Can’t turn off „allow self-signed ssl certificates“ anymore
I can’t turn off the setting „allow self-signed ssl certificates“ anymore.
1. I turned this on in past once out of curiosity
2. now I can’t turn it off anymore and I’m sure it was possible to turn off in past
3. I’m using self signed certificate but it’s with a root certificate that has been accepted in my device so it should actually not be seen as a self signed certificate (as in „accept the risk“ type of thing)
4. even when I switch to actual real ssl over remote url / domain that has a true ssl cert this setting persists
14 Replies
:wave: Hey @smileBeda,
Thanks for reaching out to us. Please carefully read this message and follow the recommended actions. This will help us be more effective in our support effort and leave more time for building Immich :immich:.
References
- Container Logs:
docker compose logs docs
- Container Status: docker ps -a docs
- Reverse Proxy: https://immich.app/docs/administration/reverse-proxy
- Code Formatting https://support.discord.com/hc/en-us/articles/210298617-Markdown-Text-101-Chat-Formatting-Bold-Italic-Underline#h_01GY0DAKGXDEHE263BCAYEGFJA
Checklist
I have...
1. :ballot_box_with_check: verified I'm on the latest release(note that mobile app releases may take some time).
2. :ballot_box_with_check: read applicable release notes.
3. :ballot_box_with_check: reviewed the FAQs for known issues.
4. :ballot_box_with_check: reviewed Github for known issues.
5. :ballot_box_with_check: tried accessing Immich via local ip (without a custom reverse proxy).
6. :ballot_box_with_check: uploaded the relevant information (see below).
7. :blue_square: tried an incognito window, disabled extensions, cleared mobile app cache, logged out and back in, different browsers, etc. as applicable
(an item can be marked as "complete" by reacting with the appropriate number)
Information
In order to be able to effectively help you, we need you to provide clear information to show what the problem is. The exact details needed vary per case, but here is a list of things to consider:
- Your docker-compose.yml and .env files.
- Logs from all the containers and their status (see above).
- All the troubleshooting steps you've tried so far.
- Any recent changes you've made to Immich or your system.
- Details about your system (both software/OS and hardware).
- Details about your storage (filesystems, type of disks, output of commands like fdisk -l and df -h).
- The version of the Immich server, mobile app, and other relevant pieces.
- Any other information that you think might be relevant.
Please paste files and logs with proper code formatting, and especially avoid blurry screenshots.
Without the right information we can't work out what the problem is. Help us help you ;)
If this ticket can be closed you can use the /close command, and re-open it later if needed.
Successfully submitted, a tag has been added to inform contributors. :white_check_mark:
with a root certificate that has been accepted in my device so it should actually not be seen as a self signed certificateImmich doesn't use the system store
As I mention, I can’t turn it off even if I switch to the network tjat will/is supposed to use the real domain with real certificate.
Or perhaps better formulated: if I switch networks it doesn’t use the url it’s supposed to use, it keeps saying „current server address > my local lan“ and the setting still can’t switch off.
Even if I’m on mobile, which by definition can’t access my lan over 4g
Also, whats the point in having the option to NOT accept such certs if then we disable it anyway and blanket accept them?
It literally defies the logic of not accepting self signed CERTs. Then we can as well just remove the setting altogether
The setting obviously can be and usually is off. It can't be turned off if it's on and connected to a self signed cert, probably for a good reason but I'm not particularly informed on that functionality
In general, using self signed certs and such with Immich is considered experimental and not well supported
No, it’s not for me.
I’ve logged out, and logged back in with real domain and ssl, which fully resets the networking settings
The accept self signed is still turned on and can’t be turned off.
Idk what to tell you, it's definitely off in my app
🙂
I believe it can only be changed on the first screen before connecting to the server
This is not how it was before (maybe 3 release ago, or even just one)
I’ll try to log out again and uncheck it on the first screen then, a moment please.
1. logged out
2. closed app
3. on first screen turned off setting
4. logged in with LOCAL lan (self signed certificate with accepted root)
5. setting is TURNED OFF
6. everything works
7. can’t turn on setting anymore!
lol.
Nope, this ain’t working as it should haha. Not on my end.
iPhone XR for what it’s worth.
Nothing's changed about the code for this setting for over a year
But if you think there's a bug I suggest you post in #15230
Well that’s weird because it def changed - I even have screenshots somewhere of it being „active“ as in blue, not greyed out, I’ll have to dig them out.
So you can turn it off and on freely?
I think you can only toggle it from the login screen, i,e, before you login.