CertPathValidatorException : Trust anchor for certification path not found about passman-android HOT 4 CLOSED

Hi @adminxana I should implement an "Accept insecure connections" switch or something like this (maybe next year, ... or never). But for a password manager I thought that would be a bad idea xD

I've written this FAQ about custom CAs with Passman Android.

https://github.com/nextcloud/passman-android/blob/master/FAQ.md#how-can-i-use-a-self-signed-certificate-to-connect-the-my-nextcloud-server

Hope that helps :)

from passman-android.

Hi @binsky08, thank you!

it's a bad idea if anyone could access it. But the service is only accessible from the local network (at home) and through a VPN, so most of the security issues should be solved (everything is well protected and firewalled at the network level).

The openssl tutorial is great, and working:

[Sun Nov 06 17:49:15.756576 2022] [mpm_prefork:notice] [pid 155852] AH00170: caught SIGWINCH, shutting down gracefully
[Sun Nov 06 17:49:16.131620 2022] [mpm_prefork:notice] [pid 155910] AH00163: Apache/2.4.54 (Debian) OpenSSL/1.1.1n configured -- resuming normal operations
[Sun Nov 06 17:49:16.131820 2022] [core:notice] [pid 155910] AH00094: Command line: '/usr/sbin/apache2'

It also serves the requests through :443 from the chrome extension, what it's great, and what I want to achieve with the android app somehow.

I'm not a programmer, but I do have a friend that could help implementing another secure connection sollution, such as token identification, maybe comming from the device that hosts the services. Could that work?

Thanks again :D

from passman-android.

you can already use SSO as login method if you have the official Nextcloud Files app installed and configured at your device

from passman-android.

Awesome! I had not tried this method, that way the app works perfectly. Thank you very much!

from passman-android.