Unable to scan QR Code

Hi,

I have a problem with scanning QR code for mobile app.

What I’ve done (https://blog.passbolt.com/passbolt-mobile-app-is-here-e36f6cb9339b):

  1. Added those variables to my docker container:
PASSBOLT_PLUGINS_JWT_AUTHENTICATION_ENABLED=TRUE
PASSBOLT_PLUGINS_MOBILE_ENABLED=TRUE
  1. Created folder:
sudo mkdir -m=770 /etc/passbolt/jwt
sudo chown www-data:www-data /etc/passbolt/jwt/
  1. Created jwt keys
sudo su -s /bin/bash -c "/usr/share/php/passbolt/bin/cake passbolt create_jwt_keys" www-data

Next, I’ve open the browser, selected mobile app, clicked Start and I’ve scanned QR code.
The information that I’ve got is Something went wrong.

I’ve checked the logs and it seems to be in some loop because only those appears all the time:

Logs:

6 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:04:55 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:04:55 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:04:55 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:04:56 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
2021/11/28 19:04:56 [info] 151#151: *2025 peer closed connection in SSL handshake while SSL handshaking, client: 87.207.107.20, server: 0.0.0.0:443
87.207.107.20 - - [28/Nov/2021:19:04:56 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:04:56 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:04:57 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:04:57 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:04:57 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:04:58 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:04:58 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:04:58 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:04:59 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:04:59 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:04:59 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:00 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:00 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:00 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:01 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:01 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:01 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:02 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:02 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:02 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:03 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:03 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:03 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:04 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:04 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:04 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:05 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:05 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:05 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"
87.207.107.20 - - [28/Nov/2021:19:05:06 +0100] "GET /mobile/transfers/3ec19563-b946-43de-98ea-0a0f9f901426.json?api-version=v2 HTTP/2.0" 200 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.34"

Environment:
Passbolt: docker
Version: 3.3.1
Mobile: Passbolt Android App version 1.0.0

Additional information
On iOS works without any problem.
The issue occurs only on Android app

Having the same issue - no IOS devices to test with though.

It tries to scan the QR code, then says “Something went wrong” or just never scans it.

@solaire, if you go to your passbolt instance url through chrome browser on your mobile device, can you reach it?

@max, yes I can reach it.

Ok, as I explained here Android App Something went wrong - #10 by max
We will release a new version of the Android App with a fix that should unlock you.

I will keep you posted :slight_smile:

Thanks!

1 Like

After upgrading Passbolt Mobile App to version 1.1.0 and Passbolt to version 3.4.0-ce I’m still not able to connect Mobile App to my Passbolt using an Android device.

1 Like

Hi @solaire :wave:

If I understand well, you are able to use passbolt app on iOS but it fails on Android. Can you tell us more about your environment ?

Which Android phone model do you own ? With which android version ? Are you using a custom Android ROM ? rooted ?
Are you using HTTPS ? If yes, how do you manage certificates ?
Are you able to reach your self-hosted passbolt instance in a web browser from your Android phone ?

Thanks !

Hi @AnatomicJC

Yes, I’m able to use passbolt app on iOS.

My environment:
Phone: Samsung Galaxy A40
OS: Android 11
Custom ROM: No
HTTPS: Yes, I’ve bought an SSL certificate

I’m able to reach my passbolt from my Android phone.

Best regards :slight_smile:

Thanks for your answer. I thought about one more thing we can check.

Can you check if your certificate is well configured by testing your instance here: SSL Checker

As an example, a wrong result will show you a missing intermediate chain certificate:

A well configured SSL certificate looks like this:

I already seen some webservers working on some browsers and not on others because of this missing intermediate certificate.

Let me know :slight_smile:

Can you also check your ssl config here: SSL Server Test (Powered by Qualys SSL Labs) and check if you only have tls1.2 and tls1.3 enabled ?

Thanks !

And there is the problem :slight_smile:

About TLS

TLS 1.3 Yes
TLS 1.2 Yes
TLS 1.1 No
TLS 1.0 No
SSL 3 No
SSL 2 No

How can I fix that or it can’t be fixed? :slight_smile:
I’m using Microsoft Edge browser :wink:

@AnatomicJC

I fixed that problem and I was able to connect my mobile app to passbolt :slight_smile:

Thanks a lot for helping and solving the problem!

I’ve used What’s My Chain Cert? (whatsmychaincert.com) to regenerate new certificate, copied to my server, restarted passbolt and that’s helped :slight_smile:

THANKS!

1 Like

Great, thanks for your feedback, I’m pretty sure it will help others who have some difficulties to use the mobile app.
Setup a SSL certificate is not so obvious.