Skip to content

[Bug]: Unable to use sso service with corporate CA #1287

@thomas-illiet

Description

@thomas-illiet

Hello @crivetimihai,

I'm soon going on vacation and will create multiple PRs to fix the Helm configuration.

In the meantime, I'm facing an issue while configuring the SSO service.
My company uses a custom CA Root, and during login I get the following error:

certificate verify failed: unable to get issuer certificate

To try to resolve this, I added the following configuration to my Dockerfile:

ENV REQUESTS_CA_BUNDLE="/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"
COPY certs/application.crt /etc/pki/ca-trust/source/anchors/application.crt
COPY certs/root.crt /etc/pki/ca-trust/source/anchors/root.crt
RUN update-ca-trust
RUN . /app/.venv.bin/activate && \
    cat /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem >> `python -m certifi`

After this operation, both the system and certifi certificates seem to be configured successfully.
However, the SSO service still doesn’t allow me to log in 😅

Do you have any advice or insight on how to properly configure the SSO service with a custom CA Root? or implement feature to allow to skip certificate ( bhaaaaa not goood idea :D )

kind regards
Tom

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingtriageIssues / Features awaiting triage

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions