Zrok Controller certificate error when using public CAs on openziti controller

[markamind]

@lombardoja

x509: certificate signed by unknown authority

This specific error reminds me of a past problem that I have experienced.

Have you added the public certificate authority to the ziti controller?

There is a video that @TheLumberjack did a while ago.. and includes all of the instructions.. I would be interested to know if this resolves your problem.

Creating Endpoint with your own Certificate Authority

Ok. The video is below. The key is the name of the identity. It needed to follow the “[caName]-[commonName]” format or else it wouldn’t connect. Also the api paths were no longer valid. Good luck - hopefully this helps [Using 3rd Party CAs with Ziti CLI, and ZAC] Here are the full instruction set - it’s quite long and ‘dense’… [Edited - ZITI_PKI] # generate a new CA ca_name="new_ca_$(date +"%H%M%S")" ca_dir=${ZITI_PKI}/$ca_name echo "New CA is named : ${ca_name}" echo "New CA d…