Beta Backup / Browsing does not function when using MTLS for Client Authentication
Setup: Server 1.140.1 , Apple IOS Immich 1.140.1
I've noticed on my IOS clients, Backup will not function if I require a Client Certificate for authentication. It seems the process does not even start, and I am not seeing anything in the client logs. My server is behind a proxy server that requires MTLS. If I move the client to connect to the immich server direct (without MTLS), beta backup works fine without issue.
Also, I am unable to view any server side video when under MTLS, but view them fine without MTLS. Again, this is in Beta mode.
If I move back to non beta mode, everything works under MTLS without issue.
I'm happy to provide logs, not seeing much in them though around SSL errors, I supect its not even sendign client cert..
I do see this error in beta mode:
2025-08-30 21:36:25.791786 | warning | StorageRepository | Error getting file for asset D8CF4042-FC9B-4179-8853-3AC588221651/L0/001 | PlatformException(__NSCFString, Asset D8CF4042-FC9B-4179-8853-3AC588221651/L0/001 does not have available resources., null, null) |
5 Replies
:wave: Hey @mrBunsenHondew,
Thanks for reaching out to us. Please carefully read this message and follow the recommended actions. This will help us be more effective in our support effort and leave more time for building Immich :immich:.
References
- Container Logs:
docker compose logs docs
- Container Status: docker ps -a docs
- Reverse Proxy: https://immich.app/docs/administration/reverse-proxy
- Code Formatting https://support.discord.com/hc/en-us/articles/210298617-Markdown-Text-101-Chat-Formatting-Bold-Italic-Underline#h_01GY0DAKGXDEHE263BCAYEGFJA
Checklist
I have...
1. :ballot_box_with_check: verified I'm on the latest release(note that mobile app releases may take some time).
2. :ballot_box_with_check: read applicable release notes.
3. :ballot_box_with_check: reviewed the FAQs for known issues.
4. :ballot_box_with_check: reviewed Github for known issues.
5. :ballot_box_with_check: tried accessing Immich via local ip (without a custom reverse proxy).
6. :ballot_box_with_check: uploaded the relevant information (see below).
7. :ballot_box_with_check: tried an incognito window, disabled extensions, cleared mobile app cache, logged out and back in, different browsers, etc. as applicable
(an item can be marked as "complete" by reacting with the appropriate number)
Information
In order to be able to effectively help you, we need you to provide clear information to show what the problem is. The exact details needed vary per case, but here is a list of things to consider:
- Your docker-compose.yml and .env files.
- Logs from all the containers and their status (see above).
- All the troubleshooting steps you've tried so far.
- Any recent changes you've made to Immich or your system.
- Details about your system (both software/OS and hardware).
- Details about your storage (filesystems, type of disks, output of commands like fdisk -l and df -h).
- The version of the Immich server, mobile app, and other relevant pieces.
- Any other information that you think might be relevant.
Please paste files and logs with proper code formatting, and especially avoid blurry screenshots.
Without the right information we can't work out what the problem is. Help us help you ;)
If this ticket can be closed you can use the /close command, and re-open it later if needed.I would mention it in #15230
MTLS is experimental/best effort so things may not work
Thanks @Zeus