextcloud server certificate.

Additional, there is a Bug-inside-the-Bug. While the Error Message is shown, the App continue the current task. Which means, even if you say "NO", its already continued with the current taks.


Suspected cause:
I run nextclound behind an reverse proxy (haproxy) which also accept an client-certifacte which is used for an other service (no usage for nextcloud).
The real connection to nextcloud is still valid and all works as expected in the background. But the (empty) client certificate triggers the error message, but for an "unused" connection.

Screenshots

grafik

Environment data

iOS version: 16.3.1

Nextcloud iOS app version: 4.7.0.23

Server operating system: ubuntu 22.04

Web server: nginx behind haproxy

Database: PostgreSQL 14.7-0ubuntu0.22.04.1

PHP version: PHP 8.1.2-1ubuntu2.11

Nextcloud version: 25.0.5

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the iOS app's folder navigation against the supplied HAProxy bind configuration, then start at the trustCertificateError flow and the trusted-question handling. The issue names no files or tests; done means the certificate prompt is not repeatedly triggered for this setup and the current task waits for the user's decision.

Written by the indexing model from the issue text.

Assessment

Tech stack
ios, swift
Domain
mobile, networking, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.