self-signed certificates in vanadium don't work?

[kubuntu-newbie]

This could be just me not understanding how to configure it right. I posted this question on grapheneos forum but got no answers:

I'm trying to access a web server (Nextcloud) that uses self-signed certificate on a local network using Vanadium. I have installed this certificate in the Settings - Security - More Security Settings - Encryption & credentials - Install a certificate - CA certificate and it shows up under Trusted credentials / User.
When I try to access the server using https through Vanadium I get an error NET:ERR_CERT_AUTHORITY_INVALID.
I have no problems using the same self-signed certificate in iOS on iPhone or on any of the computers (Windows, Linux) on my local network.
What am I doing wrong? How do I get it to work?

Thank you.

[thestinger]

There's something wrong with your certificate and the same thing would happen in Chrome on the stock Pixel OS.

[rusty-snake]

For me that worked.

You can tip left in the address bar in vanadium (red warning), then on Details (text link) and then on certificate information to see more details.

[thestinger]

Expiry shouldn't be more than 1 year ahead, etc. It still needs a valid CN.

[kubuntu-newbie]

thank you!
got it sorted out

[kanthans]

thank you! got it sorted out

@kubuntu-newbie, What was the issue - is it the number of years?

@thestinger , we have our internal CA and we have issued certificate to internal server. The root CA Certificate is trusted in the OS. While the applications work seemlessly, the vanadium browser throws error. Should the certificate not more than 1 year. We have issued certificate for 2 years internally.

[thestinger]

1 year expiry or less or required. You should have automatic renewal so the expiry shouldn't be long. It's likely going to drop to 90 days at some point.

[kanthans]

1 year expiry or less or required. You should have automatic renewal so the expiry shouldn't be long. It's likely going to drop to 90 days at some point.

Thank you for your quick response.