Bitwarden native mobile clients fail sync with invalid ssh-key entries #287

Closed
opened 2025-10-09 16:20:39 +03:00 by OVERLORD · 15 comments
Owner

Originally created by @hegedussz on GitHub.

Vaultwarden Support String

Your environment (Generated via diagnostics page)

  • Vaultwarden version: v1.32.7
  • Web-vault version: v2024.6.2c
  • OS/Arch: linux/x86_64
  • Running within a container: true (Base: Debian)
  • Database type: SQLite
  • Database version: 3.46.0
  • Environment settings overridden!: true
  • Uses a reverse proxy: true
  • IP Header check: true (X-Real-IP)
  • Internet access: true
  • Internet access via a proxy: false
  • DNS Check: true
  • Browser/Server Time Check: true
  • Server/NTP Time Check: true
  • Domain Configuration Check: true
  • HTTPS Check: true
  • Websocket Check: true
  • HTTP Response Checks: true

Vaultwarden Build Version

1.32.7

Deployment method

Official Container Image

Custom deployment method

No response

Reverse Proxy

nginx

Host/Server Operating System

Linux

Operating System Version

Ubuntu 22.04

Clients

iOS

Client Version

2024.12.0 (1740)

Steps To Reproduce

  1. Upgrade Vaultwarden
  2. Setting a variables
  • name: EXPERIMENTAL_CLIENT_FEATURE_FLAGS
    value: ssh-key-vault-item,ssh-agent
  1. Login to Bitwarden client
  2. Bitwarden sync vault

Later deleted the variables

Expected Result

The synchronisation was successful

Actual Result

Synchronisation does not work, vault not updated, not loading

Logs

No response

Screenshots or Videos

IMG_2222

Additional Context

No response

Originally created by @hegedussz on GitHub. ### Vaultwarden Support String ## Your environment (Generated via diagnostics page) * Vaultwarden version: v1.32.7 * Web-vault version: v2024.6.2c * OS/Arch: linux/x86_64 * Running within a container: true (Base: Debian) * Database type: SQLite * Database version: 3.46.0 * Environment settings overridden!: true * Uses a reverse proxy: true * IP Header check: true (X-Real-IP) * Internet access: true * Internet access via a proxy: false * DNS Check: true * Browser/Server Time Check: true * Server/NTP Time Check: true * Domain Configuration Check: true * HTTPS Check: true * Websocket Check: true * HTTP Response Checks: true ### Vaultwarden Build Version 1.32.7 ### Deployment method Official Container Image ### Custom deployment method _No response_ ### Reverse Proxy nginx ### Host/Server Operating System Linux ### Operating System Version Ubuntu 22.04 ### Clients iOS ### Client Version 2024.12.0 (1740) ### Steps To Reproduce 1. Upgrade Vaultwarden 2. Setting a variables - name: EXPERIMENTAL_CLIENT_FEATURE_FLAGS value: ssh-key-vault-item,ssh-agent 3. Login to Bitwarden client 4. Bitwarden sync vault Later deleted the variables ### Expected Result The synchronisation was successful ### Actual Result Synchronisation does not work, vault not updated, not loading ### Logs _No response_ ### Screenshots or Videos ![IMG_2222](https://github.com/user-attachments/assets/e1e2e868-7749-4f19-8ce0-f63667352d03) ### Additional Context _No response_
OVERLORD added the bug label 2025-10-09 16:20:39 +03:00
Author
Owner

@BlackDex commented on GitHub:

If there are any invalid ssh-key entries this will happen.
Check your ssh-key entries if delete the invalid items, also from you trash.

@BlackDex commented on GitHub: If there are any invalid ssh-key entries this will happen. Check your ssh-key entries if delete the invalid items, also from you trash.
Author
Owner

@BlackDex commented on GitHub:

The web-vault doesn't support this (yet), so that isn't strange.

@BlackDex commented on GitHub: The web-vault doesn't support this (yet), so that isn't strange.
Author
Owner

@tomitomas commented on GitHub:

yep, saw your previous answer ;)
i was just saying its not only ios, but can also happen with android

from my Phone, on the web version I'm not able to see any of the ssh key, and the trash is also empty ... weird

will check tomorrow if I'm able to see anything from desktop app.
--> for sur I made some test with only the name on an ssh key item, see my previous "issue" ... so there might be some in the trash at least (which I see now empty !)

@tomitomas commented on GitHub: yep, saw your previous answer ;) i was just saying its not only ios, but can also happen with android from my Phone, on the web version I'm not able to see any of the ssh key, and the trash is also empty ... weird will check tomorrow if I'm able to see anything from desktop app. --> for sur I made some test with only the name on an `ssh key` item, see my previous "issue" ... so there might be some in the trash at least (which I see now empty !)
Author
Owner

@tomitomas commented on GitHub:

same here on android app --> Version: 2024.12.0 (19597)

Screenshot_20250104_002506_Bitwarden.jpg

everything's OK with the desktop app, from where I've added the ssh keys.

edit : will have a look at #5322, tomorrow !

@tomitomas commented on GitHub: same here on android app --> Version: 2024.12.0 (19597) ![Screenshot_20250104_002506_Bitwarden.jpg](https://github.com/user-attachments/assets/c353120f-954a-4580-b276-ef602ac3e66d) everything's OK with the desktop app, from where I've added the ssh keys. edit : will have a look at #5322, tomorrow !
Author
Owner

@BlackDex commented on GitHub:

The mobile clients are more strict.
So it's there is any ssh key which is not valid, this will cause that error.

@BlackDex commented on GitHub: The mobile clients are more strict. So it's there is any ssh key which is not valid, this will cause that error.
Author
Owner

@BlackDex commented on GitHub:

I have created a fix for this. The only issue is that all the data of the key will be lost if just one of the mandatory fields is missing, as anything other than a valid encrypted string will still break the client. And we can't just replace it with something else.

@BlackDex commented on GitHub: I have created a fix for this. The only issue is that all the data of the key will be lost if just one of the mandatory fields is missing, as anything other than a valid encrypted string will still break the client. And we can't just replace it with something else.
Author
Owner

@Gerardv514 commented on GitHub:

If this is happening on both iOS & android, and is all related to ssh keys I’d suggest changing the title of this issue to reflect that. This helps keeps all previous issues of mobile clients not working separate, and specific to the actual issue.

@Gerardv514 commented on GitHub: If this is happening on both iOS & android, and is all related to ssh keys I’d suggest changing the title of this issue to reflect that. This helps keeps all previous issues of mobile clients not working separate, and specific to the actual issue.
Author
Owner

@BlackDex commented on GitHub:

Let me hijack this thread a little bit. I face again the issue that my Android Client cannot sync with my VW server. I tried to log-out and in again, and now I cannot even authenticate anymore against the server. Web client works, browser extensions, dekstop client also. But I do not have any ssh keys stored, didnt even know thats possible until now. Is there any other offending entry that I should remove/modify?

1.32.7 server image 2024.12.0 Android version

Couple weeks/month ago there were a similar occasion where it was solved by updating to latest server/client but that does not help now.

Start a new discussion, post your Support String (generate it via /admin/diagnostics), if possible, use adb logcat to see what the error is you get during login/sync.

@BlackDex commented on GitHub: > Let me hijack this thread a little bit. I face again the issue that my Android Client cannot sync with my VW server. I tried to log-out and in again, and now I cannot even authenticate anymore against the server. Web client works, browser extensions, dekstop client also. But I do not have any ssh keys stored, didnt even know thats possible until now. Is there any other offending entry that I should remove/modify? > > 1.32.7 server image 2024.12.0 Android version > > Couple weeks/month ago there were a similar occasion where it was solved by updating to latest server/client but that does not help now. Start a new discussion, post your Support String (generate it via `/admin/diagnostics`), if possible, use `adb logcat` to see what the error is you get during login/sync.
Author
Owner

@tomitomas commented on GitHub:

--> for sur I made some test with only the name on an ssh key item, see my previous "issue" ... so there might be some in the trash at least (which I see now empty !)

so indeed I had 2 sshe key items only with a name in the trash, only viewable on the desktop client app
I removed them, and now I'm able to use again the mobile app

@tomitomas commented on GitHub: > --> for sur I made some test with only the name on an `ssh key` item, see my previous "issue" ... so there might be some in the trash at least (which I see now empty !) so indeed I had 2 `sshe key` items only with a name in the trash, only viewable on the desktop client app I removed them, and now I'm able to use again the mobile app
Author
Owner

@miberecz commented on GitHub:

Let me hijack this thread a little bit.
I face again the issue that my Android Client cannot sync with my VW server. I tried to log-out and in again, and now I cannot even authenticate anymore against the server. Web client works, browser extensions, dekstop client also.
But I do not have any ssh keys stored, didnt even know thats possible until now.
Is there any other offending entry that I should remove/modify?

1.32.7 server image
2024.12.0 Android version

Couple weeks/month ago there were a similar occasion where it was solved by updating to latest server/client but that does not help now.

@miberecz commented on GitHub: Let me hijack this thread a little bit. I face again the issue that my Android Client cannot sync with my VW server. I tried to log-out and in again, and now I cannot even authenticate anymore against the server. Web client works, browser extensions, dekstop client also. But I do not have any ssh keys stored, didnt even know thats possible until now. Is there any other offending entry that I should remove/modify? 1.32.7 server image 2024.12.0 Android version Couple weeks/month ago there were a similar occasion where it was solved by updating to latest server/client but that does not help now.
Author
Owner

@mannp commented on GitHub:

I have created a fix for this. The only issue is that all the data of the key will be lost if just one of the mandatory fields is missing, as anything other than a valid encrypted string will still break the client. And we can't just replace it with something else.

Thanks :) I've deleted the ssh keys from main and bin and still get the same error above '(unable to process your request)'

Is there potentially another workaround at all while there is another official release of vaultwarden?

Thanks

@mannp commented on GitHub: > I have created a fix for this. The only issue is that all the data of the key will be lost if just one of the mandatory fields is missing, as anything other than a valid encrypted string will still break the client. And we can't just replace it with something else. Thanks :) I've deleted the ssh keys from main and bin and still get the same error above '(unable to process your request)' Is there potentially another workaround at all while there is another official release of vaultwarden? Thanks
Author
Owner

@BlackDex commented on GitHub:

I meant the testing tagged version of Vaultwarden.
But if you are using Nix, then no version there will fix your issue.

@BlackDex commented on GitHub: I meant the testing tagged version of Vaultwarden. But if you are using Nix, then no version there will fix your issue.
Author
Owner

@mannp commented on GitHub:

I meant the testing tagged version of Vaultwarden.
But if you are using Nix, then no version there will fix your issue.

Okay will wait for the next release 👍 thanks

@mannp commented on GitHub: > I meant the testing tagged version of Vaultwarden. > But if you are using Nix, then no version there will fix your issue. > Okay will wait for the next release 👍 thanks
Author
Owner

@BlackDex commented on GitHub:

Use testing to see if that helps.

@BlackDex commented on GitHub: Use testing to see if that helps.
Author
Owner

@mannp commented on GitHub:

Use testing to see if that helps.

I've tried the beta bitwarden client if that is what you mean by testing, but that made no difference, neither the pre release version they released today either.

I use NixOS module, which pulls off the official vaultwarden releases.

@mannp commented on GitHub: > Use testing to see if that helps. I've tried the beta bitwarden client if that is what you mean by testing, but that made no difference, neither the pre release version they released today either. I use NixOS module, which pulls off the official vaultwarden releases.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/vaultwarden#287