OIDC and self signed server certificates - how to configure SSL?

Support
#1

Jmix-version: 2.2.3
When trying to integrate a Jmix test application with a self hosted Authentik server which uses a self signed server certificate - signed by a local CA - I always got SSL-errors when the application tried to reach the SSL-protected configuration endpoints of Authentik. It was the typical type of error for the certificate chain of trust not being verifiable.

I tried numerous tips in the internet to solve this type of issues with Spring and Spring Boot applications. I wanted to provide to the application an alternative trust store. I had no success.

Only importing the CA-certificate into the cacerts store of the executing JRE solved my problem.
Are there alternative ways to make the CA-cert known to the jmix-application in conjunction with OIDC ?

#3

Hello @herbert,

For self-signed certificates, a reliable workaround is to import the certificate into the cacerts store.

But this option is not recommended. It’s better to fix the problem with the certificate itself, for example, get a free certificate from Let’s Encrypt for Authentik server.

Regards,
Nikita