# Adding certificates to truststore?

**URL:** <https://forum.ansible.com/t/adding-certificates-to-truststore/25627>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [September 28, 2017, 5:57pm UTC](https://forum.ansible.com/t/adding-certificates-to-truststore/25627 "2017-09-28T17:57:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Nick\_Klauer](https://avatars.discourse-cdn.com/v4/letter/n/cab0a1/32.png) [@Nick\_Klauer](https://forum.ansible.com/u/Nick_Klauer)\
**Post date:** [September 28, 2017, 5:57pm UTC](https://forum.ansible.com/t/adding-certificates-to-truststore/25627/1 "2017-09-28T17:57:52Z")

</div>

I am trying to install AWX for development purposes / demoing, etc., internally at work, but am not able to get much working, as everything I want to communicate with is behind internally-signed SSL servers.

Is there a way to include a set of trusted certificates that would allow AWX to talk to other systems without getting all of these Peer Not Authenticated errors?

---

<div class="post-metadata">

**Author:** ![matburt](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/matburt/32/3612_2.png) [@matburt](https://forum.ansible.com/u/matburt)\
**Post date:** [September 29, 2017, 1:49am UTC](https://forum.ansible.com/t/adding-certificates-to-truststore/25627/2 "2017-09-29T01:49:55Z")

</div>

We don’t have a directly supported way to go about this. You can update the container image to add these to the certificate trust store (in /etc/pkg) and then rebuild the image for your use.

This definitely sounds like something that could be automated… if you can generalize it then send us a PR, would love to have it.

---

<div class="post-metadata">

**Author:** ![Nick\_Klauer](https://avatars.discourse-cdn.com/v4/letter/n/cab0a1/32.png) [@Nick\_Klauer](https://forum.ansible.com/u/Nick_Klauer)\
**Post date:** [September 29, 2017, 1:28pm UTC](https://forum.ansible.com/t/adding-certificates-to-truststore/25627/3 "2017-09-29T13:28:21Z")

</div>

I’ll have to take a look at where this would be added. I know that for some other things in-house, I’ve been able to get by with the following two lines:

`COPY additional_certs/* /etc/pki/ca-trust/source/anchors/ RUN update-ca-trust force-enable && update-ca-trust extract && update-ca-trust`