macib
IImmich
•Created by macib on 6/10/2023 in #help-desk-support
Android app connection over HTTPS fails: "TLS/SSL communication failed: POST /oauth/config"
Attempting to connect to the server endpoint (https://immich-server.ddns.net:28376/api) fails with "TLS/SSL communication failed: POST /oauth/config". This is a brand new docker setup on Ubuntu Server. Nginx is acting as reverse proxy on the same machine to support HTTPS with a publicly trusted certificate. The problem only occurs from the Android app on the three devices tested. On iOS the app does connect taking to the login page. The Immich webpage is trusted by the browsers in all devices and logging in works. All operations (uploading, deleting, listing, etc) seem to function as expected from mobile and PC browsers.
Nginx debug log records an SSL handshake failure as the Android app errors out:
2023/06/09 17:04:50 [debug] 4811#4811: *2 SSL_do_handshake: -1
2023/06/09 17:04:50 [debug] 4811#4811: *2 SSL_get_error: 6
2023/06/09 17:04:50 [info] 4811#4811: *2 peer closed connection in SSL handshake while SSL handshaking, client: 192.168.1.115, server: 0.0.0.0:28376
2023/06/09 17:04:50 [debug] 4811#4811: *2 close http connection: 20
The Immich app log is empty.
If the app is pointed to the HTTP endpoint the error does not occur, even if going through the reverse proxy (after disabling HTTPS). So, I'd think that the problem is solely related to my nginx config, but then I wonder why the problem is restricted to the Android client. In any case, I'll appreciate suggestions.
I posted the config files on a GitHub issue. (Didn't want to make this post that long.) -> https://github.com/immich-app/immich/issues/2711
39 replies