# How to skip tls verification when getting config file over https

**URL:** <https://community.influxdata.com/t/how-to-skip-tls-verification-when-getting-config-file-over-https/32337>\
**Category:** Telegraf\
**Created:** [November 29, 2023, 3:53pm UTC](https://community.influxdata.com/t/how-to-skip-tls-verification-when-getting-config-file-over-https/32337 "2023-11-29T15:53:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![angeloonline](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/angeloonline/32/14678_2.png) [@angeloonline](https://community.influxdata.com/u/angeloonline)\
**Post date:** [November 29, 2023, 3:53pm UTC](https://community.influxdata.com/t/how-to-skip-tls-verification-when-getting-config-file-over-https/32337/1 "2023-11-29T15:53:41Z")

</div>

Hi all,  
how can skip tls verification when retrieving config file from a server when certificate is self signed or provided by Let’s encrypt?  
I got an error similar to the following :  
error loading config file [https://serverName:8086/api/v2/telegrafs/0aecdc4770aef000:](https://serverName:8086/api/v2/telegrafs/0aecdc4770aef000:) retry 0 of 3 failed connecting to HTTP config server: Get “[https://serverName:8086/api/v2/telegrafs/0aecdc4770aef000](https://serverName:8086/api/v2/telegrafs/0aecdc4770aef000)”: tls: failed to verify certificate: x509: certificate signed by unknown authority

I didn’t find any infos about this case.

Thanks

---

<div class="post-metadata">

**Author:** ![jpowers](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/jpowers/32/8569_2.png) [@jpowers](https://community.influxdata.com/u/jpowers)\
**Post date:** [November 29, 2023, 4:24pm UTC](https://community.influxdata.com/t/how-to-skip-tls-verification-when-getting-config-file-over-https/32337/2 "2023-11-29T16:24:02Z")

</div>

Hi,

I do not believe we have an ignore or disable TLS or cert verification for remote config files. I think there is good reason to not allow this given the sensitive nature of them at times.

However, if you have the cert, then I would suggest adding it to your system cert pool and I believe Telegraf will look there for it.

---

<div class="post-metadata">

**Author:** ![angeloonline](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/angeloonline/32/14678_2.png) [@angeloonline](https://community.influxdata.com/u/angeloonline)\
**Post date:** [November 29, 2023, 5:20pm UTC](https://community.influxdata.com/t/how-to-skip-tls-verification-when-getting-config-file-over-https/32337/3 "2023-11-29T17:20:23Z")

</div>

Hi,  
I’ve solved adding Let’s encrypt intermediate certificate ([Chain of Trust - Let's Encrypt](https://letsencrypt.org/certificates/)) to my ubuntu cert pool:

apt-get install ca-certificates ca-certificates-java -y  
wget [https://letsencrypt.org/certs/lets-encrypt-r3.pem](https://letsencrypt.org/certs/lets-encrypt-r3.pem) -O /usr/local/share/ca-certificates/lets-encrypt-r3.crt  
update-ca-certificates  
update-ca-certificates --fresh

---

<div class="post-metadata">

**Author:** ![angeloonline](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/angeloonline/32/14678_2.png) [@angeloonline](https://community.influxdata.com/u/angeloonline)\
**Post date:** [August 1, 2024, 9:22am UTC](https://community.influxdata.com/t/how-to-skip-tls-verification-when-getting-config-file-over-https/32337/4 "2024-08-01T09:22:13Z")

</div>

The r3 intermediate certificate has now retired. To retrieve valid certificates, always check the valid list at this URL:  
[https://letsencrypt.org/certificates/](https://letsencrypt.org/certificates/)