This may be more of an Android issue than self-hosting, but i run Radicale on my personal server to host caldav/carddav services. I want to login with uname&pword with a certificate. I found this video in Davx5 github page showing that a user can select the cert:

video

I generated a self-signed cert from my server and installed that to my Android phone via Settings > Security&Privacy > Encryption&Credentials. But i dont get the same as the video. It keeps telling me No certificate found

Clicking the install button and selecting my cert will say

Install CA certificates in Settings This certificate from null must be installed in Settings. Only install CA certificates from organizations you trust.

  • hendrik@palaver.p3x.de
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    27 days ago

    Do you install the CA certificate or the client certificate? Because both aren’t the same. The app needs to authenticate with a client certificate file. The server has a server certificate that is checked against the CA certificate. So you’d install that (CA) in the android system certificate store and additionally give a client certificate file to the app.

    • heyfrancisOP
      link
      fedilink
      English
      arrow-up
      2
      ·
      26 days ago

      Oh i thought they are the same. I look into how to create a self-signed CA and see if it helps

    • heyfrancisOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      27 days ago

      Yeah that’s what im using right now. But i want to add security by using a certificate when logging in

  • N0x0n
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    27 days ago

    I have a self-hosted Baikal server with self-signed CA on Android 14 and it works.

    However, I didn’t had to add the certificate to Davx⁵ itself. Adding a rootCA into your device and your reverse proxy handling the request should work as expected over https.

    Those kind of things are difficult to troubleshoot, this could be:

    • Bad rootCA certificate, missing the necessary options ?
    • Wrong certificate handled by your reverse proxy ?
    • Radicale doesn’t recognize your certificate extension ?
    • Wrong networking configuration ?
    • Bug ?

    We need more infos about your setup:

    • Do you use a reverse proxy ?
    • Had you already any success with this certificate within an other application ?
    • Any logs from your Android, Davx⁵?
    • heyfrancisOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      26 days ago

      like the other commenter said, CA is different from a client cert. I’ll try that and see how it goes