Skip to content

Jellyfin Desktop won't use local CA trust store on Fedora #1113

@castigo86

Description

@castigo86

Describe the bug
Jellyfin Desktop won't recognise my Jellyfin server cert by the self signed CA in Fedora internal trust store. It is recognised and used by jellyfin media player on the same system.

Error string in logs

resolveUrl: error: "Handshake SSL non riuscito: Il certificato dell'emittente di un certificato cercato localmente non può essere trovato"

translated in

failed SSL handshake: issuing certificate authority not found in local search

Flatpak installed browsers automatically recognise the CA as valid without manually adding it in the browser's depot.

To Reproduce
Import a custom CA in Fedora trust store either by coping it into trust anchors or by importing it using the trust command, Update the ca. Verify the Cert Auth has been successfully added in the trust anchors.

Install Jellyfin Desktop flatpak via Discover.

Set your local jellyfin server URL with https. Attempt to connect: the cert is being served by haproxy reverse proxy on standard port 443.

Jellyfin desktop starts and endless loop and fails to recognize the server's cert.

Expected behavior
Jellyfin should recognise the server's cert as valid because the CA is in the local trust store, as jellyfin media player does.

Desktop

  • OS: Fedora 43 KDE
  • Version: 2.0
  • KDE 6.5.4
  • QT 6.10.1
  • Wayland
  • Installation Method: flatpak via Discovery

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    Status

    No status

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions