[Help wanted] "Failed to build TLS acceptor: received fatal alert: CertificateUnknown"

[Gontier-Julien]

So i was trying to setup rust-rpxy all worked great until i was trying to connect bitwarden on android to the vaultwarden instance behind rust-rpxy, everything works fine but idk what to do here...

2024-12-07T00:05:15.939611Z DEBUG rpxy rpxy_lib::proxy::proxy_main:191: HTTP/2 or 1.1: SNI in ClientHello: "domain"
2024-12-07T00:05:15.945788Z ERROR rpxy rpxy_lib::proxy::proxy_main:265: Failed to build TLS acceptor: received fatal alert: CertificateUnknown

Maybe X-Real-IP header is missing? And if so how can i add it to rust-rpxy?

[junkurihara]

It seems to be a certificate failure. Please check its format and validity. Also, if you use self-signed certificate, check if you use an appropriate binary built for native certificates. If you do mTLS, please check the format of your client CA certificate as well.

[junkurihara]

Also please check the configuration of Bitwarden android.

Especially the domain name in the url since it is the most important to find the matched certificate and verify its validity with the common name (domain name) specified in the certificate.

I am hosting vaultwarden behind rpxy too, which can be connected from Bitwarden android flawlessly. So I believe it is from some problems in your configuration.