# Do not validate TLS certificate do not have any effect in webui **URL:** \ **Category:** Support\ **Created:** [October 25, 2021, 2:05pm UTC](https://kopia.discourse.group/t/do-not-validate-tls-certificate-do-not-have-any-effect-in-webui/705 "2021-10-25T14:05:10Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![devzwf](https://yyz2.discourse-cdn.com/free1/user_avatar/kopia.discourse.group/devzwf/32/245_2.png) [@devzwf](https://kopia.discourse.group/u/devzwf)\ **Post date:** [October 25, 2021, 2:05pm UTC](https://kopia.discourse.group/t/do-not-validate-tls-certificate-do-not-have-any-effect-in-webui/705/1 "2021-10-25T14:05:10Z")
> Currently the only option is to disable TLS verification completely (–disable-tls-verification), a better solution would be to support specifying custom ca PEM file for each S3 blob provider connection. PRs to implement this are welcome. the “Do not validate TLS certificate” option in the web-ui seems to be ignore… is it a bug or am i missing something ? so is there a way to activate this anywhere else , i am using the official docker image Note : i realised after the fact i comment on github after you close so i decide to post in forum… sorry if i am doing all wrong way… ---
**Author:** ![devzwf](https://yyz2.discourse-cdn.com/free1/user_avatar/kopia.discourse.group/devzwf/32/245_2.png) [@devzwf](https://kopia.discourse.group/u/devzwf)\ **Post date:** [October 29, 2021, 9:43pm UTC](https://kopia.discourse.group/t/do-not-validate-tls-certificate-do-not-have-any-effect-in-webui/705/2 "2021-10-29T21:43:16Z")
ok tried the following and it work so definitively something with the web ui who dod not seem to use the “Do not validate TLS certificate” ` docker exec -t /app/kopia repository connect s3 --bucket=kopia --access-key= --secret-access-key= --endpoint= --disable-tls-verification` ---
**Author:** ![devzwf](https://yyz2.discourse-cdn.com/free1/user_avatar/kopia.discourse.group/devzwf/32/245_2.png) [@devzwf](https://kopia.discourse.group/u/devzwf)\ **Post date:** [October 30, 2021, 2:34am UTC](https://kopia.discourse.group/t/do-not-validate-tls-certificate-do-not-have-any-effect-in-webui/705/3 "2021-10-30T02:34:22Z")
so for now , i run the docker exce repo connect command from the host and then restart the container that’s give me access to the repo… i did a snapshot and change the policy to do a scheduling snapshot not ideal but work for now ---
**Author:** ![jkowalski](https://yyz2.discourse-cdn.com/free1/user_avatar/kopia.discourse.group/jkowalski/32/3_2.png) [@jkowalski](https://kopia.discourse.group/u/jkowalski)\ **Post date:** [November 18, 2021, 3:49pm UTC](https://kopia.discourse.group/t/do-not-validate-tls-certificate-do-not-have-any-effect-in-webui/705/4 "2021-11-18T15:49:38Z")
This is now fixed. Thanks for the report. ---
**Author:** ![devzwf](https://yyz2.discourse-cdn.com/free1/user_avatar/kopia.discourse.group/devzwf/32/245_2.png) [@devzwf](https://kopia.discourse.group/u/devzwf)\ **Post date:** [November 18, 2021, 10:38pm UTC](https://kopia.discourse.group/t/do-not-validate-tls-certificate-do-not-have-any-effect-in-webui/705/5 "2021-11-18T22:38:03Z")
Thanks Jarek i will test to report back in which version it is fixed ? ---
**Author:** ![jkowalski](https://yyz2.discourse-cdn.com/free1/user_avatar/kopia.discourse.group/jkowalski/32/3_2.png) [@jkowalski](https://kopia.discourse.group/u/jkowalski)\ **Post date:** [November 19, 2021, 5:14am UTC](https://kopia.discourse.group/t/do-not-validate-tls-certificate-do-not-have-any-effect-in-webui/705/6 "2021-11-19T05:14:28Z")
Latest unstable or kopia-test-builds ---
**Author:** ![Cal](https://avatars.discourse-cdn.com/v4/letter/c/f1d935/32.png) [@Cal](https://kopia.discourse.group/u/Cal)\ **Post date:** [January 1, 2024, 3:22pm UTC](https://kopia.discourse.group/t/do-not-validate-tls-certificate-do-not-have-any-effect-in-webui/705/7 "2024-01-01T15:22:58Z")
Does kopia’s S3 library use the system’s trusted certificate store or does it include it’s own list of trusted certificates? I get temporary connection errors at B2 (using S3) and I suspect it’s related to the new TLS certificate some of BB’s servers got lately are not trusted in the kopia version I’m running (0.12.1) I’m running Windows.