# Certificate trust of openid idp from dashboards application

**URL:** https://forum.opensearch.org/t/certificate-trust-of-openid-idp-from-dashboards-application/8308
**Category:** OpenDistro
**Tags:** troubleshoot
**Created:** [January 14, 2022, 4:11pm UTC](https://forum.opensearch.org/t/certificate-trust-of-openid-idp-from-dashboards-application/8308 "2022-01-14T16:11:00Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![mhorvath](https://avatars.discourse-cdn.com/v4/letter/m/7ab992/32.png) [@mhorvath](https://forum.opensearch.org/u/mhorvath)
#### Post date: [January 14, 2022, 4:11pm UTC](https://forum.opensearch.org/t/certificate-trust-of-openid-idp-from-dashboards-application/8308/1 "2022-01-14T16:11:00Z")

</div>

I am receiving the following error on startup of Dashboards:

Detected an unhandled Promise rejection. Error: Failed when trying to obtain the endpoints from your IdP

Further up the log I can see that there was an error for a self signed certificate in certificate chain when trying to reach my idp configuration for openid.

For context, I am behind a corporate firewall that intercepts traffic and signs it with our own root ca. I have added that ca to the trust store for the host, and when I curl [https://accounts.google.com/.well-known/openid-configuration](https://accounts.google.com/.well-known/openid-configuration) I receive no errors regarding the certificate.

I have tried adding the trust store to the opensearch configuration of my idp domain without any change. This seems to be coming from dashboards instead.

Does dashboards use a separate trust store? Is there a way to specify the trust store for openid in the dashboards configuration?

The parameters lists in [OpenID Connect - OpenSearch documentation](https://opensearch.org/docs/latest/security-plugin/configuration/openid-connect/#configuration-parameters) do not seem to provide a way to modify the trust store being used when requesting the idp configuration information.

Opensearch 1.2.3  
Dashboards 1.2.0

---

<div class="post-metadata">

### Author: ![kris](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/kris/32/2208_2.png) [@kris](https://forum.opensearch.org/u/kris)
#### Post date: [February 7, 2023, 6:45pm UTC](https://forum.opensearch.org/t/certificate-trust-of-openid-idp-from-dashboards-application/8308/2 "2023-02-07T18:45:50Z")

</div>


