CODEWITHSUNDEEP
azuresslazure-aks
Nilave Chakraborty
Nilave Chakraborty

Reputation: 3

Azure KeyVault generated certifcate is showing Not Valid in Browser

Created a self signed certificate in Azure KeyVault as below with DNS

Azure KeyVault Certificate

Have added the certificate to Azure Kubernetes Service as a secret using secret-store-csi-driver and added to ingress

Problem is while opening the DNS in browser it shows certificate is not valid as below

Certificate Not valid

The Certificate is already added to Trusted store and shows as below

Certificate Details

Certificate Details

Also, the certificate in browser is the one in Azure Keyvault certificate as evident from the validity date

What could be the issue?

Upvotes: 0

Views: 862

Answers (1)

Philip Welz
Philip Welz

Reputation: 2807

When you use self sign a certificate, your Operating System or Browser wont trust this Cert, as it is self signed and considered insecure for the Internet.

You need to use a Cert from a valid Certification Authority or import your CA root cert that created the cert into your OS or Browser. But every user need to so this.

A better approach is Cert-Manager ff you are using AKS. Cert-Manager can issue certificates from LetsEncrypt. Here is a workflow from Microsoft for this.

Upvotes: 3

Related Questions