<p>This fixes it:</p>
<p>Get the rancher-issuer certificate and save it:</p>
<pre><code>kubectl get secrets -n cattle-system tls-rancher -o jsonpath='{.data.tls\.crt}' | base64 -d &gt; rancherCA.crt
</code></pre>
<p>Then trust it on your machines that need access to rancher:</p>
<pre><code>sudo trust anchor rancherCA.crt
</code></pre>

CC BY-SA 4.0
2024-10-22T09:08:23.177Z
2024-10-22T09:08:23.177Z
Bog
<p>I want to use a self-signed certificate for Rancher, but instead of the Firefox error:</p>
<pre><code>Warning: Potential Security Risk Ahead
</code></pre>
<p>Where I can usually accept the risk and continue, I get this:</p>
<pre><code>Did Not Connect: Potential Security Issue
Error Code: SEC_ERROR_UNKNOWN_ISSUER
</code></pre>
<hr />
<p>The weird thing is, if I <code>kubectl port-forward -n cattle-system services/rancher-release 8443:443</code>, everything works fine and I can accept the risk and continue...</p>
<p>How can continue to the website and is there a way to let my computer accept that self-singed certificate?</p>

<kubernetes><rancher><cert-manager><tls>
kubernetes rancher - self singed certificate doesn't let me access the site
Bog
# kubernetes rancher - self singed certificate doesn't let me access the site

(Asked by: username_0 on 2024-10-21)

I want to use a self-signed certificate for Rancher, but instead of the Firefox error:
Warning: Potential Security Risk Ahead

Where I can usually accept the risk and continue, I get this:
Did Not Connect: Potential Security Issue
Error Code: SEC_ERROR_UNKNOWN_ISSUER


The weird thing is, if I kubectl port-forward -n cattle-system services/rancher-release 8443:443, everything works fine and I can accept the risk and continue...
How can continue to the website and is there a way to let my computer accept that self-singed certificate?

**Tags:** kubernetes, rancher, cert-manager, tls


---

## 1 answers

### Answer by username_0 on 2024-10-22. Score: 0 | Accepted answer

This fixes it:
Get the rancher-issuer certificate and save it:
kubectl get secrets -n cattle-system tls-rancher -o jsonpath='{.data.tls\.crt}' | base64 -d > rancherCA.crt

Then trust it on your machines that need access to rancher:
sudo trust anchor rancherCA.crt


---

