# Adding local Root CA Cert to AWX K3s

**URL:** <https://forum.ansible.com/t/adding-local-root-ca-cert-to-awx-k3s/36990>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [August 16, 2022, 12:16am UTC](https://forum.ansible.com/t/adding-local-root-ca-cert-to-awx-k3s/36990 "2022-08-16T00:16:51Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gregory\_Machin](https://avatars.discourse-cdn.com/v4/letter/g/e5b9ba/32.png) [@Gregory\_Machin](https://forum.ansible.com/u/Gregory_Machin)\
**Post date:** [August 16, 2022, 12:16am UTC](https://forum.ansible.com/t/adding-local-root-ca-cert-to-awx-k3s/36990/1 "2022-08-16T00:16:51Z")

</div>

Hi ,

I have AWX running in K3s and I’m configuring LDAP authentication and would prefer to use SSL.

I’m currently getting :  
django\_auth\_ldap Caught LDAPError while authenticating : SERVER\_DOWN({‘result’: -1, ‘desc’: “Can’t contact LDAP server”, ‘ctrls’: , ‘info’: ‘error:0A000086:SSL routines::certificate verify failed (unable to get local issuer certificate)’})

I have identified that the certificate used by the LDAP service is from our internal Certificate Authority.

How do I install the Root Certificate to resolve this issue ?

Thank you  
G

---

<div class="post-metadata">

**Author:** ![Gregory\_Machin](https://avatars.discourse-cdn.com/v4/letter/g/e5b9ba/32.png) [@Gregory\_Machin](https://forum.ansible.com/u/Gregory_Machin)\
**Post date:** [August 16, 2022, 2:48am UTC](https://forum.ansible.com/t/adding-local-root-ca-cert-to-awx-k3s/36990/2 "2022-08-16T02:48:17Z")

</div>

I tried this :  
[awx-on-k3s/trust-custom-ca.md at main · kurokobo/awx-on-k3s (github.com)](https://github.com/kurokobo/awx-on-k3s/blob/main/tips/trust-custom-ca.md)

and that changed the error  
django\_auth\_ldap Caught LDAPError while authenticating : SERVER\_DOWN({‘result’: -1, ‘desc’: “Can’t contact LDAP server”, ‘errno’: 115, ‘ctrls’: , ‘info’: ‘Operation now in progress’})

I used ldapwhoami to confirm that the BInd username and password are correct.

Any thoughts ?

---

<div class="post-metadata">

**Author:** ![Gregory\_Machin](https://avatars.discourse-cdn.com/v4/letter/g/e5b9ba/32.png) [@Gregory\_Machin](https://forum.ansible.com/u/Gregory_Machin)\
**Post date:** [August 17, 2022, 4:49am UTC](https://forum.ansible.com/t/adding-local-root-ca-cert-to-awx-k3s/36990/3 "2022-08-17T04:49:20Z")

</div>

Resolved, installed the local CA Root and intermediate certificates using the following instructions [awx-on-k3s/trust-custom-ca.md at main · kurokobo/awx-on-k3s (github.com)](https://github.com/kurokobo/awx-on-k3s/blob/main/tips/trust-custom-ca.md)

If you need to get these certificate from an existing Windows machine you need to export in BASE64, as this is the same as PEM.

G