Self signed certificate in forwardauth

Traefik Traefik v2
1

Hi, I followed Traefik ForwardAuth Documentation - Traefik and setup "certSecret". I am using self signed certificate, But I am getting error as " x509: certificate signed by unknown authority". Can I use self signed certificate?

2

Did you try insecureSkipVerify?

3

Thanks for the reply, with insecureSkipVerify it's working. If I understand correctly, with insecureSkipVerify it won't validate the certificate, so I was trying to use the option certSecret https://doc.traefik.io/traefik/middlewares/http/forwardauth/#cert , that's not working without the insecureSkipVerify.

My forward-auth.yaml
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
name: test-auth
namespace: sample-ns
spec:
forwardAuth:
address: https://:8080/auth
tls:
certSecret: mytlscert

apiVersion: v1
kind: Secret
metadata:
name: mytlscert
namespace: sample-ns

data:
tls.crt: "cert in base 64 format="
tls.key: "key in base64 format ="

Corresponding keystore is there in authentication micro service.
If I just add "insecureSkipVerify: true" along with "certSecret: mytlscert", it will work fine, without that it's not working, I am getting error as " x509: certificate signed by unknown authority"