-
Subject of the issueImport errors with KeePass 1.0 CSV format Deployment environment
Steps to reproduce
Expected behaviourobvious Actual behaviourError message in the web vault only says that nothing was imported Troubleshooting dataMany entries like this: |
Beta Was this translation helpful? Give feedback.
Replies: 9 comments 12 replies
-
|
The log message doesn't show anything related to the import, it only shows something related to websocket connections. All import/convert related items are done by the clients, and are send to the server as a Bitwarden cipher/item. It could very well be resolved already with a new web-vault version. |
Beta Was this translation helpful? Give feedback.
-
|
I've cleared the logs and triggered the error again. There are a few lines before the tungstenite lines that usually aren't there, but my guess is they also don't show any relevant information.
Besides keeping the ENABLE_WEBSOCKET variable at true, I've actually never done any additional setup for the Websockets. Could this be an issue? From the title "Enabling WebSocket notifications" I didn't pay that much attention to that section. But judging from the browser's dev tools they don't seem to be working as I have no "WS/WebSockets" entries. In the nginx config, I have under |
Beta Was this translation helpful? Give feedback.
-
|
If it only shows those logs then that indicates the import is never send to the server and thus not received by Vaultwarden. Check the developer console of the browser (F12) and see if there are any errors there. |
Beta Was this translation helpful? Give feedback.
-
|
Beta Was this translation helpful? Give feedback.
-
|
Try the |
Beta Was this translation helpful? Give feedback.
-
|
Or, provide a minimal example which does not contain any real secrets and test if that fails, if that also fails, provide that file so we can try to test it. |
Beta Was this translation helpful? Give feedback.
-
Just tried with this very simple example (copied into the import text box) and it also fails. |
Beta Was this translation helpful? Give feedback.
-
Worst case I can try to setup Vaultwarden with Docker, as it doesn't seem to use as much storage as feared. But I'd have to figure out if that even can be run through a typical nginx installation, as converting that to a Docker installation isn't an option since too many services aren't containerized on that server. |
Beta Was this translation helpful? Give feedback.
-
|
So, I was able to set up vaultwarden with Docker now. My compose.yml contains the string "image: vaultwarden/server:testing" which should mean I'm using the testing image. I tried to reproduce this, but now I notice when creating the "MyVault" folder in the vault, it isn't being created. I can't say for certain if that was already the case with the .deb package, so I didn't even try to import the csv. Yet again, the Vaultwarden logs don't contain anything helpful, but this is what the browser's dev console says: And this is what the nginx access log says, but I doubt it's any relevant: |
Beta Was this translation helpful? Give feedback.
-
|
Trying with Firefox instead of Chrome, I see these additional messages in the browser console: To me this looks like some Content-Security-Policy Vaultwarden must be setting itself - as my Nginx config isn't setting any - that's interfering. Judging from the console, these are being set: Is there any way to disable them, so I can enact them through Nginx and remove/add whatever is necessary or not needed? And why the chrome-extension entries? |
Beta Was this translation helpful? Give feedback.
-
|
There are no The extension entries are there so that extensions actually work for stuff like MFA which loads in a iframe kinda way. Without those entries those extensions are not allowed to load them, and the extension will be useless. So, nothing out of the ordinary there. |
Beta Was this translation helpful? Give feedback.
-
|
Weird. |
Beta Was this translation helpful? Give feedback.
-
|
But are you able to create a minimal example which also fails? |
Beta Was this translation helpful? Give feedback.
-
I have three days ago. And it still fails. |
Beta Was this translation helpful? Give feedback.
-
|
Ow, wait i didn't noticed the very small example in the comment |
Beta Was this translation helpful? Give feedback.
-
|
I've just tested if maybe the tables in the PostgreSQL database where malformed by droping the whole schema. It didn't fix anything, but I noticed that there doesn't seem to be an option to create a folder inside a vault other than the default "My vault". Even if I select the new vault that was created for the organization I set up and select New -> Folder on the top right, it will create that folder inside the "My vault", not the other one. If the missing main folder is the reason why I can't import to that vault, how do I create that main folder? |
Beta Was this translation helpful? Give feedback.
-
|
There is probably nothing on the server side that will have anything to do with this. Again, all is handled by the client, and send to the server in a Bitwarden format. Since there is nothing send to the server as you can see in the logs, it already fails on the client side. I also noticed you mention KeePass 1.0, i just checked again a bit better, and that isn't in the list anywhere. Since the clients handle the imports and conversion and this project does not maintain the clients it's a bit hard for us to specifically help here. My best bet would be to export it in an other format, or convert it in such a way that it will match either bitwarden CSV or any other CSV which is supported. I took a quick look at the KeePass v1.x code and maybe the XML format is the same for v1 as for v2, but i don't know. Else i would suggest to convert the CSV to match bitwarden's format as described here: https://bitwarden.com/help/condition-bitwarden-import/ |
Beta Was this translation helpful? Give feedback.
-
|
Then I'm confused by the Vaultwarden Wiki entry, as it states Keepass CSVs are imported at the organization level, while importing from a XML I'd have to move the entries from my user to the organization level. What other formats are handled the same way as Keepass CSVs? |
Beta Was this translation helpful? Give feedback.
-
|
The wiki is community maintained and could be outdated or invalid even. It could very-well be that that specific import feature has been removed, it is also not listed in there Import & Export FAQs |
Beta Was this translation helpful? Give feedback.
-
|
Good to know |
Beta Was this translation helpful? Give feedback.
-
|
Then the last question I have: how am I supposed to create folders inside of that second vault instead of my default one when I want to enter items manually? |
Beta Was this translation helpful? Give feedback.
There is probably nothing on the server side that will have anything to do with this. Again, all is handled by the client, and send to the server in a Bitwarden format. Since there is nothing send to the server as you can see in the logs, it already fails on the client side.
I also noticed you mention KeePass 1.0, i just checked again a bit better, and that isn't in the list anywhere.
You also mentioned your self that KeePassXc is listed and wondered if that is the same format, probably not, but i do not know.
Since the clients handle the imports and conversion and this project does not maintain the clients it's a bit hard for us to specifically help here.
My best bet would be to export i…