Answers: <p>This fixes it:</p>
  <p>Get the rancher-issuer certificate and save it:</p>
  <pre><code>kubectl get secrets -n cattle-system tls-rancher -o jsonpath='{.data.tls\.crt}' | base64 -d &gt; rancherCA.crt
  </code></pre>
  <p>Then trust it on your machines that need access to rancher:</p>
  <pre><code>sudo trust anchor rancherCA.crt
  </code></pre>
  
Answers: CC BY-SA 4.0
Answers: 2024-10-22T09:08:23.177Z
Answers: 2024-10-22T09:08:23.177Z
Answers: Bog
Body: <p>I want to use a self-signed certificate for Rancher, but instead of the Firefox error:</p>
  <pre><code>Warning: Potential Security Risk Ahead
  </code></pre>
  <p>Where I can usually accept the risk and continue, I get this:</p>
  <pre><code>Did Not Connect: Potential Security Issue
  Error Code: SEC_ERROR_UNKNOWN_ISSUER
  </code></pre>
  <hr />
  <p>The weird thing is, if I <code>kubectl port-forward -n cattle-system services/rancher-release 8443:443</code>, everything works fine and I can accept the risk and continue...</p>
  <p>How can continue to the website and is there a way to let my computer accept that self-singed certificate?</p>
  
Tags: <kubernetes><rancher><cert-manager><tls>
Title: kubernetes rancher - self singed certificate doesn't let me access the site
UserDisplayName: Bog
ThreadText: # kubernetes rancher - self singed certificate doesn't let me access the site
  
  (Asked by: username_0 on 2024-10-21)
  
  I want to use a self-signed certificate for Rancher, but instead of the Firefox error:
  
  ```
  Warning: Potential Security Risk Ahead
  
  ```
  
  Where I can usually accept the risk and continue, I get this:
  
  ```
  Did Not Connect: Potential Security Issue
  Error Code: SEC_ERROR_UNKNOWN_ISSUER
  
  ```
  
  ---
  
  The weird thing is, if I `kubectl port-forward -n cattle-system services/rancher-release 8443:443`, everything works fine and I can accept the risk and continue...
  
  How can continue to the website and is there a way to let my computer accept that self-singed certificate?
  
  **Tags:** kubernetes, rancher, cert-manager, tls
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_0 on 2024-10-22. Score: 0 | Accepted answer
  
  This fixes it:
  
  Get the rancher-issuer certificate and save it:
  
  ```
  kubectl get secrets -n cattle-system tls-rancher -o jsonpath='{.data.tls\.crt}' | base64 -d > rancherCA.crt
  
  ```
  
  Then trust it on your machines that need access to rancher:
  
  ```
  sudo trust anchor rancherCA.crt
  
  ```
  
  
  ---
  
  